Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KfY4rnDzLe7JsHiaxglV2nc6WEg.roa
File:                     KfY4rnDzLe7JsHiaxglV2nc6WEg.roa (raw, json)
Hash identifier:          fCB+3ZcWAoZeOo06ChZSz/To9mF2GXoS0HNrQprPRoM=
Subject key identifier:   29:F6:38:AE:70:F3:2D:EE:C9:B0:78:9A:C6:09:55:DA:77:3A:58:48
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA1F4CFA11FBC94481114DA855A133623
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KfY4rnDzLe7JsHiaxglV2nc6WEg.roa
Signing time:             Sun 17 Sep 2023 07:04:50 +0000
ROA not before:           Sun 17 Sep 2023 07:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:a1f4:8a3b/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a1:f4:cf:a1:1f:bc:94:48:11:14:da:85:5a:13:36:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 07:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=29f638ae70f32deec9b0789ac60955da773a5848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:32:b6:bc:1b:51:d3:7e:a8:0a:f0:4a:dd:
                    6d:45:b3:c6:b0:fe:a8:ad:3e:16:9b:d8:6f:74:6d:
                    e9:1b:98:8d:e7:2c:f2:9f:e6:95:e5:93:48:4b:37:
                    9a:25:81:b5:cd:8f:ae:54:66:df:d7:78:0f:b9:f0:
                    cd:43:33:ea:b1:ae:fc:33:98:63:e5:e9:2a:b9:58:
                    f7:3d:b2:0b:fb:95:1e:8d:2f:63:bc:6e:eb:19:a5:
                    07:5f:e3:91:4c:9f:c0:ae:dd:79:c0:5b:d9:2a:2d:
                    58:be:1f:1d:fa:e4:7c:65:06:93:e5:f2:77:ce:96:
                    a5:88:44:fa:cb:0a:ae:05:0c:f8:2f:cf:db:1d:95:
                    1f:ab:37:89:98:ab:51:31:ad:1d:9a:4f:d3:0b:0b:
                    a8:a8:94:ba:ea:7e:89:a3:dd:5c:a6:93:bd:08:b0:
                    15:9a:f0:e0:0f:2e:13:86:cc:9a:84:37:a1:13:3a:
                    09:b9:04:83:26:8d:a1:e2:1c:0e:e5:08:80:4f:3f:
                    24:83:53:dd:65:4d:a1:59:85:4b:1c:76:ed:dc:f1:
                    36:95:49:8c:c0:d9:41:3d:5e:0d:e9:82:bd:f7:96:
                    76:03:b5:7d:51:1b:51:02:5f:4a:4a:35:5a:b3:3c:
                    05:0a:d0:a4:70:cd:a8:01:ed:81:ac:d3:ce:4b:99:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:38:AE:70:F3:2D:EE:C9:B0:78:9A:C6:09:55:DA:77:3A:58:48
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/KfY4rnDzLe7JsHiaxglV2nc6WEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:d3:2f:c7:e6:0b:1e:b8:1f:81:1f:ed:50:f0:69:24:6d:
         db:9c:4d:37:fc:40:53:fa:34:61:df:e8:e9:5f:fd:ca:3b:de:
         ea:89:8f:69:86:fe:e0:24:fb:3e:18:bb:c5:72:eb:ab:15:0a:
         8b:4b:fe:bc:15:45:aa:47:b1:8d:03:5f:f7:fa:e8:2a:4b:84:
         cf:89:8b:df:8b:68:2f:46:99:4f:ce:3e:72:83:7c:87:16:18:
         80:2c:90:24:3d:db:1d:a0:2f:24:41:03:15:fd:2b:ab:f0:a8:
         97:ce:99:5c:f7:72:bd:ce:02:a5:98:5e:30:04:8c:0d:1f:70:
         ad:8e:45:a4:05:7c:04:00:88:ee:0a:25:9e:2c:b7:52:b2:8f:
         52:e4:29:4b:58:81:1e:d9:e9:8c:79:fd:94:0f:c6:61:79:01:
         68:d8:ed:f1:66:ee:b9:56:a2:75:71:40:5b:65:82:f0:ab:1d:
         a0:6d:b3:0c:d6:0c:17:bd:ab:fb:3f:19:90:88:0f:3f:a5:ff:
         ae:b3:35:df:68:17:76:64:51:45:cc:cc:aa:44:d5:92:70:e1:
         88:66:7d:6b:f2:55:30:6d:f1:73:9c:f8:b3:ab:d0:8f:fc:60:
         81:e1:9c:4e:4a:00:e5:26:3c:98:76:00:d4:74:ba:ac:0b:c6:
         b8:a7:4a:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqh9M+hH7yUSBEU2oVaEzYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE3MDcwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWY2MzhhZTcwZjMyZGVlYzliMDc4OWFjNjA5NTVkYTc3M2E1ODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpcytrwbUdN+qArwSt1tRbPGsP6o
rT4Wm9hvdG3pG5iN5yzyn+aV5ZNISzeaJYG1zY+uVGbf13gPufDNQzPqsa78M5hj
5ekquVj3PbIL+5UejS9jvG7rGaUHX+ORTJ/Art15wFvZKi1Yvh8d+uR8ZQaT5fJ3
zpaliET6ywquBQz4L8/bHZUfqzeJmKtRMa0dmk/TCwuoqJS66n6Jo91cppO9CLAV
mvDgDy4ThsyahDehEzoJuQSDJo2h4hwO5QiATz8kg1PdZU2hWYVLHHbt3PE2lUmM
wNlBPV4N6YK995Z2A7V9URtRAl9KSjVaszwFCtCkcM2oAe2BrNPOS5kI/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCn2OK5w8y3uybB4msYJVdp3OlhIMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvS2ZZNHJuRHpMZTdKc0hpYXhnbFYybmM2V0VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJYt0y/H5gseuB+BH+1Q
8GkkbducTTf8QFP6NGHf6Olf/co73uqJj2mG/uAk+z4Yu8Vy66sVCotL/rwVRapH
sY0DX/f66CpLhM+Ji9+LaC9GmU/OPnKDfIcWGIAskCQ92x2gLyRBAxX9K6vwqJfO
mVz3cr3OAqWYXjAEjA0fcK2ORaQFfAQAiO4KJZ4st1Kyj1LkKUtYgR7Z6Yx5/ZQP
xmF5AWjY7fFm7rlWonVxQFtlgvCrHaBtswzWDBe9q/s/GZCIDz+l/66zNd9oF3Zk
UUXMzKpE1ZJw4YhmfWvyVTBt8XOc+LOr0I/8YIHhnE5KAOUmPJh2ANR0uqwLxrin
Si0=
-----END CERTIFICATE-----