Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJxf_NbF1z4xH6FPkBEracUM2Lk.roa
File:                     LJxf_NbF1z4xH6FPkBEracUM2Lk.roa (raw, json)
Hash identifier:          aAymsfZYjo8ADxZk/ssoCZ3DFYPVvASJPW0+3Au2Fw4=
Subject key identifier:   2C:9C:5F:FC:D6:C5:D7:3E:31:1F:A1:4F:90:11:2B:69:C5:0C:D8:B9
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9AE010625D8A252E170F28CFB6A226E4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJxf_NbF1z4xH6FPkBEracUM2Lk.roa
Signing time:             Fri 15 Sep 2023 22:04:50 +0000
ROA not before:           Fri 15 Sep 2023 22:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:9adf:7eee/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:9a:e0:10:62:5d:8a:25:2e:17:0f:28:cf:b6:a2:26:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 15 22:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c9c5ffcd6c5d73e311fa14f90112b69c50cd8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b9:d1:e2:fa:c0:b6:94:c1:86:9a:20:59:52:
                    6f:1d:7c:65:8e:c5:08:b3:8c:5e:cc:9a:89:14:19:
                    2e:be:2f:53:2c:53:18:38:36:a4:90:56:15:27:e8:
                    d3:e8:f8:b5:2b:d4:f5:a6:d6:99:59:6b:fb:95:77:
                    2f:20:1c:8c:49:34:2d:65:1f:f4:39:32:a3:62:3c:
                    7d:7d:9e:2a:e4:ac:aa:c4:ba:5f:1c:2d:7a:73:c4:
                    b3:d2:dc:c4:1c:b3:17:69:94:f6:15:79:b9:d0:27:
                    03:b5:39:a3:d7:cc:b7:c2:db:72:e9:ab:6f:08:cf:
                    34:ab:95:bb:2d:c2:42:06:1e:97:78:75:ac:f1:70:
                    54:78:c4:9d:bc:9e:bd:1c:7d:ef:58:9d:bb:92:18:
                    83:84:6d:3a:5d:15:94:de:23:db:db:db:67:6b:ca:
                    a2:3f:a6:bb:d2:e0:ca:14:f2:70:3c:8a:28:0e:6a:
                    a0:5f:c1:b3:4f:43:ac:7a:56:cf:7f:1b:bf:6e:09:
                    f7:00:71:18:82:13:46:5a:b5:51:e6:3d:c9:88:83:
                    ac:4d:83:25:e1:ce:93:16:47:30:16:a9:e9:07:8b:
                    a7:e7:a6:3d:d7:8b:30:3c:e6:c8:7f:48:41:78:a7:
                    1a:e5:0a:ec:86:20:79:2f:b0:74:37:5e:ed:d1:55:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:5F:FC:D6:C5:D7:3E:31:1F:A1:4F:90:11:2B:69:C5:0C:D8:B9
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LJxf_NbF1z4xH6FPkBEracUM2Lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:55:5e:5d:67:b8:d9:c9:86:0b:8f:61:8c:2d:e1:8e:60:bd:
         1a:fd:b2:5a:1c:1a:2d:c2:1c:f5:45:72:7c:8f:1c:80:47:4a:
         e7:ec:71:d7:9e:ee:e8:8f:05:d7:ef:f7:29:05:14:05:35:7e:
         72:46:54:54:06:c9:4c:62:a0:18:90:5f:ae:77:03:8e:cb:dc:
         5c:a1:c3:c0:e4:76:09:be:60:14:67:27:32:96:24:fb:b7:59:
         31:3e:30:13:56:c8:af:98:b3:d6:ef:c3:ae:cf:6d:cc:d9:5d:
         ed:4b:88:49:dd:62:ed:32:12:65:ee:6a:9f:a2:43:ed:f6:ef:
         8c:1a:7f:5f:14:d4:f7:81:c5:51:a7:4a:21:25:de:52:18:b3:
         7a:36:39:14:b2:af:26:77:90:fd:ec:ee:94:e8:44:70:cb:15:
         27:ab:67:50:11:53:29:fd:28:9d:bc:30:5d:c2:cf:36:f4:2e:
         d9:54:3c:4c:49:8e:4d:79:eb:a8:d9:57:8d:1d:fc:bd:08:21:
         b5:94:dd:55:fe:e6:32:6b:58:aa:43:60:a3:b1:23:73:21:dc:
         11:c3:28:11:89:79:e3:2c:dd:4a:c1:da:b3:80:8a:6a:c4:75:
         0c:e0:18:6a:c3:b6:34:cf:28:68:f7:45:ca:1d:d4:4a:ee:a3:
         53:af:b1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----