Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y3irk8R6LS_JW0XmDJsGbUlIJo4.roa
File:                     Y3irk8R6LS_JW0XmDJsGbUlIJo4.roa (raw, json)
Hash identifier:          9R06L4om4+VGz8l04rZUHby6LnS1vqDro+rOgte1F1A=
Subject key identifier:   63:78:AB:93:C4:7A:2D:2F:C9:5B:45:E6:0C:9B:06:6D:49:48:26:8E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5B93734E551881E6FCB83AEECA9188A3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y3irk8R6LS_JW0XmDJsGbUlIJo4.roa
Signing time:             Sun 03 Sep 2023 15:05:04 +0000
ROA not before:           Sun 03 Sep 2023 15:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:5b92:bc9f/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5b:93:73:4e:55:18:81:e6:fc:b8:3a:ee:ca:91:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  3 15:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6378ab93c47a2d2fc95b45e60c9b066d4948268e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ba:6a:12:d0:bd:57:3e:46:a9:67:ee:f6:7d:
                    12:ad:ec:2f:14:56:68:95:e2:d7:21:6d:2b:71:08:
                    48:2f:a2:2d:12:2b:19:f8:87:b5:4c:66:f3:ac:1e:
                    18:48:61:93:4d:99:b9:3d:ea:8e:7a:9f:c8:e3:6f:
                    67:c9:ab:d7:7a:ff:26:b4:db:63:35:f3:dd:58:e8:
                    f1:6e:a6:6f:a2:6b:3a:c0:fa:fb:54:62:17:f5:5d:
                    b5:53:07:90:1d:bc:23:17:7b:a9:d6:4f:d0:38:da:
                    62:24:5f:69:67:7b:07:16:fc:d9:7d:95:28:b9:63:
                    98:cf:cb:e0:be:2e:9f:4d:44:fb:a1:ec:38:76:e9:
                    85:3f:e3:bc:5d:82:b9:41:cb:44:b1:cb:08:78:17:
                    f7:df:7a:0f:d7:d6:80:f0:da:55:13:e0:e0:f5:b4:
                    c8:d9:95:a1:e5:99:cd:32:90:75:94:a9:13:9b:08:
                    17:4b:07:7e:d8:1e:1d:bb:97:7d:46:18:ad:65:7d:
                    38:ee:d1:c3:fc:53:a9:1b:ad:2a:4a:8f:c3:a4:68:
                    04:f0:28:cd:6e:9b:bd:06:8b:41:0a:00:32:51:b3:
                    f5:bc:5f:b7:dd:20:80:88:f1:64:17:0a:e1:89:af:
                    f5:c3:7e:7f:5d:35:cf:eb:71:df:69:a2:ec:a0:a4:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:AB:93:C4:7A:2D:2F:C9:5B:45:E6:0C:9B:06:6D:49:48:26:8E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y3irk8R6LS_JW0XmDJsGbUlIJo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:a2:d9:5e:0d:01:49:b2:56:30:b9:f3:64:90:d7:a6:b3:
         3d:93:68:ec:f2:e5:b5:df:b6:94:1b:db:7d:0b:eb:fd:0b:86:
         b6:6c:49:e7:a5:81:a5:27:13:b6:b3:f5:53:05:ee:e2:b3:32:
         f3:12:bf:2b:d7:71:17:da:6d:ec:63:82:d8:cb:fa:cc:9f:6c:
         09:b4:5f:8b:26:12:ed:8b:b1:35:ee:ba:5a:0a:86:be:4f:0e:
         22:22:36:d2:d5:ca:31:a1:aa:61:e3:fa:05:83:cc:fa:da:b2:
         fe:21:60:93:6e:bb:2c:b4:76:bd:dd:b4:98:4b:26:a6:08:29:
         52:0a:9a:7c:5f:1a:41:08:92:b4:d3:95:ab:6a:49:7c:c2:fd:
         4e:be:26:55:a5:76:46:36:5a:0e:46:0d:33:32:44:18:2a:41:
         a1:0a:85:0c:2b:5b:f6:d7:0f:95:2a:e4:51:a7:60:a3:78:ce:
         61:82:04:1c:21:fc:0d:a6:f0:38:0d:7b:94:46:94:57:53:fb:
         ce:6f:79:53:18:ad:68:cd:b3:59:a1:70:29:4f:b9:6a:b0:96:
         0f:32:b6:b4:b9:e3:52:8d:57:2b:a0:ac:8d:81:b1:69:65:cb:
         e9:5f:8b:f1:4a:c4:11:80:39:7d:08:16:dd:44:70:61:c1:55:
         09:4c:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----