Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lCqmecSixbGSKDhT9Na1VrUSpF8.roa
File:                     lCqmecSixbGSKDhT9Na1VrUSpF8.roa (raw, json)
Hash identifier:          tf3CBu8NjeB9GZJkMd8AAWgfwBguyE23GVppKu/S4rg=
Subject key identifier:   94:2A:A6:79:C4:A2:C5:B1:92:28:38:53:F4:D6:B5:56:B5:12:A4:5F
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4C2234226BABE3E7814A663F68425F61
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lCqmecSixbGSKDhT9Na1VrUSpF8.roa
Signing time:             Thu 31 Aug 2023 15:07:04 +0000
ROA not before:           Thu 31 Aug 2023 15:07:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:4c21:9b82/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4c:22:34:22:6b:ab:e3:e7:81:4a:66:3f:68:42:5f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 15:07:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=942aa679c4a2c5b192283853f4d6b556b512a45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:03:cd:80:99:23:37:80:0d:dd:30:2f:19:34:
                    d5:e9:e9:39:72:24:43:ad:fa:e5:5e:be:28:18:d6:
                    b2:2d:1b:88:a3:ef:e5:75:ee:bd:cc:97:08:da:34:
                    f7:2f:0d:90:36:c1:ac:96:f9:98:88:d0:e2:7a:54:
                    0e:b2:29:66:70:66:7d:f2:66:41:ef:bb:48:7a:3d:
                    66:fc:f5:f0:30:40:00:55:46:6b:4a:6c:05:02:12:
                    e2:e6:9e:aa:bf:e6:2d:cd:ff:69:10:38:2d:28:31:
                    2f:1e:10:70:12:12:dc:96:9c:a6:f8:75:89:4d:58:
                    c7:9c:3b:9e:c9:7a:2e:df:d3:00:43:06:50:c2:fc:
                    7a:a5:4c:cf:c7:3b:5d:93:25:3d:4f:9c:0a:ff:6f:
                    79:9a:bf:fc:c0:80:ce:32:b5:e6:fd:73:13:ec:3e:
                    80:45:e5:02:0e:6c:9e:cb:b2:ff:c6:0a:28:a8:b2:
                    ef:ac:de:7f:a8:33:85:2f:ff:25:e2:b7:e6:a6:a7:
                    ea:32:52:92:9b:ab:6d:8b:6f:20:c8:36:e9:d0:e2:
                    17:76:0c:4b:25:e3:78:7e:b8:f3:8c:c1:d9:82:0f:
                    d7:30:a5:c0:18:35:5a:30:33:99:15:cd:3a:59:00:
                    eb:1d:f5:10:ce:c6:6a:db:54:4d:34:c1:41:0e:41:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2A:A6:79:C4:A2:C5:B1:92:28:38:53:F4:D6:B5:56:B5:12:A4:5F
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/lCqmecSixbGSKDhT9Na1VrUSpF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:a4:0e:80:6b:55:2b:60:be:02:3f:f4:97:1f:0e:e8:31:
         75:8c:5d:87:1b:e7:32:f9:7e:ba:c8:3e:8a:16:c4:fd:0e:52:
         c7:a4:f4:39:42:55:70:1c:3f:87:78:1a:37:50:b2:36:59:2c:
         bf:3f:f1:d1:e3:ce:04:20:62:ca:8e:88:92:db:1c:cd:5e:2b:
         e1:0e:fa:4f:8e:2c:b9:6e:fa:e0:bc:52:d1:5f:a6:f0:6f:c9:
         10:32:26:a5:69:d8:df:53:07:c9:fa:da:89:71:d3:0c:3c:29:
         25:12:10:25:91:48:67:b9:f4:77:37:02:39:04:57:5f:c7:85:
         f8:e3:e1:4c:37:72:0c:e5:46:93:fb:40:3d:73:e5:31:d2:76:
         43:9f:76:61:a7:26:c2:32:0d:42:ed:3e:f4:10:24:3c:0e:7d:
         a8:b4:c9:f6:07:91:93:20:0b:49:04:3a:67:90:ac:43:c7:bf:
         fb:f9:dc:b9:b7:bf:ce:29:04:3c:ac:ba:20:8d:fd:ed:a3:af:
         5e:9b:43:53:cb:1d:2d:0b:43:0c:2e:c9:8a:dd:aa:b5:fe:67:
         4b:89:7a:38:e2:2b:4f:27:f3:33:db:5b:a9:65:c8:15:cf:8c:
         5b:15:7f:45:c8:ec:00:90:22:56:0f:5b:f7:cd:f8:29:65:3c:
         7c:23:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----