Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EZekWWLC3leysC_NenMaaC0Hs5E.roa
File:                     EZekWWLC3leysC_NenMaaC0Hs5E.roa (raw, json)
Hash identifier:          +DW/QFRpm1yFXTvzs++rxKWR8CMcISz5c09hAYTKo8o=
Subject key identifier:   11:97:A4:59:62:C2:DE:57:B2:B0:2F:CD:7A:73:1A:68:2D:07:B3:91
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9BC5DC7AC638E102230E7CB97C95880A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EZekWWLC3leysC_NenMaaC0Hs5E.roa
Signing time:             Sat 16 Sep 2023 02:15:50 +0000
ROA not before:           Sat 16 Sep 2023 02:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9b:c5:dc:7a:c6:38:e1:02:23:0e:7c:b9:7c:95:88:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 16 02:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1197a45962c2de57b2b02fcd7a731a682d07b391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:3d:85:96:9c:6c:bf:cf:b3:d3:f3:b6:6d:
                    7a:6c:aa:fc:65:a1:b8:8f:aa:2d:c4:c1:e3:b9:04:
                    e7:fa:e9:4c:a6:ad:a6:98:bf:ce:d0:dd:48:0f:95:
                    11:e4:91:40:b0:ea:2e:31:1d:12:db:4a:b0:ef:61:
                    05:b3:c9:73:43:f5:00:cf:5f:f7:d4:af:bc:db:63:
                    80:d1:eb:4f:5b:53:1a:56:c1:ee:ab:bd:da:ef:f6:
                    5d:83:ea:ec:bb:fb:fc:8b:ca:d6:f4:48:41:0b:33:
                    1c:04:b8:74:22:f8:2b:aa:c8:aa:db:0a:99:b7:db:
                    55:f2:2a:ee:3e:f4:5d:f8:b8:52:5a:18:c3:2b:df:
                    7d:9f:27:39:01:c4:8c:e9:d6:81:c4:d3:27:d6:26:
                    8a:05:39:7a:06:3e:d4:b9:91:40:bc:d0:27:08:6c:
                    3d:30:01:b9:90:25:8e:2c:75:f1:dc:a0:9a:e5:9f:
                    44:68:2e:ac:cf:4f:a5:e5:b9:17:c7:cc:dc:7a:f0:
                    2e:65:11:1e:51:1f:1b:dc:62:7f:28:ed:6f:5b:56:
                    73:01:b5:ab:08:fa:4a:15:c8:cb:a9:33:bd:cc:5f:
                    04:9a:65:f0:87:52:2d:6c:0f:03:ac:a9:ad:1e:da:
                    0e:0e:3d:2a:00:69:9a:f3:c9:85:76:36:95:9e:ac:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:A4:59:62:C2:DE:57:B2:B0:2F:CD:7A:73:1A:68:2D:07:B3:91
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/EZekWWLC3leysC_NenMaaC0Hs5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:de:43:17:6c:d7:79:43:59:b6:4e:97:c2:c8:e2:87:63:d7:
         65:1b:2d:0a:61:8a:fa:e3:3c:87:5e:06:38:f7:96:aa:2d:c8:
         48:4f:d5:90:e1:52:79:d0:dc:35:0f:a2:81:b8:bd:36:64:ef:
         61:ff:4e:7f:d5:50:a3:f6:66:62:a3:7d:57:38:74:27:1e:ea:
         85:04:97:36:72:bb:c4:95:9d:50:6e:fd:df:f5:11:d8:72:e2:
         64:e8:59:7e:bd:72:97:08:9f:38:6a:4d:7d:49:52:9a:88:59:
         2a:5e:5e:f4:87:3c:bb:7d:4b:3b:fb:36:12:b4:97:9f:ac:65:
         22:79:a0:86:20:3e:5d:ca:a4:ab:79:0f:8c:68:4c:5f:a5:c8:
         92:db:5a:06:c3:77:7c:de:7b:dc:09:da:98:86:46:49:7c:80:
         c9:71:06:a5:65:91:70:61:4e:1f:ed:15:2c:24:60:06:d8:06:
         68:1a:38:3e:f9:4d:82:ee:eb:ac:c8:ca:1c:13:34:1e:c6:46:
         79:5d:af:fa:a6:de:61:4d:0b:78:6e:ff:6e:af:a9:ee:d7:c2:
         cb:c4:20:b5:9b:96:37:35:1c:ae:a4:27:31:06:6f:58:23:4b:
         a9:4e:bb:82:12:f2:f1:e3:fc:f8:e1:c3:01:13:04:0e:00:ee:
         ec:36:2a:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqbxdx6xjjhAiMOfLl8lYgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE2MDIxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTk3YTQ1OTYyYzJkZTU3YjJiMDJmY2Q3YTczMWE2ODJkMDdiMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtU9hZacbL/Ps9Pztm16bKr8ZaG4
j6otxMHjuQTn+ulMpq2mmL/O0N1ID5UR5JFAsOouMR0S20qw72EFs8lzQ/UAz1/3
1K+822OA0etPW1MaVsHuq73a7/Zdg+rsu/v8i8rW9EhBCzMcBLh0Ivgrqsiq2wqZ
t9tV8iruPvRd+LhSWhjDK999nyc5AcSM6daBxNMn1iaKBTl6Bj7UuZFAvNAnCGw9
MAG5kCWOLHXx3KCa5Z9EaC6sz0+l5bkXx8zcevAuZREeUR8b3GJ/KO1vW1ZzAbWr
CPpKFcjLqTO9zF8EmmXwh1ItbA8DrKmtHtoODj0qAGma88mFdjaVnqziIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBGXpFliwt5XsrAvzXpzGmgtB7ORMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvRVpla1dXTEMzbGV5c0NfTmVuTWFhQzBIczVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJbeQxds13lDWbZOl8LI
4odj12UbLQphivrjPIdeBjj3lqotyEhP1ZDhUnnQ3DUPooG4vTZk72H/Tn/VUKP2
ZmKjfVc4dCce6oUElzZyu8SVnVBu/d/1Edhy4mToWX69cpcInzhqTX1JUpqIWSpe
XvSHPLt9Szv7NhK0l5+sZSJ5oIYgPl3KpKt5D4xoTF+lyJLbWgbDd3zee9wJ2piG
Rkl8gMlxBqVlkXBhTh/tFSwkYAbYBmgaOD75TYLu66zIyhwTNB7GRnldr/qm3mFN
C3hu/26vqe7XwsvEILWbljc1HK6kJzEGb1gjS6lOu4IS8vHj/PjhwwETBA4A7uw2
Kqk=
-----END CERTIFICATE-----