Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M26h9e81x3gbaomXfAYPzjoxmAQ.roa
File:                     M26h9e81x3gbaomXfAYPzjoxmAQ.roa (raw, json)
Hash identifier:          AUfjThwP/6rLmXG/Xm/cPC4kydf79odiA4F4i6QXbzw=
Subject key identifier:   33:6E:A1:F5:EF:35:C7:78:1B:6A:89:97:7C:06:0F:CE:3A:31:98:04
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A856AE7661C69C2507D46EF2A82197DB8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M26h9e81x3gbaomXfAYPzjoxmAQ.roa
Signing time:             Mon 11 Sep 2023 18:04:50 +0000
ROA not before:           Mon 11 Sep 2023 18:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:856a:641b/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:85:6a:e7:66:1c:69:c2:50:7d:46:ef:2a:82:19:7d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 18:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=336ea1f5ef35c7781b6a89977c060fce3a319804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:ee:ef:ab:f5:90:8e:ac:c4:fa:d5:16:69:
                    d5:e8:b8:45:8d:42:0e:92:69:95:38:2d:4b:b9:8c:
                    09:e8:66:d3:d7:93:dd:f3:8d:01:8a:fb:f0:28:b4:
                    87:2e:20:7d:40:f9:f7:ad:b3:71:11:46:8a:b4:0c:
                    16:d9:33:2e:ae:62:25:70:cf:1d:3f:c4:a1:a2:1e:
                    e1:02:f6:31:14:a4:77:2a:da:5f:c6:7f:c6:73:7f:
                    09:70:ae:dc:fe:55:f2:6f:ce:3a:7c:9d:73:a3:d0:
                    2a:16:0b:8a:03:f0:75:6a:2c:b8:fe:6e:9c:8e:0c:
                    17:91:d1:74:24:2e:55:64:aa:3d:0f:1f:72:0c:e4:
                    3a:8f:9a:cb:18:ca:db:25:93:32:25:16:0b:29:9c:
                    3d:08:5e:15:06:01:22:93:99:92:0c:f5:74:c9:a9:
                    0f:69:93:ba:bc:80:fe:85:f9:6e:c1:dd:f3:c2:fb:
                    a1:ef:1c:84:43:f1:48:2f:a4:b1:3b:ad:b7:32:27:
                    85:08:73:3a:5a:c4:3c:b4:cc:7a:77:bf:f6:5f:fc:
                    c1:e1:c4:5e:14:f2:af:65:9e:e0:70:d2:ef:7c:65:
                    d4:7c:90:b3:62:82:c2:62:bf:dc:b4:d4:d6:c9:03:
                    0d:c7:70:36:f6:35:c7:91:d4:94:6e:c2:3c:90:94:
                    88:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:A1:F5:EF:35:C7:78:1B:6A:89:97:7C:06:0F:CE:3A:31:98:04
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/M26h9e81x3gbaomXfAYPzjoxmAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:17:99:dc:87:c1:71:0e:ea:11:1f:98:3a:c0:97:90:f3:
         1a:9a:e8:c1:05:6c:2f:b4:9f:97:d8:47:b6:4c:f4:00:92:78:
         fd:75:78:df:7b:26:5b:88:27:45:d6:2e:79:3d:b3:75:25:49:
         40:08:25:b6:52:aa:02:f0:bf:54:44:5c:94:14:a3:54:b1:c4:
         89:89:94:d2:08:98:7e:26:8e:d3:5f:2c:94:1c:51:5b:21:ee:
         5f:91:fa:62:51:f5:a1:db:21:dd:7d:ac:6e:04:1a:03:e8:2f:
         51:96:25:58:0c:23:af:60:65:1e:12:82:a9:f5:0c:aa:1d:d4:
         5b:3d:40:07:6d:f8:60:d2:80:1e:08:67:9f:03:47:62:d9:7d:
         68:ab:51:8e:12:d1:18:bf:48:33:37:86:6f:5d:15:5b:5b:32:
         0c:94:ee:a6:0f:1d:6d:f1:64:c6:18:cd:fb:78:ac:09:fe:23:
         3f:16:60:d1:86:f3:c1:eb:aa:ee:b7:3d:3c:d5:1d:10:ef:8c:
         6b:16:4c:29:69:7d:85:ea:c9:ae:7d:86:bf:39:25:a0:6b:1d:
         3c:d9:ac:f9:f2:2d:34:88:18:0e:b4:fb:69:e9:02:61:23:17:
         56:1c:7a:bb:bb:02:89:a0:7c:34:ec:9d:7b:28:64:c6:fe:9e:
         e2:d1:66:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqFaudmHGnCUH1G7yqCGX24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTExMTgwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzZlYTFmNWVmMzVjNzc4MWI2YTg5OTc3YzA2MGZjZTNhMzE5ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Lu76v1kI6sxPrVFmnV6LhFjUIO
kmmVOC1LuYwJ6GbT15Pd840BivvwKLSHLiB9QPn3rbNxEUaKtAwW2TMurmIlcM8d
P8Shoh7hAvYxFKR3Ktpfxn/Gc38JcK7c/lXyb846fJ1zo9AqFguKA/B1aiy4/m6c
jgwXkdF0JC5VZKo9Dx9yDOQ6j5rLGMrbJZMyJRYLKZw9CF4VBgEik5mSDPV0yakP
aZO6vID+hfluwd3zwvuh7xyEQ/FIL6SxO623MieFCHM6WsQ8tMx6d7/2X/zB4cRe
FPKvZZ7gcNLvfGXUfJCzYoLCYr/ctNTWyQMNx3A29jXHkdSUbsI8kJSI1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDNuofXvNcd4G2qJl3wGD846MZgEMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvTTI2aDllODF4M2diYW9tWGZBWVB6am94bUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB/CF5nch8FxDuoRH5g6
wJeQ8xqa6MEFbC+0n5fYR7ZM9ACSeP11eN97JluIJ0XWLnk9s3UlSUAIJbZSqgLw
v1REXJQUo1SxxImJlNIImH4mjtNfLJQcUVsh7l+R+mJR9aHbId19rG4EGgPoL1GW
JVgMI69gZR4Sgqn1DKod1Fs9QAdt+GDSgB4IZ58DR2LZfWirUY4S0Ri/SDM3hm9d
FVtbMgyU7qYPHW3xZMYYzft4rAn+Iz8WYNGG88Hrqu63PTzVHRDvjGsWTClpfYXq
ya59hr85JaBrHTzZrPnyLTSIGA60+2npAmEjF1Yceru7AomgfDTsnXsoZMb+nuLR
ZkY=
-----END CERTIFICATE-----