Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KGiKJhbXtWPnvS3Lqcz75uSfka0.roa
File:                     KGiKJhbXtWPnvS3Lqcz75uSfka0.roa (raw, json)
Hash identifier:          J5I7RyI56lq6NbZGfxTM01DB7600bYaHPsqjd25pSpM=
Subject key identifier:   28:68:8A:26:16:D7:B5:63:E7:BD:2D:CB:A9:CC:FB:E6:E4:9F:91:AD
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A94777011B52A6368C555C63DC54F0D22
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KGiKJhbXtWPnvS3Lqcz75uSfka0.roa
Signing time:             Thu 14 Sep 2023 16:12:50 +0000
ROA not before:           Thu 14 Sep 2023 16:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:94:77:70:11:b5:2a:63:68:c5:55:c6:3d:c5:4f:0d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 16:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=28688a2616d7b563e7bd2dcba9ccfbe6e49f91ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:a4:58:37:cd:3f:bc:9e:af:8a:f2:b1:04:
                    fb:f6:c3:54:a5:18:7f:2d:d5:a3:ef:53:eb:b7:4e:
                    99:32:10:f4:5e:31:57:59:c2:c2:25:96:e6:c2:0e:
                    01:8d:71:34:83:89:2a:8e:89:71:3b:ca:23:b6:e0:
                    7a:3a:41:56:e4:52:e7:ec:d1:6b:3b:9c:54:30:e3:
                    c4:0a:df:64:86:4e:74:14:83:c7:00:91:0e:0b:60:
                    eb:40:bb:be:5e:ac:a2:56:19:bd:e2:ba:70:5b:c6:
                    88:d4:64:4e:13:73:68:4e:de:c7:f0:9e:c8:6b:1c:
                    7e:54:de:e1:81:a0:ec:09:c7:37:74:9b:d7:1f:8e:
                    05:b7:bc:dd:c3:02:41:73:6c:12:62:c0:1b:3c:d6:
                    0a:64:b8:e9:8a:c4:fc:e3:00:29:99:8d:7d:14:6c:
                    77:22:5f:f3:88:e6:83:e5:2f:db:da:7d:16:eb:ef:
                    e4:86:9e:8d:fa:7b:73:c8:de:c7:a7:af:2a:f3:ec:
                    a0:33:72:76:60:2d:14:b0:9e:93:00:db:8e:64:11:
                    a4:48:a3:4a:3e:de:ea:f7:a7:e7:0b:16:58:7e:ef:
                    4b:d0:ac:05:84:66:0b:b6:57:6d:fe:cf:d6:fa:8b:
                    49:d0:98:72:4a:9e:88:7c:c5:46:2a:67:dc:4c:ab:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:68:8A:26:16:D7:B5:63:E7:BD:2D:CB:A9:CC:FB:E6:E4:9F:91:AD
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KGiKJhbXtWPnvS3Lqcz75uSfka0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:79:69:c9:eb:97:f4:90:dd:e3:d4:4f:38:6f:ea:a9:38:
         ea:c7:f2:a3:d7:c9:66:b3:2e:28:37:9b:b2:57:53:8a:eb:b7:
         f2:f4:68:70:75:72:cc:ec:02:90:de:2a:ca:71:49:cb:b9:e8:
         94:be:6c:99:f8:5b:dd:a4:f6:5d:02:96:c8:43:db:37:29:61:
         66:f7:67:4a:93:9b:77:20:23:1a:6d:3b:3a:89:6c:30:6c:6e:
         ab:df:96:6c:2f:99:f6:c7:8f:9f:a3:68:ce:e1:43:95:19:85:
         81:d3:f8:41:00:6a:f8:09:94:0d:26:47:fe:95:1c:cc:51:6c:
         9e:4a:6b:59:e6:d3:76:33:d7:ca:3d:84:97:9f:4c:00:39:8b:
         e3:ae:5d:68:e3:1b:3b:2d:e0:80:d0:8d:bf:61:ef:24:15:fa:
         39:d6:9c:c7:4a:11:6c:0b:39:34:b9:c7:6f:66:54:f9:68:18:
         df:1a:66:6e:d5:17:cf:2f:0d:55:ec:e2:de:49:ea:dc:2f:15:
         fe:0e:6b:4f:8a:3f:6c:44:77:86:58:3a:d0:ab:61:cc:59:0e:
         01:0b:6b:f3:a2:55:85:c4:65:6d:13:a7:54:1c:55:90:7b:58:
         7f:3f:57:d1:c0:97:75:ab:8b:7c:98:11:b6:49:6b:6f:43:36:
         0c:7f:28:9e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqUd3ARtSpjaMVVxj3FTw0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MTYxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODY4OGEyNjE2ZDdiNTYzZTdiZDJkY2JhOWNjZmJlNmU0OWY5MWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKKkWDfNP7yer4rysQT79sNUpRh/
LdWj71Prt06ZMhD0XjFXWcLCJZbmwg4BjXE0g4kqjolxO8ojtuB6OkFW5FLn7NFr
O5xUMOPECt9khk50FIPHAJEOC2DrQLu+XqyiVhm94rpwW8aI1GROE3NoTt7H8J7I
axx+VN7hgaDsCcc3dJvXH44Ft7zdwwJBc2wSYsAbPNYKZLjpisT84wApmY19FGx3
Il/ziOaD5S/b2n0W6+/khp6N+ntzyN7Hp68q8+ygM3J2YC0UsJ6TANuOZBGkSKNK
Pt7q96fnCxZYfu9L0KwFhGYLtldt/s/W+otJ0JhySp6IfMVGKmfcTKvvvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFChoiiYW17Vj570ty6nM++bkn5GtMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvS0dpS0poYlh0V1BudlMzTHFjejc1dVNma2EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFZ8eWnJ65f0kN3j1E84
b+qpOOrH8qPXyWazLig3m7JXU4rrt/L0aHB1cszsApDeKspxScu56JS+bJn4W92k
9l0ClshD2zcpYWb3Z0qTm3cgIxptOzqJbDBsbqvflmwvmfbHj5+jaM7hQ5UZhYHT
+EEAavgJlA0mR/6VHMxRbJ5Ka1nm03Yz18o9hJefTAA5i+OuXWjjGzst4IDQjb9h
7yQV+jnWnMdKEWwLOTS5x29mVPloGN8aZm7VF88vDVXs4t5J6twvFf4Oa0+KP2xE
d4ZYOtCrYcxZDgELa/OiVYXEZW0Tp1QcVZB7WH8/V9HAl3Wri3yYEbZJa29DNgx/
KJ4=
-----END CERTIFICATE-----