Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6nzX3GvLKtX6IPfOnBgNirErVs0.roa
File:                     6nzX3GvLKtX6IPfOnBgNirErVs0.roa (raw, json)
Hash identifier:          vmisWoGdpf5vY1XfxBsux/+NT/ipHW8pp50rfQ/19bg=
Subject key identifier:   EA:7C:D7:DC:6B:CB:2A:D5:FA:20:F7:CE:9C:18:0D:8A:B1:2B:56:CD
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4DD9A7ED453CF115BE040CE38C1474BC
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6nzX3GvLKtX6IPfOnBgNirErVs0.roa
Signing time:             Thu 31 Aug 2023 23:07:04 +0000
ROA not before:           Thu 31 Aug 2023 23:07:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:4dd9:78a0/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4d:d9:a7:ed:45:3c:f1:15:be:04:0c:e3:8c:14:74:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 23:07:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea7cd7dc6bcb2ad5fa20f7ce9c180d8ab12b56cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:a9:c9:7c:18:97:3c:56:3c:39:c5:62:88:
                    71:30:5e:5b:b3:aa:2e:a7:58:db:a3:ac:99:b3:e5:
                    68:45:db:34:90:7e:a4:e2:9a:f7:3a:2c:07:3e:31:
                    36:03:67:e2:e3:72:1d:d1:61:b2:a7:2a:34:e5:3b:
                    d0:42:60:03:29:2e:12:b2:4c:b5:41:77:f7:89:b9:
                    1e:43:bf:63:e8:97:2b:fc:64:01:26:f9:b5:42:e7:
                    d3:fe:18:b8:7e:1b:3e:fd:f3:1b:3a:05:d6:e5:f3:
                    2b:c1:6d:c0:a5:d4:f7:0d:21:23:d0:c1:ed:79:58:
                    c4:11:12:b1:9e:90:32:b1:ff:a0:59:83:76:a5:df:
                    aa:2a:5d:39:36:e2:f3:1c:07:38:23:a0:a3:15:17:
                    cd:43:47:f6:83:bf:bc:8e:f9:b0:19:cd:09:fd:57:
                    6e:9f:ae:77:f4:88:40:fe:ef:ad:ea:e7:0f:31:05:
                    ea:76:f9:fb:46:26:a6:f1:70:e2:59:a6:f2:64:70:
                    8d:5d:3f:12:54:7e:f6:20:e6:bb:60:ab:5e:4f:75:
                    b5:96:e2:3c:86:3d:33:dd:68:f0:a7:cd:42:a4:8c:
                    cf:ce:0f:eb:c6:ac:1b:cc:5c:4f:bf:f2:ff:37:38:
                    88:74:eb:13:c9:0e:53:b2:9e:1f:7b:65:94:a0:cb:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7C:D7:DC:6B:CB:2A:D5:FA:20:F7:CE:9C:18:0D:8A:B1:2B:56:CD
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/6nzX3GvLKtX6IPfOnBgNirErVs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:d4:bd:af:38:b6:bb:45:b5:be:ec:0b:5f:82:9b:fe:c0:
         2e:53:fc:aa:0f:06:27:df:8c:88:5d:a4:4f:4b:23:bb:45:8b:
         c4:d7:1a:40:b8:f2:b5:ea:ef:fe:89:e9:0b:36:4f:67:9f:d6:
         c2:60:53:f3:2d:ce:6a:01:ed:3e:78:92:67:8b:c7:a5:9f:9c:
         c9:e9:d0:3a:b5:bf:f9:ee:45:57:e3:89:ee:77:f2:e4:47:44:
         d6:d3:c0:2d:71:bd:50:db:1d:d4:b1:51:3e:00:d2:e6:fb:85:
         1a:38:79:10:69:8f:f9:21:2c:02:86:28:90:ee:99:f9:65:1f:
         66:71:09:2c:40:ac:68:58:2e:a8:da:96:c5:1a:46:6c:a7:40:
         10:0e:87:eb:c6:64:82:4d:13:42:bf:0b:b2:81:b7:f9:9a:cb:
         56:38:b0:8f:8a:e7:a3:75:87:d0:a8:de:83:cf:34:39:56:d1:
         9a:2a:69:46:25:5d:18:63:ff:9a:a1:18:ba:1a:97:02:4d:49:
         39:cf:a9:0a:38:c5:aa:d0:4d:45:02:06:9e:96:74:f1:5c:77:
         7c:e3:ee:47:af:08:44:27:04:dd:32:cf:5f:16:4b:ed:5d:56:
         fb:9d:15:a0:80:5e:56:51:8c:ad:51:2e:bc:e5:aa:39:29:cc:
         b2:1f:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----