Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VTwh2jGyzFL4AQPX8XW64kDx6y0.roa
File:                     VTwh2jGyzFL4AQPX8XW64kDx6y0.roa (raw, json)
Hash identifier:          7OTusxkX8x9Cbj23AvbS1tS9b2upebxyM5sqkUMCL78=
Subject key identifier:   55:3C:21:DA:31:B2:CC:52:F8:01:03:D7:F1:75:BA:E2:40:F1:EB:2D
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A706BE75B3B1F5055F7769E41D2557322
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VTwh2jGyzFL4AQPX8XW64kDx6y0.roa
Signing time:             Thu 07 Sep 2023 16:13:54 +0000
ROA not before:           Thu 07 Sep 2023 16:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:70:6b:e7:5b:3b:1f:50:55:f7:76:9e:41:d2:55:73:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  7 16:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=553c21da31b2cc52f80103d7f175bae240f1eb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:58:ff:a4:70:fb:19:1f:44:ad:85:10:6b:8b:
                    c8:0e:26:da:16:fa:2b:a5:28:96:52:5a:90:69:9f:
                    72:08:09:5c:95:77:50:0b:c1:96:2a:10:df:56:54:
                    83:c0:97:b0:83:cd:cd:ba:4c:77:f8:ae:ad:07:2c:
                    ba:82:fd:b9:42:08:a8:de:34:5d:a8:8f:d1:cc:e5:
                    36:6b:33:88:8b:ba:35:58:2d:eb:39:ce:11:04:96:
                    98:be:4e:a9:82:cb:3f:75:f5:f0:67:ed:aa:52:0c:
                    70:1d:48:a1:e1:bf:01:1b:07:49:a1:78:eb:39:f8:
                    1c:9c:e3:ce:a8:16:48:e9:83:cc:7d:4b:09:0a:75:
                    5f:44:86:8c:63:ce:e1:dd:9f:0d:6b:cd:2a:98:9d:
                    6e:f8:f1:d0:19:f7:48:70:84:4d:db:4d:71:39:cd:
                    69:ee:73:91:3d:ff:b9:a1:35:7b:f5:69:96:a9:4a:
                    c6:f5:cf:f5:d1:73:fc:4a:22:bf:b7:9e:69:82:00:
                    2b:0c:e4:ce:eb:25:0a:b8:60:bf:d1:ae:5f:3b:f4:
                    ef:a2:70:8f:e4:3e:23:d9:2d:54:0d:f7:d0:d6:24:
                    c1:70:3a:59:01:a4:c8:11:10:cb:bd:81:90:3d:9e:
                    88:7e:a7:97:51:58:44:f4:d1:d5:c3:a7:29:cd:b3:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:21:DA:31:B2:CC:52:F8:01:03:D7:F1:75:BA:E2:40:F1:EB:2D
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/VTwh2jGyzFL4AQPX8XW64kDx6y0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:de:2f:bd:9e:25:0f:4b:bc:85:25:ee:98:8d:49:c5:8c:
         ce:3f:58:b4:a0:00:7c:7f:18:5b:50:cf:83:66:5c:93:03:9a:
         04:bc:0f:86:1c:54:86:1c:ae:e9:89:44:dd:5a:0e:7d:f9:48:
         d4:d1:ac:57:b0:92:51:03:ff:d7:88:a3:d7:da:68:5b:ba:65:
         56:34:7e:9c:35:ea:22:1d:43:10:de:75:0f:89:3d:22:db:c0:
         f7:cf:a3:8c:31:ef:f9:41:7f:ed:f3:7b:89:0a:a7:06:b2:19:
         0d:ec:dc:13:46:15:05:77:41:dc:de:22:77:bc:ba:ba:74:c9:
         c8:c0:b1:70:1b:b9:72:e6:ba:c8:09:18:31:cf:bb:93:55:d7:
         31:cb:b9:82:5f:de:3d:9d:df:b1:ae:35:f2:aa:23:2e:62:dd:
         ed:94:f2:b5:23:a5:ee:44:71:a4:52:9b:91:48:66:a8:be:2d:
         a7:3c:b4:a0:81:b9:59:38:53:88:db:b7:a3:dc:28:9f:23:78:
         e1:e3:dc:7d:f2:0d:1a:c8:a5:83:8e:a2:2e:54:63:89:22:24:
         84:1a:eb:9c:12:6f:61:53:68:95:4d:13:fb:73:da:3e:b0:d0:
         11:01:1c:91:f7:45:d6:f5:ea:c6:eb:d4:dd:70:8f:02:ea:b0:
         c5:8e:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----