Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9kwItjoCTC45gnYHzSYD79Ha7h0.roa
File:                     9kwItjoCTC45gnYHzSYD79Ha7h0.roa (raw, json)
Hash identifier:          EBDOoNb3skhitHgaE3Va092EVi/9KEiIMWG2oAuOvXY=
Subject key identifier:   F6:4C:08:B6:3A:02:4C:2E:39:82:76:07:CD:26:03:EF:D1:DA:EE:1D
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9BF3A3BBFA0D7E8C436987DCD752284E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9kwItjoCTC45gnYHzSYD79Ha7h0.roa
Signing time:             Sat 16 Sep 2023 03:05:50 +0000
ROA not before:           Sat 16 Sep 2023 03:05:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9bf3:bb9/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9b:f3:a3:bb:fa:0d:7e:8c:43:69:87:dc:d7:52:28:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 03:05:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f64c08b63a024c2e39827607cd2603efd1daee1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:3a:4d:9b:07:97:96:f0:90:40:2a:c0:60:
                    4e:d6:b4:87:27:be:ac:6c:cd:32:06:f9:42:56:58:
                    6b:70:a0:f5:4e:60:3c:c3:37:e0:b1:97:f5:3b:14:
                    ab:2b:9a:11:cd:f0:9f:5f:00:3a:bd:c8:0e:74:31:
                    30:7c:68:dd:7c:e7:37:9a:be:83:d6:d7:c5:2a:94:
                    97:53:d0:d4:15:2b:70:19:16:49:b5:e4:bd:b2:6a:
                    1b:74:ee:55:9e:69:6d:49:b1:f7:8f:4e:fe:28:c7:
                    d9:68:48:b7:4e:22:4c:cf:4f:b0:c9:f9:96:c3:ae:
                    6a:6e:96:7d:b7:b6:e3:65:31:84:00:1a:2c:df:71:
                    ba:cb:ef:5a:8b:74:db:b1:49:90:a0:82:79:1e:b3:
                    6e:b7:38:8f:21:70:32:79:2c:10:45:02:b1:ba:02:
                    32:75:38:c7:8b:1d:ff:3e:f1:a9:66:32:b6:d7:82:
                    d8:ae:af:e3:25:bc:58:7f:d8:5d:9e:c4:d7:b8:ad:
                    0f:48:ce:3b:a4:1a:b0:44:6f:ac:3b:ac:1e:ee:8c:
                    60:ff:f7:de:a7:a0:ac:ef:13:3a:29:72:0e:ed:dc:
                    60:fc:e5:a0:d3:42:39:8a:37:5d:eb:bb:5d:da:7e:
                    ef:c4:34:38:5b:73:5f:61:51:4e:7c:60:91:6c:80:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:08:B6:3A:02:4C:2E:39:82:76:07:CD:26:03:EF:D1:DA:EE:1D
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9kwItjoCTC45gnYHzSYD79Ha7h0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:57:f6:a8:50:6d:bc:16:70:be:ce:e6:fc:21:60:29:50:85:
         64:86:61:9a:80:a9:53:14:cb:b9:fb:ac:ae:0d:9a:d2:db:12:
         5a:ac:8c:22:e7:f9:c4:6d:3f:fe:e7:bb:e0:16:76:ef:2b:08:
         3a:58:32:84:38:b6:3a:3f:17:66:c3:de:ce:79:e7:28:3d:69:
         7b:17:54:59:36:8f:05:16:46:6f:b3:01:82:53:b7:66:ca:b7:
         4c:dc:cb:34:88:43:fa:1e:48:64:ae:7b:f3:69:82:f4:03:c0:
         56:a5:7a:09:d4:ac:76:d7:73:be:e3:05:90:21:a2:ce:9e:15:
         88:e3:ab:1b:5b:95:44:fc:71:4d:3c:ef:45:5a:2e:9c:f5:a7:
         3b:74:a7:a8:cf:a5:51:ad:28:4d:50:ca:d0:c5:00:0c:1c:08:
         6a:2c:7c:d3:ea:36:8e:38:fd:63:04:ed:33:55:aa:61:ed:e5:
         34:dd:9a:ec:ac:c8:14:67:51:8f:0c:50:c8:54:dc:64:21:85:
         78:64:95:60:e6:a9:49:fd:b8:4f:9c:e1:ae:5f:c6:70:01:a6:
         d3:93:3d:83:4e:8d:da:38:c0:04:51:b8:5e:45:4a:76:30:51:
         36:ef:6d:78:25:44:64:c7:f6:e2:6c:b2:a6:f5:b2:06:34:09:
         2f:72:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----