Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vSvB4JMPv_OjKMEVschCE4AWjSY.roa
File:                     vSvB4JMPv_OjKMEVschCE4AWjSY.roa (raw, json)
Hash identifier:          X8yQQ3Nu0iCtYn0N4xEslRfkhs78RQp9eudWuLMpXiw=
Subject key identifier:   BD:2B:C1:E0:93:0F:BF:F3:A3:28:C1:15:B1:C8:42:13:80:16:8D:26
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A999DCC435D062165916726DC13FEAE86
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vSvB4JMPv_OjKMEVschCE4AWjSY.roa
Signing time:             Fri 15 Sep 2023 16:12:50 +0000
ROA not before:           Fri 15 Sep 2023 16:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:99:9d:cc:43:5d:06:21:65:91:67:26:dc:13:fe:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 16:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd2bc1e0930fbff3a328c115b1c8421380168d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:fd:2e:33:5c:0f:52:b1:4a:70:ce:f9:e5:
                    3a:b9:21:2d:ac:47:89:c7:e6:bd:d7:77:c7:d6:02:
                    76:54:69:03:6c:81:f6:5c:b1:80:fa:f2:37:03:34:
                    62:0a:b6:9b:95:cd:97:9e:d6:cc:fb:b9:21:eb:4c:
                    75:2c:a1:1e:fb:9d:0e:f8:c1:19:e3:c8:29:1d:23:
                    5b:f8:b1:78:83:f7:89:01:80:f9:8d:ba:00:e2:1f:
                    27:b7:16:af:80:0b:be:53:3f:ab:c9:f1:5c:5f:7a:
                    fe:a1:e3:1a:74:8c:89:aa:21:cd:7c:ea:65:81:09:
                    9a:c3:81:37:43:55:c0:af:0c:16:ea:72:2d:64:6f:
                    c6:6d:41:3f:41:65:49:be:6f:cb:26:bc:20:a0:8b:
                    85:98:30:b6:5d:96:af:2d:66:19:f0:31:de:a7:16:
                    cf:0f:ae:4a:24:e5:06:d7:c7:d6:29:12:8e:b9:8a:
                    cc:b7:82:42:6b:ae:2e:6e:04:b5:c0:93:9d:46:9e:
                    90:17:60:aa:6f:3f:94:ad:3b:b7:c7:5d:1e:5d:35:
                    47:68:4c:b9:08:6a:43:f7:52:44:ed:15:79:55:30:
                    7b:6c:d7:68:27:5f:e2:58:bb:75:51:ea:e6:27:db:
                    40:45:46:cd:1d:b1:94:70:ef:44:0a:3a:83:ad:cb:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:C1:E0:93:0F:BF:F3:A3:28:C1:15:B1:C8:42:13:80:16:8D:26
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vSvB4JMPv_OjKMEVschCE4AWjSY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:33:98:e1:65:5f:f0:32:75:21:be:f4:f9:4f:b9:2b:ab:
         da:10:9d:50:33:c1:c1:cb:15:c2:de:3c:18:b9:e6:fa:ca:53:
         c3:1f:0b:a6:76:6e:56:78:97:e8:7f:83:01:ce:20:72:67:44:
         8c:06:5b:12:65:17:e3:28:15:ab:35:bc:68:79:86:bc:e9:64:
         20:8f:a6:01:68:4b:de:5c:5e:43:49:21:5d:cb:87:66:e3:ee:
         74:b2:55:63:c3:b2:52:2a:21:7e:eb:46:09:50:4a:f9:7d:c0:
         0a:c2:7c:3c:c4:8b:99:75:9c:ca:ce:f1:f9:1c:c1:8b:51:cd:
         21:45:2d:ce:fe:8f:ca:49:15:d4:cf:47:22:59:c1:7a:b3:82:
         31:8b:98:cd:09:b2:c6:86:c0:c7:8e:7c:a4:40:52:53:92:1b:
         ed:dc:18:e7:bb:2f:3f:87:c9:18:07:17:2b:ee:71:45:a6:4e:
         24:e7:45:f8:53:5c:c6:15:4f:28:df:ba:98:63:8f:6d:68:d3:
         36:24:da:6e:4f:68:0b:4d:1a:ff:3c:bd:69:84:b5:dc:2b:40:
         33:4f:57:8a:ec:e8:79:46:5f:22:5e:17:31:47:e6:c1:9b:3f:
         48:1d:ac:68:7a:9e:39:d3:19:a1:f9:3b:e2:c2:fa:10:a4:05:
         04:7c:95:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----