Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BBgtYplGNpa2qkU5ytviWM-YH8c.roa
File:                     BBgtYplGNpa2qkU5ytviWM-YH8c.roa (raw, json)
Hash identifier:          Os8u698XY1JHOgZUgJObY/oREHrYP/oPptPmHpNV6/I=
Subject key identifier:   04:18:2D:62:99:46:36:96:B6:AA:45:39:CA:DB:E2:58:CF:98:1F:C7
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A87C7261319909659EFD8908B4FDAC66D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BBgtYplGNpa2qkU5ytviWM-YH8c.roa
Signing time:             Tue 12 Sep 2023 05:04:50 +0000
ROA not before:           Tue 12 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:87c6:ecfa/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:c7:26:13:19:90:96:59:ef:d8:90:8b:4f:da:c6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04182d6299463696b6aa4539cadbe258cf981fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:03:68:2d:ab:93:a2:93:52:31:5f:96:67:ab:
                    59:c1:f7:b5:27:65:b4:0c:ff:0d:0a:b5:43:8f:42:
                    2d:76:b7:be:4e:9c:e7:08:c8:54:1b:a2:f0:ea:16:
                    30:ff:4c:3c:eb:6c:f8:f1:4a:8e:5c:86:2f:b2:e4:
                    65:8a:7a:49:64:ea:2b:5d:12:17:57:93:4e:3f:e2:
                    49:26:fb:bb:4e:f8:03:74:5a:fd:7a:b4:02:d6:3d:
                    49:62:48:df:0d:f0:a0:d7:42:ef:d1:97:08:13:3e:
                    82:be:38:57:7f:6f:e1:c1:e5:03:13:0e:29:71:30:
                    83:c5:59:e0:b2:5d:41:a1:4f:f6:81:77:27:9c:6d:
                    e5:cc:f7:ad:99:fd:ce:4c:59:fb:73:0f:30:ef:4d:
                    bc:9e:4c:ef:42:28:76:e4:17:62:8a:05:70:34:1a:
                    1d:46:85:d6:ca:8d:dc:87:4f:3f:e5:99:6f:8d:58:
                    61:ab:de:3a:73:4b:4a:c0:18:96:90:cd:74:3e:64:
                    2e:d9:1d:3d:15:66:43:9c:2f:1c:15:07:c4:ed:53:
                    4c:8e:b8:8f:fd:95:85:eb:5d:9b:59:34:e9:c3:77:
                    9f:9e:5c:a2:94:90:62:70:98:6c:bf:e3:22:75:1b:
                    91:2c:90:22:b7:29:49:72:ec:cd:d5:45:a4:f4:f0:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:2D:62:99:46:36:96:B6:AA:45:39:CA:DB:E2:58:CF:98:1F:C7
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BBgtYplGNpa2qkU5ytviWM-YH8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:3e:6f:dd:46:e6:57:f0:b7:2d:89:c4:90:56:fa:ba:47:
         dd:01:89:78:f3:ed:b8:2e:af:10:cb:df:b5:99:41:56:54:d5:
         49:eb:54:d4:ba:6d:4e:f1:89:f0:35:6d:2b:3b:54:5c:20:a1:
         5e:65:01:a6:52:39:11:10:47:34:d9:1b:06:98:a6:f6:63:07:
         4c:d9:e9:c8:fb:72:35:5c:57:b3:73:9e:10:e8:c6:c4:17:ef:
         55:64:94:be:d2:99:c1:9c:fc:29:12:45:dd:8c:1f:db:85:72:
         a9:1a:b7:d1:e8:81:9a:15:53:a8:90:0e:8c:99:34:df:0c:66:
         a2:6b:9e:62:47:92:14:bf:ae:ec:28:ed:48:f4:dd:73:f9:49:
         ca:54:66:7d:8b:70:c3:a8:43:3c:dd:35:96:e5:d9:26:99:87:
         a6:24:d0:b4:b9:15:78:06:29:ed:83:9b:96:5e:c3:ca:ff:b3:
         e5:a7:60:20:34:5f:96:4b:b8:a5:08:b0:83:5b:4b:e8:ba:a4:
         de:91:d2:24:43:a6:4b:f7:bb:de:86:81:b5:f5:3d:3a:49:e7:
         53:87:fb:f8:92:d1:e3:47:40:19:89:ee:fa:f2:e7:f4:9c:81:
         c5:cb:ff:b4:e5:2f:9a:0e:f6:4f:49:6f:ac:5d:47:24:18:8f:
         c8:0b:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----