Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wP41Nd4KZD1YD8F69TBEkduSlfU.roa
File:                     wP41Nd4KZD1YD8F69TBEkduSlfU.roa (raw, json)
Hash identifier:          ocjQdXCgKvNWxuhrhB8aixakfzQ8Xn69KccuUrmfmqs=
Subject key identifier:   C0:FE:35:35:DE:0A:64:3D:58:0F:C1:7A:F5:30:44:91:DB:92:95:F5
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A71AE2AD8D197AB80D23C97F5276380AD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wP41Nd4KZD1YD8F69TBEkduSlfU.roa
Signing time:             Thu 07 Sep 2023 22:05:54 +0000
ROA not before:           Thu 07 Sep 2023 22:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:71ac:9474/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:71:ae:2a:d8:d1:97:ab:80:d2:3c:97:f5:27:63:80:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 22:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0fe3535de0a643d580fc17af5304491db9295f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:7e:43:cf:c0:81:72:36:1e:f2:fa:f1:39:
                    26:19:c4:05:a1:45:6d:b2:5d:21:23:16:6a:b4:b8:
                    20:eb:67:2e:49:19:0b:0b:bf:80:02:8e:26:56:6e:
                    27:53:af:0d:b8:1d:77:85:85:d8:44:fa:83:30:5f:
                    bb:c8:20:41:42:d0:cb:c8:1e:2f:75:96:ca:b1:06:
                    b9:76:b3:1a:16:8f:61:30:48:ba:4a:3a:50:c2:b6:
                    17:31:39:f7:73:71:3a:44:20:31:91:00:b0:53:05:
                    e1:2d:b7:e1:72:6d:58:78:ea:0d:d9:1b:30:46:76:
                    a7:ce:06:1b:8d:06:60:f0:01:93:f5:40:af:74:66:
                    17:4a:be:99:47:29:c1:ac:ea:c6:f3:36:aa:36:ad:
                    96:43:80:70:87:b6:b1:df:51:db:c8:30:c0:66:5d:
                    4b:60:87:fe:f1:8d:4b:1a:d5:64:85:56:4c:47:0f:
                    63:d5:7c:e4:bd:0b:68:dc:53:2c:10:c1:b6:7d:6f:
                    0c:ee:6f:25:16:24:2e:4d:a8:ca:fd:19:d7:68:26:
                    df:a5:5c:f0:ae:cd:06:08:9e:66:8a:9f:eb:d7:81:
                    75:e9:c0:ea:46:98:c0:40:1f:28:be:b6:28:dc:34:
                    cc:d8:5d:2c:17:19:6b:9d:f8:41:f7:aa:a9:5c:d5:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:35:35:DE:0A:64:3D:58:0F:C1:7A:F5:30:44:91:DB:92:95:F5
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wP41Nd4KZD1YD8F69TBEkduSlfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:a4:dc:67:39:87:17:57:e5:cd:14:a7:43:b0:58:72:bc:c9:
         e2:8e:75:5d:a2:5f:c6:57:ff:90:c8:45:73:3c:c1:6e:22:64:
         02:65:d2:31:f2:c1:ab:60:d9:a2:67:39:03:7c:b3:ec:fe:26:
         c7:f9:b4:9e:8a:3d:c0:28:36:d5:24:d3:8c:4f:38:34:57:33:
         7f:23:22:70:13:e0:3a:22:a4:b1:89:17:0a:be:af:11:ed:b3:
         d5:0c:fb:66:55:2f:26:b2:5e:2c:19:3b:98:87:aa:20:10:93:
         55:37:ce:b6:87:31:ab:94:3b:d6:84:4a:98:ff:1b:1c:c4:18:
         d7:97:e2:e4:60:45:86:1d:40:7d:88:8c:c0:b3:8d:88:3e:ff:
         89:a8:7b:b1:6a:22:91:31:6d:5d:a8:bd:cc:fe:90:3e:3e:08:
         d7:d2:53:22:f4:b1:50:1e:73:ab:47:54:26:e4:37:42:90:9f:
         91:0f:98:d8:09:7c:7e:33:3a:6b:f6:db:1c:53:4d:cc:ce:6d:
         2f:db:ea:29:40:58:7c:7b:ce:e9:d7:25:b1:48:97:4b:68:67:
         b1:39:18:4b:29:87:da:e0:c5:76:3d:a3:4d:2e:bb:5a:f7:78:
         89:e0:3d:de:51:90:5b:d1:7e:19:c0:a0:f7:40:02:9b:04:27:
         8a:fe:f1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----