Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S-5u0oHlJJuGWo3Wu1CptXm1fqo.roa
File:                     S-5u0oHlJJuGWo3Wu1CptXm1fqo.roa (raw, json)
Hash identifier:          i9mFqW+Ojk/wZHFoOHG594eMk3x4RdPo46hn4sstfC0=
Subject key identifier:   4B:EE:6E:D2:81:E5:24:9B:86:5A:8D:D6:BB:50:A9:B5:79:B5:7E:AA
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A83EA61A4F219B6B93578593E316E7C83
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S-5u0oHlJJuGWo3Wu1CptXm1fqo.roa
Signing time:             Mon 11 Sep 2023 11:04:50 +0000
ROA not before:           Mon 11 Sep 2023 11:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:83ea:5d0e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:ea:61:a4:f2:19:b6:b9:35:78:59:3e:31:6e:7c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 11 11:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4bee6ed281e5249b865a8dd6bb50a9b579b57eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:68:33:05:3d:b5:cf:e9:d2:5e:6f:63:5f:
                    4e:08:47:40:1a:35:3b:a9:b3:f1:f0:83:00:e2:f7:
                    37:a7:ae:f9:b3:36:67:aa:20:06:c3:16:5a:94:7f:
                    4c:e2:d0:25:e2:73:14:f2:60:25:95:57:59:85:a1:
                    5c:23:fb:13:bc:4f:00:60:8a:5e:1a:03:69:fd:94:
                    ee:ac:8e:27:03:ae:97:89:d1:61:2a:65:6e:8f:c0:
                    db:2d:04:1c:c7:5a:a1:6b:4f:7d:c0:d0:8c:39:ce:
                    61:2c:3e:3b:80:f9:b3:d7:31:77:91:9e:2f:29:1b:
                    d3:f6:09:b8:ea:02:77:a8:e9:95:1b:23:a9:24:a8:
                    96:98:ae:da:55:22:a3:31:d8:a2:79:08:21:94:a5:
                    c2:42:bd:11:78:a8:59:0a:02:31:39:f6:a7:5b:1c:
                    68:f6:13:f3:42:c9:7a:ee:a3:45:16:86:9e:81:f2:
                    5e:9e:03:25:8e:09:71:8d:a7:62:20:1e:5b:c1:7d:
                    82:2d:0c:4a:0c:67:9c:a0:f0:0e:17:2c:e3:07:78:
                    2d:3a:8e:05:8f:fa:c5:2d:99:b0:7a:81:7c:84:e2:
                    93:7e:98:5b:bc:85:ef:d1:87:28:c4:13:0a:2d:24:
                    ff:57:cf:4e:93:58:56:31:4d:59:03:76:ca:4f:ba:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EE:6E:D2:81:E5:24:9B:86:5A:8D:D6:BB:50:A9:B5:79:B5:7E:AA
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/S-5u0oHlJJuGWo3Wu1CptXm1fqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:61:66:dd:96:8b:ed:6a:bd:eb:a7:ff:0d:d7:2f:81:dc:
         ba:8d:65:6f:23:9a:3e:1d:1f:15:66:78:5f:8a:35:05:f4:ee:
         81:4f:d0:00:b3:a8:a0:64:45:6f:30:13:f0:52:a3:c7:d9:18:
         55:e9:2e:0e:a3:98:3e:3b:be:c5:0f:c5:2d:c4:2f:3a:fe:41:
         5b:2d:16:b7:e6:04:59:b7:05:9b:ae:11:f6:df:0b:96:1d:64:
         58:6a:2d:05:c8:45:62:76:9c:0c:45:e8:94:2d:88:ac:a1:df:
         0b:24:3f:fd:f2:0d:4a:54:6d:05:0e:b2:31:9d:91:67:65:8d:
         c3:24:ff:d3:94:62:4d:2c:7f:80:9d:6a:8a:ae:1e:c1:09:df:
         95:3a:99:2a:db:22:33:8c:2a:b5:82:b8:1a:3b:ca:1e:56:3c:
         13:66:0d:dc:7e:fd:e6:1a:57:ae:63:22:78:15:29:5f:c4:cd:
         fa:32:31:ea:31:12:ae:de:5d:4c:88:70:6c:d1:61:f8:a6:77:
         ff:35:67:11:f0:eb:a6:f2:7e:7b:76:3e:ab:7d:89:f1:0a:b7:
         67:6a:5c:0b:29:8f:25:e4:d6:2a:7a:01:47:a6:2c:03:bd:bc:
         0e:88:8d:cc:88:3d:be:67:51:32:c3:7b:a0:e5:47:3f:de:a6:
         b3:43:39:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----