Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9pvKEdgGYQXIdodjlzWAKoDJ6W4.roa
File:                     9pvKEdgGYQXIdodjlzWAKoDJ6W4.roa (raw, json)
Hash identifier:          ufMGTNApHOFg07lX6RfMEqZ2WTYOomtPCOA84n44TWQ=
Subject key identifier:   F6:9B:CA:11:D8:06:61:05:C8:76:87:63:97:35:80:2A:80:C9:E9:6E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9D05613882450F61722B0000CB8F00FE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9pvKEdgGYQXIdodjlzWAKoDJ6W4.roa
Signing time:             Sat 16 Sep 2023 08:04:50 +0000
ROA not before:           Sat 16 Sep 2023 08:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9d04:c27b/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9d:05:61:38:82:45:0f:61:72:2b:00:00:cb:8f:00:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 08:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f69bca11d8066105c87687639735802a80c9e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:2a:50:b4:d1:b3:2f:90:76:66:19:36:df:
                    5e:7e:f4:94:b1:ef:79:c9:69:c1:92:12:2a:8e:21:
                    40:06:77:1a:97:07:47:5d:12:b8:43:14:a4:35:83:
                    a8:e4:e0:85:b5:5f:2a:17:8f:04:a8:52:5c:49:eb:
                    a2:4f:ea:35:bc:3b:53:35:ee:d2:b8:e4:67:f7:b3:
                    d2:e0:a7:41:04:fd:84:d6:1f:ab:b6:70:15:fa:93:
                    f1:a9:66:78:46:1f:f9:47:0a:0f:08:7d:86:ba:c9:
                    aa:79:dc:18:02:04:bf:35:78:42:e7:f7:fa:7a:e2:
                    c4:af:93:d5:89:48:c5:84:ef:a7:35:d0:cc:73:94:
                    ca:c2:d4:45:61:3b:d2:5c:1b:90:89:18:78:57:91:
                    07:ba:b9:0d:14:e6:45:c5:74:40:e4:55:b5:da:69:
                    eb:c2:38:62:56:6e:08:97:a7:0d:fe:5b:4f:19:f0:
                    2f:bd:21:a1:ee:6e:a4:ff:3d:5b:a0:e3:8d:f8:34:
                    3c:67:ec:85:40:e6:19:af:3a:98:38:9c:8d:69:20:
                    05:18:71:f3:1d:9d:72:58:19:1e:17:e3:57:e2:bc:
                    1f:75:54:ef:b4:48:13:6a:c9:a7:39:50:8a:a4:ec:
                    a3:9b:e5:1c:c9:d8:ff:1b:1e:7c:42:5f:9e:b8:75:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:CA:11:D8:06:61:05:C8:76:87:63:97:35:80:2A:80:C9:E9:6E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/9pvKEdgGYQXIdodjlzWAKoDJ6W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:94:53:c9:20:a0:43:bd:be:1e:2f:b8:84:5a:80:b7:a0:
         64:c1:62:f2:b6:ff:3c:ce:32:08:e7:b9:ea:ae:62:cc:b9:a1:
         b0:6e:48:96:91:55:e8:4e:c3:7e:12:70:64:d7:3e:8c:cc:7a:
         58:91:8c:31:e3:43:8d:59:d3:ba:82:2e:94:71:84:da:34:7d:
         60:22:fe:6d:24:6f:28:ef:40:9d:91:4d:46:70:50:ba:5a:6a:
         13:27:48:0f:f9:4a:40:fa:9d:78:c0:56:de:d1:c1:e7:60:b1:
         62:f7:1d:21:a5:ce:38:9f:4f:8d:cf:3e:e5:11:05:81:31:fc:
         64:34:f7:36:09:42:19:9a:9d:92:8c:c8:99:c9:1a:b7:98:11:
         ae:79:2c:f8:34:57:64:b6:8d:bb:b2:b3:22:6b:c7:a4:0b:86:
         3f:a2:49:73:45:c9:1d:99:4b:b5:9d:3f:15:63:e2:94:99:f6:
         82:83:4a:0b:4d:93:65:82:58:5b:88:7d:68:bc:bc:2d:07:b8:
         5c:4b:7f:fa:e8:f4:02:fe:64:af:28:12:55:f4:e2:fb:c5:ec:
         7c:e5:d3:3e:5b:17:ca:b2:dd:ac:9c:79:dd:43:e6:e7:03:73:
         d4:47:58:2c:05:13:e5:83:40:7f:b9:81:b9:68:4e:46:a0:97:
         22:ef:4f:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqdBWE4gkUPYXIrAADLjwD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MDgwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjliY2ExMWQ4MDY2MTA1Yzg3Njg3NjM5NzM1ODAyYTgwYzllOTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgqULTRsy+QdmYZNt9efvSUse95
yWnBkhIqjiFABncalwdHXRK4QxSkNYOo5OCFtV8qF48EqFJcSeuiT+o1vDtTNe7S
uORn97PS4KdBBP2E1h+rtnAV+pPxqWZ4Rh/5RwoPCH2GusmqedwYAgS/NXhC5/f6
euLEr5PViUjFhO+nNdDMc5TKwtRFYTvSXBuQiRh4V5EHurkNFOZFxXRA5FW12mnr
wjhiVm4Il6cN/ltPGfAvvSGh7m6k/z1boOON+DQ8Z+yFQOYZrzqYOJyNaSAFGHHz
HZ1yWBkeF+NX4rwfdVTvtEgTasmnOVCKpOyjm+Ucydj/Gx58Ql+euHUJhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPabyhHYBmEFyHaHY5c1gCqAyeluMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvOXB2S0VkZ0dZUVhJZG9kamx6V0FLb0RKNlc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG1NlFPJIKBDvb4eL7iE
WoC3oGTBYvK2/zzOMgjnuequYsy5obBuSJaRVehOw34ScGTXPozMeliRjDHjQ41Z
07qCLpRxhNo0fWAi/m0kbyjvQJ2RTUZwULpaahMnSA/5SkD6nXjAVt7RwedgsWL3
HSGlzjifT43PPuURBYEx/GQ09zYJQhmanZKMyJnJGreYEa55LPg0V2S2jbuysyJr
x6QLhj+iSXNFyR2ZS7WdPxVj4pSZ9oKDSgtNk2WCWFuIfWi8vC0HuFxLf/ro9AL+
ZK8oElX04vvF7Hzl0z5bF8qy3ayced1D5ucDc9RHWCwFE+WDQH+5gbloTkaglyLv
T/Q=
-----END CERTIFICATE-----