Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y6P1hMr501wxRdBQLXpeutIoDiQ.roa
File:                     Y6P1hMr501wxRdBQLXpeutIoDiQ.roa (raw, json)
Hash identifier:          yeRogHR1OWLCm5oNHXFsB8UqdG+bIbesde0+ipE1NO0=
Subject key identifier:   63:A3:F5:84:CA:F9:D3:5C:31:45:D0:50:2D:7A:5E:BA:D2:28:0E:24
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7EC40D3D5D969E80360C221D223DAD85
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y6P1hMr501wxRdBQLXpeutIoDiQ.roa
Signing time:             Sun 10 Sep 2023 11:04:52 +0000
ROA not before:           Sun 10 Sep 2023 11:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:7ec3:b89d/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7e:c4:0d:3d:5d:96:9e:80:36:0c:22:1d:22:3d:ad:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 11:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=63a3f584caf9d35c3145d0502d7a5ebad2280e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:5e:a8:27:1f:f1:33:74:f1:3d:f9:71:ec:
                    ca:0c:0d:86:23:c5:da:ef:0c:fc:c7:bc:02:e6:67:
                    fe:90:6a:15:13:be:79:09:d2:0b:03:aa:3b:35:c8:
                    30:b2:0b:92:92:83:8f:d0:80:78:7e:80:ab:ba:a1:
                    19:4e:5c:f1:cc:f5:06:ee:80:52:3d:44:8c:02:a0:
                    37:cb:e5:67:9f:ee:85:08:f0:32:de:e0:f3:e2:c8:
                    3e:8e:c4:83:70:8a:42:ef:34:d5:c1:b7:73:f4:5b:
                    71:28:27:39:58:89:c3:10:c5:58:f8:63:77:92:92:
                    5d:96:5a:ec:8e:e6:48:76:f8:6a:db:71:b8:e4:20:
                    64:79:08:87:0c:ff:ce:6a:fb:df:97:c9:87:52:b3:
                    8b:1a:73:b2:c9:7a:8d:d6:f3:6d:70:f6:da:e1:25:
                    90:af:67:65:8e:0b:f4:fc:ad:6a:f7:24:3e:9b:d0:
                    62:0b:81:f8:ad:26:9e:d7:83:cf:92:ff:c7:a9:61:
                    92:27:ad:48:f7:28:45:46:72:34:12:e3:7c:ff:2d:
                    e5:84:f8:78:a7:62:1d:1e:ea:55:e7:1e:bc:06:dd:
                    e9:50:17:4d:1f:a0:4b:1d:d5:1a:de:fa:d3:e3:81:
                    64:e6:01:09:d6:ed:67:18:ab:84:aa:47:b7:ad:71:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:F5:84:CA:F9:D3:5C:31:45:D0:50:2D:7A:5E:BA:D2:28:0E:24
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Y6P1hMr501wxRdBQLXpeutIoDiQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:31:2c:be:b3:21:db:fc:9b:7f:74:b9:40:12:11:24:46:fd:
         b9:7c:50:f1:8f:e7:dd:bc:05:16:53:66:bf:28:0a:f0:e0:e5:
         f8:5e:3b:61:80:c3:d5:fd:ad:77:c9:63:87:16:d8:be:f3:2a:
         7a:08:38:d3:00:c6:6f:ac:e3:39:7f:f5:1d:1a:c7:61:ed:22:
         be:92:d3:38:4e:f0:e0:f6:26:42:a5:76:19:9d:45:6d:95:36:
         9d:e1:a4:89:95:5b:8b:00:10:da:ec:af:84:2c:24:17:d1:36:
         e2:05:27:9a:8a:e9:77:76:e5:e9:52:44:5c:b2:8c:9c:f3:da:
         b4:6b:5d:e6:49:8f:12:f7:74:9d:2b:bf:1c:c5:78:a3:24:b5:
         56:5b:68:39:ee:bc:95:60:1c:27:0b:0a:36:ac:0a:7c:7a:74:
         95:af:36:dd:59:15:cf:16:ff:c7:64:92:b0:47:c1:ca:da:cd:
         3a:38:2c:d8:7a:db:75:94:51:56:a3:61:ce:c8:ce:1f:45:fc:
         3b:50:c6:20:c3:8e:e2:33:24:da:a3:74:7b:54:ff:43:9f:da:
         83:1f:ec:92:63:69:f3:8c:80:1d:40:ed:63:d8:d8:f5:92:f0:
         ac:c0:f4:b5:22:bf:ac:53:5a:21:18:23:0a:9e:4f:eb:e2:c8:
         dc:36:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----