Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mzAVfaderirfSvzlnb7NjfCSdKI.roa
File:                     mzAVfaderirfSvzlnb7NjfCSdKI.roa (raw, json)
Hash identifier:          FqvB9Pp6GFybMCafQ9yM0gRGIpFj36dPEFYcwz7YAZA=
Subject key identifier:   9B:30:15:7D:A7:5E:AE:2A:DF:4A:FC:E5:9D:BE:CD:8D:F0:92:74:A2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5ED57E8C9A737E9635FA47F18098A503
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mzAVfaderirfSvzlnb7NjfCSdKI.roa
Signing time:             Mon 04 Sep 2023 06:16:04 +0000
ROA not before:           Mon 04 Sep 2023 06:16:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5e:d5:7e:8c:9a:73:7e:96:35:fa:47:f1:80:98:a5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  4 06:16:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b30157da75eae2adf4afce59dbecd8df09274a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:34:22:2f:ae:12:30:e7:22:fb:c3:30:7f:
                    47:c9:73:1c:d5:d5:0c:f2:a1:7c:aa:50:47:65:0e:
                    e0:d6:e2:8b:4a:1a:5c:b4:dd:6b:dd:cf:18:01:eb:
                    47:eb:38:ea:14:15:08:4c:8d:01:f6:f9:2b:61:59:
                    88:3d:c8:a0:5e:a2:f9:97:b5:5e:8e:f4:45:05:c8:
                    14:64:3f:58:59:cb:b7:b2:5b:c5:cd:4c:d5:e5:6a:
                    3e:17:9d:e4:e0:2a:da:f8:b7:f8:3f:fb:d8:aa:a1:
                    3f:61:40:43:8d:93:11:87:2c:93:8d:75:af:eb:f9:
                    47:82:60:65:10:89:25:18:ba:cc:b8:dc:4a:8b:6c:
                    9e:eb:d5:78:51:b9:83:d0:34:7c:1b:cf:d2:f7:3a:
                    bc:ee:f1:75:83:6d:3d:93:87:c8:be:95:bd:af:8f:
                    6b:a0:cd:35:20:fc:f8:a0:e2:a8:84:86:3a:a8:78:
                    f4:9a:68:ee:6d:2c:42:83:5e:3d:fb:6c:c4:7c:36:
                    68:cc:74:cd:ca:92:87:21:6a:a2:ab:9e:f9:d4:14:
                    10:10:cd:8d:05:13:9a:0a:dc:d6:35:a8:32:e5:10:
                    14:ea:4f:d4:b0:e9:46:18:4f:3e:24:44:84:d1:87:
                    9c:0a:d1:ea:12:04:6c:2d:b0:25:bb:18:80:90:cc:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:30:15:7D:A7:5E:AE:2A:DF:4A:FC:E5:9D:BE:CD:8D:F0:92:74:A2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/mzAVfaderirfSvzlnb7NjfCSdKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:97:01:7d:26:15:c1:f7:1c:2c:39:00:61:5d:19:ba:1b:
         17:66:a3:97:5f:c8:29:f3:8d:c2:0a:c2:9e:8f:56:bc:94:c7:
         06:69:87:ba:e1:ae:71:87:5b:4c:2c:84:46:07:92:84:f0:19:
         5c:fc:c1:e3:ec:bf:d3:a5:d7:a7:92:f5:69:1d:47:65:11:92:
         29:b7:a8:29:3a:db:1c:a1:d5:4b:7d:db:ab:5e:1e:21:17:28:
         23:13:83:b1:3e:3f:b5:13:2e:19:bd:6c:8d:02:c2:d9:dd:37:
         0a:38:28:8c:30:6b:ef:ee:f6:0a:c8:2c:18:cd:65:54:f4:92:
         b9:97:61:e9:20:0a:f2:29:d5:49:ff:85:23:38:13:03:a5:d4:
         58:b5:e9:5d:74:2f:fd:a0:49:cb:b7:77:c2:63:5e:5d:16:b4:
         37:f6:c2:70:39:e1:34:90:8d:c8:15:0a:d3:7a:f2:4c:e4:c3:
         0a:d6:2e:3e:69:7b:54:ab:cd:8f:4e:c2:81:87:db:d1:85:46:
         b4:0b:18:eb:dc:26:69:86:2f:20:eb:d2:3d:f5:99:c2:ab:1d:
         5e:4d:23:35:86:67:bf:90:ba:1c:6e:15:15:d2:d7:63:2b:09:
         f3:8e:17:b2:34:b5:e9:97:34:82:c3:ae:82:2d:7a:2c:45:bf:
         34:5d:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----