Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dWcaejjaCrPdrA7J-BcobA8DWmo.roa
File:                     dWcaejjaCrPdrA7J-BcobA8DWmo.roa (raw, json)
Hash identifier:          lgNwCg6KALJy+ze0an7wko4XZtina+XY96JBr+j1MPI=
Subject key identifier:   75:67:1A:7A:38:DA:0A:B3:DD:AC:0E:C9:F8:17:28:6C:0F:03:5A:6A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A886BF1A640F9FA4FFF5DB65FB53DD0B9
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dWcaejjaCrPdrA7J-BcobA8DWmo.roa
Signing time:             Tue 12 Sep 2023 08:04:50 +0000
ROA not before:           Tue 12 Sep 2023 08:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:886b:4a2a/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:88:6b:f1:a6:40:f9:fa:4f:ff:5d:b6:5f:b5:3d:d0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 12 08:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75671a7a38da0ab3ddac0ec9f817286c0f035a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:0d:da:dc:c7:34:c3:31:c8:0a:ed:2c:74:
                    1b:dd:02:a7:c7:85:c1:bb:9b:1a:dd:f0:9a:34:27:
                    04:13:44:4f:44:c7:31:53:c5:ae:9f:bd:69:22:8f:
                    29:ee:28:e8:b5:b5:07:1d:96:c3:e2:29:3b:e7:fb:
                    3a:42:15:54:48:46:58:a9:7b:16:d2:60:f9:4d:99:
                    5b:53:6f:4e:7f:d1:08:3d:8e:ce:c3:f9:db:7b:e3:
                    3b:a9:5a:8f:de:4e:e3:b3:63:50:e4:01:2d:4e:a8:
                    f6:70:85:02:80:67:ce:cf:96:b5:c8:67:b7:1a:82:
                    83:ee:35:ea:d1:5c:91:29:71:d3:74:b0:4b:5c:27:
                    2f:92:0b:2a:d4:4c:33:9c:b5:13:43:8e:44:f1:93:
                    82:91:98:0e:6a:3b:a9:56:e5:77:58:f5:88:92:20:
                    99:a6:2b:8e:dc:cd:90:08:65:76:c0:55:06:69:69:
                    43:cd:50:70:29:ed:67:1c:73:fe:a2:83:a2:45:bf:
                    71:8a:0d:57:ea:ff:ee:4c:14:3d:b5:c4:a5:8b:16:
                    3f:ce:7b:4a:71:c7:76:96:ee:ce:00:3b:19:d9:df:
                    a0:fd:f2:3e:6f:80:6a:db:37:ea:b8:05:9f:75:50:
                    7a:db:cc:77:33:e9:49:b0:ae:d3:9f:4e:f7:16:c2:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:1A:7A:38:DA:0A:B3:DD:AC:0E:C9:F8:17:28:6C:0F:03:5A:6A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dWcaejjaCrPdrA7J-BcobA8DWmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:84:d7:f2:35:b2:68:7f:ec:00:98:83:41:a6:1e:85:e9:3a:
         d9:27:aa:9e:77:1c:61:e1:10:e5:a0:13:b9:e0:d8:12:d4:16:
         93:64:4b:55:10:eb:7c:80:92:80:e0:b0:13:30:8c:57:2d:b9:
         43:ff:4a:e2:a2:ae:0d:99:94:18:3f:d7:2e:47:da:24:ac:86:
         83:c6:2a:8b:59:57:91:d6:78:e0:a1:50:0f:69:e9:41:38:fe:
         e7:de:5c:4d:86:2d:11:59:53:fb:8c:a2:6d:2b:d8:55:2a:24:
         0c:b9:36:a7:03:92:a3:f2:23:1c:07:ad:2d:62:78:4c:41:2a:
         13:77:af:90:c2:5a:a0:c5:24:ad:3a:2c:30:24:62:fa:57:f4:
         b6:0c:e7:2c:ef:a3:fb:5a:16:eb:f8:47:2b:6f:d4:a2:0a:03:
         29:ec:28:bd:5e:92:45:ea:ea:01:a0:ce:e8:59:12:bb:62:6f:
         b5:62:a7:bc:3a:4b:ac:ca:88:a2:79:7b:90:45:b3:bd:f4:ac:
         f1:0f:00:d4:c8:4f:df:44:7b:3f:ad:d1:f0:8e:47:10:0c:28:
         cb:b9:86:79:fb:f0:63:c5:92:5a:66:4a:85:77:f6:98:ce:14:
         8b:8b:8e:09:76:e6:e9:6e:1a:bc:d2:bf:05:72:92:55:42:6c:
         b9:ef:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----