Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/z-9yV7zfEepQRgEqF8jlRiEuJgE.roa
File:                     z-9yV7zfEepQRgEqF8jlRiEuJgE.roa (raw, json)
Hash identifier:          Xo4MvFGOi16ygSYQEmTPufEPxEoS11CCSRR6YB9+rEA=
Subject key identifier:   CF:EF:72:57:BC:DF:11:EA:50:46:01:2A:17:C8:E5:46:21:2E:26:01
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A71B75288AE3C17E4A876F473DAEBC4AD
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/z-9yV7zfEepQRgEqF8jlRiEuJgE.roa
Signing time:             Thu 07 Sep 2023 22:15:54 +0000
ROA not before:           Thu 07 Sep 2023 22:15:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:71:b7:52:88:ae:3c:17:e4:a8:76:f4:73:da:eb:c4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 22:15:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cfef7257bcdf11ea5046012a17c8e546212e2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:c4:45:b3:01:d9:24:27:34:3b:fd:5a:60:
                    13:db:7b:fb:26:80:1a:dc:a7:65:5a:7b:5e:b1:7b:
                    23:fc:d8:bc:df:b9:77:79:e8:bf:54:56:6d:6f:6d:
                    ac:d5:63:69:71:8e:97:d0:6e:05:49:e9:8b:57:df:
                    4a:c6:50:aa:8b:c1:42:75:1e:ed:1e:a5:89:8f:81:
                    b6:b5:62:e4:a5:a4:94:9b:f2:e0:55:05:af:8b:f1:
                    c8:30:6b:0a:4c:d1:2c:fc:50:e2:2e:23:18:73:35:
                    4c:e2:0c:c4:36:6c:ad:32:46:d5:95:ac:bf:99:4a:
                    d9:fa:be:4b:44:3a:a1:40:9c:ec:54:4e:38:b8:86:
                    50:89:bd:16:07:bf:1e:98:16:78:87:90:ef:b7:3c:
                    f9:b8:5a:a6:2b:8f:b0:b6:dd:7c:5f:90:5b:5c:e5:
                    49:07:24:7d:d5:bb:bb:bc:8f:be:89:01:4d:07:ae:
                    90:a3:14:b4:ce:59:6c:77:72:cd:9b:50:4e:89:7e:
                    75:05:76:2b:ab:e5:90:28:c1:16:78:4e:ff:41:2e:
                    e8:ff:56:1b:a4:c5:e5:42:a7:91:ad:51:a9:36:31:
                    b9:a8:e3:f3:3b:cc:ea:e0:55:d6:b8:27:68:f2:df:
                    7f:49:7c:e0:4e:d6:38:88:fb:6f:fe:30:58:a6:11:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:72:57:BC:DF:11:EA:50:46:01:2A:17:C8:E5:46:21:2E:26:01
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/z-9yV7zfEepQRgEqF8jlRiEuJgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:47:32:95:0c:9c:c5:68:c3:c8:c8:a7:98:03:50:3c:17:61:
         02:11:66:5a:5f:05:76:ce:c7:f4:e1:0d:87:c5:47:4a:06:94:
         f3:3a:1b:2d:7c:63:73:4c:bc:ff:e9:34:b5:93:d0:1f:b2:a5:
         ef:ba:fd:3b:8f:73:f7:7e:01:32:01:c1:ac:b6:55:96:c1:c0:
         3c:71:73:56:21:bb:46:3f:11:38:7c:2e:73:98:9d:f6:63:03:
         df:c2:e9:c7:e1:4b:fb:8a:a1:52:94:24:1d:1d:95:ba:ad:95:
         06:63:55:8b:d0:26:d9:9c:c6:0c:94:46:e9:00:6e:fe:55:18:
         95:12:cd:4a:96:51:f6:f6:2e:3e:d6:c8:93:d5:20:cd:23:a9:
         a3:7f:9f:06:0d:29:2d:e0:c2:44:62:1a:4f:72:0f:07:e8:80:
         9d:c7:69:2a:8f:8f:13:79:a8:3b:08:58:d3:e7:ce:e5:4b:5e:
         09:14:1f:39:9e:bc:0f:93:10:9b:b4:45:e3:9e:7f:66:fe:c2:
         a1:e1:ac:2d:4f:56:80:87:33:4e:b9:2c:6d:1b:6d:fc:fc:8e:
         3e:f2:50:e1:b6:24:ca:d6:73:b6:ca:94:66:28:8c:7f:c6:f3:
         21:83:8e:00:9d:7f:e3:a7:3d:db:e5:11:bd:f0:e4:d2:31:6a:
         5c:0c:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----