Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AT6GvE8BDL4hZAuspKqXKVUNlX4.roa
File:                     AT6GvE8BDL4hZAuspKqXKVUNlX4.roa (raw, json)
Hash identifier:          fWmuROtClW0L0hAGNe8UzOoK6cyg4HhatBmiI6KRuwI=
Subject key identifier:   01:3E:86:BC:4F:01:0C:BE:21:64:0B:AC:A4:AA:97:29:55:0D:95:7E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A596E21E8A87D835A7C044DAE3F96F6A2
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AT6GvE8BDL4hZAuspKqXKVUNlX4.roa
Signing time:             Sun 03 Sep 2023 05:05:04 +0000
ROA not before:           Sun 03 Sep 2023 05:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:596d:d39a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:59:6e:21:e8:a8:7d:83:5a:7c:04:4d:ae:3f:96:f6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  3 05:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=013e86bc4f010cbe21640baca4aa9729550d957e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:ed:31:1d:de:d8:4e:92:91:45:e6:af:f4:
                    46:0e:1d:b8:0d:5f:8a:04:25:dd:f6:25:ae:86:3e:
                    6f:9b:b4:9d:1f:bc:10:7a:ca:31:ff:9c:07:87:ac:
                    31:cc:74:59:25:66:c8:06:ac:3b:5f:da:03:0d:01:
                    43:bd:da:f2:15:3f:2c:2c:22:bb:2b:f3:07:60:d8:
                    c8:ae:3a:1d:95:9e:11:80:92:35:4f:40:4b:ba:9f:
                    05:ae:31:35:57:2a:cd:3e:34:aa:e3:a3:24:d2:ff:
                    97:b6:e6:b5:dc:4c:ad:f0:e8:d9:48:05:b1:4f:20:
                    29:16:f3:fc:3e:af:78:6d:2e:34:d1:0f:e5:ad:93:
                    f2:1a:b3:83:e6:4d:4f:d8:c9:e3:ef:1c:d0:63:8a:
                    35:5e:e1:e8:d7:4e:21:da:6d:f4:3f:74:fd:0a:4a:
                    d5:4a:7b:1d:c6:cb:3e:28:f3:26:c2:d7:9f:62:0a:
                    97:90:da:28:81:ad:85:b0:21:d2:86:ba:83:43:e1:
                    25:3d:c6:75:aa:16:0e:c7:9e:af:b8:be:de:28:b4:
                    10:1e:3e:0d:cb:66:6a:65:50:c0:e6:4f:79:5f:6a:
                    21:02:0c:54:18:e4:9a:94:b9:75:17:27:7c:20:69:
                    f0:e8:e0:ce:87:3b:8f:55:70:ff:d7:57:e3:a5:84:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3E:86:BC:4F:01:0C:BE:21:64:0B:AC:A4:AA:97:29:55:0D:95:7E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/AT6GvE8BDL4hZAuspKqXKVUNlX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:82:bf:89:d1:ab:0e:d7:0d:08:1a:a3:67:b4:c4:de:83:
         b6:50:5f:3f:45:ee:e4:da:66:99:1f:c6:16:7f:09:c2:48:d9:
         2b:43:ab:17:08:ae:8c:ac:9b:f8:26:ac:08:d0:a9:8f:ec:83:
         5b:03:2d:bc:e5:8e:c7:6f:e6:d3:10:22:91:ee:de:87:b3:31:
         03:8b:f1:b4:c0:eb:e7:39:75:ff:13:fb:a1:d3:4c:94:da:2b:
         1d:ad:6c:44:1f:bb:60:b0:ca:9e:20:2f:de:13:d7:55:0e:40:
         27:1a:07:ec:6a:4c:a0:69:5a:61:f4:ad:b5:c5:65:8c:7c:6a:
         85:ac:8e:13:96:e2:8d:c2:42:ad:af:23:8a:ae:49:f6:66:6d:
         ca:7f:93:e2:81:0f:07:77:b7:a0:dd:5b:60:5b:f1:4d:34:a1:
         41:e3:8a:0b:86:b3:5f:28:f5:78:cf:19:e0:a3:72:07:47:c6:
         f3:f8:1b:c2:08:5b:9a:30:5c:1c:d3:77:7e:79:37:62:de:50:
         6a:79:e2:76:45:9c:21:17:2f:fb:57:b2:82:d7:50:ad:64:e4:
         16:9d:aa:8b:c1:32:34:7f:0e:13:69:e7:39:74:15:60:d2:b3:
         f9:5b:65:71:86:28:ba:e2:3c:00:91:c4:de:7b:8a:da:33:23:
         74:25:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----