Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jMkxWopYHy-horFxOCn0T7px_60.roa
File:                     jMkxWopYHy-horFxOCn0T7px_60.roa (raw, json)
Hash identifier:          GO0yWGxxgrGO1Er/qgifFMgzZNn4cN9Szb1J59jlQVs=
Subject key identifier:   8C:C9:31:5A:8A:58:1F:2F:A1:A2:B1:71:38:29:F4:4F:BA:71:FF:AD
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA2D0894ACCC93406A3B6B48625A93133
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jMkxWopYHy-horFxOCn0T7px_60.roa
Signing time:             Sun 17 Sep 2023 11:04:50 +0000
ROA not before:           Sun 17 Sep 2023 11:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:a2cf:ea11/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a2:d0:89:4a:cc:c9:34:06:a3:b6:b4:86:25:a9:31:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 11:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cc9315a8a581f2fa1a2b1713829f44fba71ffad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:2b:61:ea:69:0d:54:bb:84:76:26:ff:5c:
                    e3:90:5d:28:e1:94:06:6f:9e:a7:32:8e:2e:2c:e3:
                    b4:bb:a2:b1:8a:ba:80:7d:5b:cc:c8:88:47:de:47:
                    66:a5:67:3b:b9:cc:24:3d:d0:d7:35:3b:65:8c:8d:
                    2f:b6:0d:ba:1e:c5:42:0d:0b:a2:d5:0f:4b:22:23:
                    18:b8:22:c8:0d:5d:58:b1:f8:69:93:05:a3:b7:73:
                    c8:93:e4:49:61:90:a8:c9:f2:21:7d:7f:74:a4:31:
                    16:c4:48:2d:5f:e8:2b:dc:9d:e2:83:59:50:ce:cc:
                    43:d8:bc:74:9e:db:7a:73:b4:ee:81:64:d5:4c:0f:
                    19:03:a7:05:4a:8a:f7:9a:3c:e3:a5:e9:54:0b:7c:
                    bc:86:9a:29:c7:44:bb:23:2e:d2:4d:46:69:73:1e:
                    63:c4:64:a0:cc:ed:05:fd:4e:b8:39:a0:2a:71:70:
                    7e:38:6f:f5:bd:9e:37:7d:77:c0:02:61:14:11:27:
                    f8:bc:5d:f2:47:f0:69:86:79:85:60:42:59:51:ba:
                    64:fb:46:b7:f7:87:04:f3:af:96:34:ba:df:b7:4d:
                    88:23:a2:04:fe:84:4b:99:de:b0:1e:84:f7:81:23:
                    2a:b4:2e:eb:ef:16:3b:0d:15:22:e1:57:08:c2:1e:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C9:31:5A:8A:58:1F:2F:A1:A2:B1:71:38:29:F4:4F:BA:71:FF:AD
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/jMkxWopYHy-horFxOCn0T7px_60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:ec:b1:6c:c4:e7:30:48:5f:73:59:15:30:f4:3d:00:10:
         e1:5f:97:c8:09:0c:89:6c:94:79:f8:d1:27:7c:a8:1d:b0:72:
         0c:ab:8f:78:b0:c7:ad:1c:7f:d2:5b:df:36:65:52:ce:d8:48:
         76:63:be:27:b5:0e:b9:84:17:a4:ab:f3:54:0f:76:ed:de:8f:
         9a:63:50:41:2b:3b:6d:c2:f1:ae:b5:d1:a4:33:29:48:17:1c:
         e1:1d:08:58:f1:bc:1d:45:ff:32:32:9d:51:45:65:20:19:f2:
         38:12:d0:2e:5b:01:7c:ef:48:41:63:b6:19:72:14:75:57:4c:
         e8:5d:e6:b4:ce:50:05:81:c2:cc:f0:31:37:ce:e3:97:04:6d:
         7e:87:d4:4e:b8:26:d3:81:50:8d:b7:f3:ec:04:e3:63:7d:5d:
         06:a1:44:68:12:0f:bf:42:d8:fa:63:4f:64:f7:04:dc:bf:2d:
         77:7a:14:8c:20:12:fe:4a:ce:3e:28:d2:8a:00:65:24:60:79:
         a5:e0:98:d6:47:58:f6:cd:c8:c2:01:a1:42:d1:5f:ab:ab:b7:
         c2:88:cc:e8:c6:84:10:ac:2d:20:84:4d:0b:5c:7a:68:04:e6:
         50:f7:ed:2e:b1:43:7c:be:28:b6:36:cc:3e:46:2c:d8:8f:79:
         4c:ab:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----