Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9anxTK4NBfidvRZF2__49EXxtvY.roa
File:                     9anxTK4NBfidvRZF2__49EXxtvY.roa (raw, json)
Hash identifier:          jSVNQSAGVlTR5wIYLO58Tda6lIdGVgl5/ie2O3+8GqA=
Subject key identifier:   F5:A9:F1:4C:AE:0D:05:F8:9D:BD:16:45:DB:FF:F8:F4:45:F1:B6:F6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4FC72032102EC1B5DB68265AD51931A3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9anxTK4NBfidvRZF2__49EXxtvY.roa
Signing time:             Fri 01 Sep 2023 08:06:04 +0000
ROA not before:           Fri 01 Sep 2023 08:06:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:4fc6:b90c/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4f:c7:20:32:10:2e:c1:b5:db:68:26:5a:d5:19:31:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  1 08:06:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5a9f14cae0d05f89dbd1645dbfff8f445f1b6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:20:ff:e0:4b:81:eb:e6:65:20:d7:ea:a6:
                    c4:e2:6b:7b:42:90:73:0a:54:aa:a8:01:ad:2d:76:
                    cd:51:ae:c1:01:37:13:0f:14:92:c6:6c:53:47:40:
                    90:3e:d6:60:7d:46:72:a3:e7:44:f8:39:06:b3:d1:
                    c7:7f:61:65:05:bc:1a:f6:ef:f8:20:f0:63:75:26:
                    12:29:c1:c1:ef:77:cc:c8:b1:a7:bb:c3:c2:89:d4:
                    a0:4d:e8:bc:fb:71:46:9c:8b:62:7c:f2:e2:48:a1:
                    6b:c2:41:00:c4:4e:52:59:ff:52:1e:9b:48:8d:d5:
                    40:b6:4c:30:55:53:81:f3:e3:88:88:cb:3e:2b:09:
                    37:43:81:1f:13:72:e7:2d:b8:60:58:87:5e:7b:57:
                    9c:77:24:58:b3:16:f6:4c:8a:a7:65:c8:3a:6f:2f:
                    ea:ef:a8:23:1d:15:55:04:19:16:f1:bf:e1:4b:19:
                    a0:c0:18:4f:cc:59:a9:86:d1:be:8c:80:b3:b0:ad:
                    8c:ee:a3:35:86:de:a1:28:ff:ce:67:ce:6c:3b:c7:
                    e5:34:b2:9a:b7:a0:9f:58:bd:45:e3:46:3a:e1:9f:
                    48:ef:4c:05:bf:b2:51:cc:00:b5:4b:2a:b8:64:6a:
                    b8:96:40:46:75:2c:57:04:9a:71:63:96:b5:c1:e5:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A9:F1:4C:AE:0D:05:F8:9D:BD:16:45:DB:FF:F8:F4:45:F1:B6:F6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9anxTK4NBfidvRZF2__49EXxtvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:bb:69:fb:6f:06:f0:7b:ea:5c:75:2b:89:57:cb:a5:0c:
         af:52:e7:42:55:3a:40:21:00:18:e9:f4:77:49:01:8e:87:19:
         ae:09:49:81:45:31:83:15:ad:a7:0e:02:b9:7c:0c:b7:b2:50:
         c2:8b:46:ca:e4:09:00:31:9e:46:15:bb:1c:b3:31:78:5a:da:
         66:5e:39:31:d7:21:42:98:b6:49:d6:52:14:a7:58:f6:fd:28:
         fe:2c:0a:b9:5c:79:42:45:b6:64:ac:b3:7f:91:5e:3b:f2:1d:
         e1:ad:8e:56:ff:56:40:d6:4e:eb:5f:f0:6a:79:0c:af:6c:be:
         ef:0c:e8:40:10:b0:73:fa:b2:c2:6e:c2:0f:09:e0:21:23:3b:
         f4:51:02:59:3c:f1:14:e3:f9:71:2b:32:59:e5:48:4c:e8:59:
         28:95:51:af:42:78:3a:7d:2d:8c:42:3b:3f:dc:2c:50:46:fb:
         52:99:a4:f8:8c:96:7a:7c:4a:f7:1a:f1:c3:24:e8:bf:c7:27:
         d6:03:ab:1b:17:ea:8f:0a:1f:32:99:03:d1:a5:0c:bf:32:56:
         c9:b7:01:98:6c:77:6f:20:e0:91:28:ab:f7:45:8b:30:ff:e3:
         cb:b8:18:12:03:1e:b1:a6:1f:1d:a8:d1:3e:3d:bf:c5:9f:eb:
         2a:1b:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----