Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xpvQ0YdYevZQgLsL6yo-EZQsVq0.roa
File:                     xpvQ0YdYevZQgLsL6yo-EZQsVq0.roa (raw, json)
Hash identifier:          qsvJjphGcyVAElnb32lvH2/Uqa2GGhTkjZl/RE/qmqs=
Subject key identifier:   C6:9B:D0:D1:87:58:7A:F6:50:80:BB:0B:EB:2A:3E:11:94:2C:56:AD
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA7CA08E18E9672583BECE74CEAEC3BD9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xpvQ0YdYevZQgLsL6yo-EZQsVq0.roa
Signing time:             Mon 18 Sep 2023 10:15:50 +0000
ROA not before:           Mon 18 Sep 2023 10:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:ca:08:e1:8e:96:72:58:3b:ec:e7:4c:ea:ec:3b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 10:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c69bd0d187587af65080bb0beb2a3e11942c56ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:a8:10:17:45:54:ac:70:04:30:8e:33:de:
                    81:16:1d:66:62:43:16:14:c3:f4:bf:c5:26:44:77:
                    73:81:dd:0c:50:d1:3c:c3:be:ae:6e:af:de:87:d6:
                    d0:12:a1:0d:b0:9d:41:8f:be:21:3e:94:ed:48:89:
                    80:5b:56:1b:80:86:2d:13:1f:ec:be:62:15:92:30:
                    31:93:a6:c5:2b:05:1a:8a:3e:b1:c5:7a:c6:2e:40:
                    50:aa:32:bf:b3:4c:cf:b0:d2:16:5e:6e:aa:cc:d4:
                    5b:ba:97:a1:67:3b:a2:2d:e7:43:1b:61:ca:25:48:
                    f3:91:53:69:59:29:d8:ae:83:70:7b:82:24:19:cf:
                    dc:2a:b9:a0:4f:f7:38:e3:ef:69:98:24:a7:94:a4:
                    61:d8:b5:a2:f5:61:8f:53:58:bf:8b:f5:c6:0a:6a:
                    4a:46:1e:1a:d5:ef:ff:c6:63:d3:4e:ff:8f:59:cd:
                    47:ef:bf:ce:a3:e8:78:d0:5c:b2:3c:f6:f4:9d:d0:
                    cb:f8:ed:99:50:54:5c:bd:5b:5d:8e:42:8c:af:82:
                    00:d3:a7:ae:b5:d8:eb:0e:39:d5:67:38:15:6f:6f:
                    0a:5b:f8:e4:6e:bc:cf:19:9c:35:b6:f8:03:e5:2b:
                    c5:0c:95:c7:f9:16:61:a1:61:fc:22:85:9b:31:c5:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9B:D0:D1:87:58:7A:F6:50:80:BB:0B:EB:2A:3E:11:94:2C:56:AD
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xpvQ0YdYevZQgLsL6yo-EZQsVq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:59:ae:50:38:3b:6d:42:8f:ca:e9:9e:98:82:98:4b:ea:f5:
         aa:5c:c1:25:3a:27:29:29:e3:b4:97:2c:5b:55:2d:13:ad:54:
         d3:91:6b:b9:2b:5d:ed:8c:df:b0:cc:7d:ee:95:30:b9:fe:85:
         b7:5d:8c:2b:70:80:53:11:51:8e:0c:4c:49:72:01:13:f2:76:
         b1:86:32:d4:c1:15:d2:20:3f:bc:ac:52:93:62:85:b7:41:50:
         6f:cd:f3:68:2c:6f:2c:c1:47:3d:02:da:fe:6b:da:87:a8:17:
         5a:7e:10:dd:26:e1:41:e1:1d:80:26:d3:fc:4f:ef:a3:d0:a2:
         4d:3c:17:f3:ee:74:43:ab:6f:42:d7:03:ae:dd:b7:75:56:d2:
         19:44:4f:14:b5:e1:5b:9a:04:ce:73:da:95:3e:d9:8a:7d:4e:
         35:8e:19:c1:43:19:3a:f3:eb:b0:93:24:93:41:82:0e:c0:eb:
         6a:c9:44:a6:63:1a:ac:51:79:a3:30:1e:7c:77:f2:cd:42:1b:
         ef:4e:26:f7:a9:96:b2:9e:4b:96:63:a0:2a:64:1d:eb:b3:d2:
         6a:c4:f9:04:be:a8:e1:be:65:f6:67:ab:df:bd:9e:b7:d1:b6:
         ee:57:a6:99:91:65:41:46:51:4e:47:a7:24:3d:4e:e2:a0:3a:
         50:1c:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----