Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mkVVULAtfeN8pml9mK2Axd0ocAk.roa
File:                     mkVVULAtfeN8pml9mK2Axd0ocAk.roa (raw, json)
Hash identifier:          WfPMiYuvHbLTEcQ/NGYT+Wa6B+o6D6YnFe8OUY3AQb4=
Subject key identifier:   9A:45:55:50:B0:2D:7D:E3:7C:A6:69:7D:98:AD:80:C5:DD:28:70:09
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A72C0D3384507D12A5240F1DA5F8E2CE1
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mkVVULAtfeN8pml9mK2Axd0ocAk.roa
Signing time:             Fri 08 Sep 2023 03:05:54 +0000
ROA not before:           Fri 08 Sep 2023 03:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:72c0:a1a3/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:72:c0:d3:38:45:07:d1:2a:52:40:f1:da:5f:8e:2c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 03:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a455550b02d7de37ca6697d98ad80c5dd287009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:30:15:6c:70:5f:13:63:45:b2:90:81:04:
                    9a:4c:0a:b7:2c:14:0f:2b:33:4c:e2:db:02:f1:a1:
                    3b:7f:4e:30:7d:5b:1d:5c:ef:5e:e8:ec:5a:bb:69:
                    c5:b8:ee:c7:f6:ff:37:36:23:9d:63:af:f0:4b:74:
                    c6:18:d7:b4:88:fc:89:2d:8d:d6:11:df:f2:73:34:
                    fa:a9:8d:b3:03:bc:62:6d:87:fe:ac:45:fa:01:89:
                    27:ce:ad:1d:a9:0e:ba:42:76:47:2c:93:2f:cf:22:
                    5c:05:49:de:52:94:81:d9:e0:41:cc:76:5b:2a:38:
                    ac:0d:a7:c0:51:9b:00:0b:8d:4b:9d:8d:52:7a:b9:
                    35:44:20:52:fe:39:55:02:ec:08:bc:f8:e7:45:e3:
                    0a:0e:63:1d:ad:7f:d0:14:1a:2c:7b:24:05:b7:8c:
                    d2:ad:b4:5b:da:58:7a:37:fd:7d:33:77:68:a9:5f:
                    84:f4:65:8e:44:57:86:c9:a9:94:ec:34:31:68:b1:
                    c9:b9:43:21:08:00:d6:c5:82:70:87:57:16:f4:83:
                    8e:c1:56:42:97:9c:ae:fb:29:e4:2b:66:96:57:d0:
                    80:9c:8c:c4:17:f7:c1:44:7e:f2:42:fd:1a:c5:21:
                    99:0b:26:5e:66:04:f8:e9:64:1e:1e:ce:34:4f:0d:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:45:55:50:B0:2D:7D:E3:7C:A6:69:7D:98:AD:80:C5:DD:28:70:09
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mkVVULAtfeN8pml9mK2Axd0ocAk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:80:7c:ec:21:24:6a:c5:8b:21:fe:6e:df:b1:9d:a6:42:
         1f:0f:4c:5a:3a:80:47:89:02:b1:e6:3e:5b:ec:f7:b6:ce:d6:
         32:ff:1a:da:f8:1c:af:fa:70:e4:8e:ec:e6:a4:15:47:b8:0f:
         78:fd:1a:da:c2:83:dd:18:aa:6a:27:19:b4:ab:1d:20:f7:3f:
         3a:83:96:f3:80:68:12:eb:91:fa:5a:6a:be:10:e0:ca:77:21:
         33:97:90:4d:c3:88:dc:aa:c7:3e:15:5c:2f:aa:5c:25:b5:2c:
         5a:dd:7e:a9:c0:0f:ba:4b:57:10:01:b3:81:92:91:78:3d:d2:
         82:4d:07:46:c2:3a:f6:d1:a3:7c:c9:31:df:7d:2c:27:c3:ec:
         f2:df:d4:74:7c:80:f7:99:c1:d8:ea:b3:9c:7c:96:e5:3a:66:
         62:43:b1:5f:17:4c:8f:e4:c1:cb:a5:be:34:ae:8d:41:42:6f:
         cd:54:6c:70:2e:ff:67:c2:25:72:3b:9d:40:ca:33:41:fd:2e:
         cc:ca:c7:80:ce:86:bf:f9:f0:4a:f0:b8:06:56:9a:d6:c5:3c:
         50:14:78:ea:ba:68:a5:63:61:07:74:58:8e:20:15:6b:d7:2c:
         5d:ee:3d:2d:9e:8a:fe:94:47:41:06:69:77:bd:e2:42:aa:f0:
         b9:9f:cd:f1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpywNM4RQfRKlJA8dpfjizhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTA4MDMwNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTQ1NTU1MGIwMmQ3ZGUzN2NhNjY5N2Q5OGFkODBjNWRkMjg3MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/wwFWxwXxNjRbKQgQSaTAq3LBQP
KzNM4tsC8aE7f04wfVsdXO9e6Oxau2nFuO7H9v83NiOdY6/wS3TGGNe0iPyJLY3W
Ed/yczT6qY2zA7xibYf+rEX6AYknzq0dqQ66QnZHLJMvzyJcBUneUpSB2eBBzHZb
KjisDafAUZsAC41LnY1Serk1RCBS/jlVAuwIvPjnReMKDmMdrX/QFBoseyQFt4zS
rbRb2lh6N/19M3doqV+E9GWORFeGyamU7DQxaLHJuUMhCADWxYJwh1cW9IOOwVZC
l5yu+ynkK2aWV9CAnIzEF/fBRH7yQv0axSGZCyZeZgT46WQeHs40Tw3dCwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJpFVVCwLX3jfKZpfZitgMXdKHAJMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvbWtWVlVMQXRmZU44cG1sOW1LMkF4ZDBvY0FrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACsQgHzsISRqxYsh/m7f
sZ2mQh8PTFo6gEeJArHmPlvs97bO1jL/Gtr4HK/6cOSO7OakFUe4D3j9GtrCg90Y
qmonGbSrHSD3PzqDlvOAaBLrkfpaar4Q4Mp3ITOXkE3DiNyqxz4VXC+qXCW1LFrd
fqnAD7pLVxABs4GSkXg90oJNB0bCOvbRo3zJMd99LCfD7PLf1HR8gPeZwdjqs5x8
luU6ZmJDsV8XTI/kwculvjSujUFCb81UbHAu/2fCJXI7nUDKM0H9LszKx4DOhr/5
8ErwuAZWmtbFPFAUeOq6aKVjYQd0WI4gFWvXLF3uPS2eiv6UR0EGaXe94kKq8Lmf
zfE=
-----END CERTIFICATE-----