Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ETOe4xQm1KlLRoqH4QhaSy_KudI.roa
File:                     ETOe4xQm1KlLRoqH4QhaSy_KudI.roa (raw, json)
Hash identifier:          pc0i846TaAAPXUN6/pdKjG3VY+APQw9z037tQvMb4hw=
Subject key identifier:   11:33:9E:E3:14:26:D4:A9:4B:46:8A:87:E1:08:5A:4B:2F:CA:B9:D2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4E7E737D57AD7F00CAFCD83742D83FC7
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ETOe4xQm1KlLRoqH4QhaSy_KudI.roa
Signing time:             Fri 01 Sep 2023 02:07:04 +0000
ROA not before:           Fri 01 Sep 2023 02:07:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:4e7e:330b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4e:7e:73:7d:57:ad:7f:00:ca:fc:d8:37:42:d8:3f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  1 02:07:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11339ee31426d4a94b468a87e1085a4b2fcab9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:0a:13:a7:fd:02:20:f0:2b:f8:3e:34:52:
                    95:e9:c1:80:dd:fa:40:b5:af:ea:01:d8:ff:e5:03:
                    d3:fe:e5:7d:40:5f:d2:99:27:93:18:25:ac:34:c9:
                    c9:fe:55:2c:a2:9e:9a:41:24:77:df:88:4a:75:db:
                    80:72:a2:a2:c2:41:d1:b3:4b:38:4a:13:7e:73:49:
                    84:0a:b0:8c:03:a3:c0:59:a3:a9:8f:3d:90:76:94:
                    84:7d:ac:be:84:0c:9d:ff:58:42:19:68:5f:0b:3f:
                    e1:7b:b6:89:de:fe:ef:ad:bd:fa:df:b9:0a:6a:10:
                    c3:df:57:57:04:49:c6:60:88:0f:11:15:ef:86:79:
                    fc:21:04:48:00:8f:fa:cf:d1:db:62:60:b8:e6:c2:
                    60:78:b2:c1:88:e1:91:e8:19:cf:8a:f4:77:2b:a4:
                    41:b3:09:35:6b:a4:1c:bd:e8:07:90:e7:f2:3e:84:
                    21:95:6d:30:03:e2:e4:13:29:e6:ad:51:64:0b:ff:
                    33:31:2b:3a:81:29:30:5b:6c:ef:74:e1:1e:e1:39:
                    b8:43:94:f4:9c:5c:3a:11:84:31:7e:f3:e1:b9:1e:
                    a1:55:34:b3:fd:f5:1d:72:95:98:99:28:4b:d5:c5:
                    e4:92:5c:1f:46:09:e5:0f:bd:5b:b5:5a:62:52:08:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:33:9E:E3:14:26:D4:A9:4B:46:8A:87:E1:08:5A:4B:2F:CA:B9:D2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ETOe4xQm1KlLRoqH4QhaSy_KudI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:ea:ff:a1:f3:91:48:74:5e:8a:b9:9b:0c:6a:48:04:f3:b4:
         ff:cb:e5:81:9a:fc:93:bb:c8:c0:58:33:86:55:0f:31:27:7b:
         b5:84:de:8d:14:c7:92:1d:cb:49:6d:6b:dc:29:65:e2:35:67:
         f6:bb:1e:fd:cb:f1:6f:e9:7a:c5:33:16:fd:b3:cf:01:9c:67:
         2c:01:74:d8:38:7d:db:fb:d3:3a:0c:ed:bf:3f:50:e3:f4:b6:
         2b:8b:b9:5f:3b:f0:c8:03:42:52:bb:66:e8:ab:1e:8e:6a:eb:
         46:48:6f:1f:34:36:c6:31:7c:6e:98:87:fb:63:78:fe:5d:74:
         fa:74:2f:29:d7:8c:40:0f:0b:1e:58:5e:f5:0a:02:b8:88:b9:
         5f:59:19:18:a7:0f:ef:d6:38:30:39:e3:16:03:8c:c0:80:50:
         bb:0c:c3:72:84:30:7c:14:97:04:fa:ed:e6:cb:a1:c3:d4:bd:
         37:58:0c:c4:c8:68:95:f3:98:bd:27:26:0c:7f:91:2c:33:98:
         fd:d7:be:b8:e8:99:0b:75:ad:1d:36:7c:83:fe:97:37:1f:3d:
         ba:6e:19:19:b6:86:c7:29:bc:8c:d7:f8:97:ad:05:4b:60:f7:
         bc:e8:4e:55:bd:df:d8:27:27:50:9e:ac:c8:ac:34:0e:65:65:
         80:11:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----