Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rbf0-n2N0g7CU-AU0WeMnuzuILo.roa
File:                     rbf0-n2N0g7CU-AU0WeMnuzuILo.roa (raw, json)
Hash identifier:          1UC32ruJYYk4Thb81V1etdiaP5buf2sZxdG4hloYyxE=
Subject key identifier:   AD:B7:F4:FA:7D:8D:D2:0E:C2:53:E0:14:D1:67:8C:9E:EC:EE:20:BA
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5748D0F6533B16E23A2B47304CCDBAEE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rbf0-n2N0g7CU-AU0WeMnuzuILo.roa
Signing time:             Sat 02 Sep 2023 19:05:04 +0000
ROA not before:           Sat 02 Sep 2023 19:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:5748:b2d/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:57:48:d0:f6:53:3b:16:e2:3a:2b:47:30:4c:cd:ba:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 19:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=adb7f4fa7d8dd20ec253e014d1678c9eecee20ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:b8:48:7c:a5:e6:4f:21:cb:a3:b9:59:57:
                    ef:d9:a8:eb:e8:33:28:8b:3a:cb:70:f8:c5:bf:00:
                    00:bd:a2:30:f8:ee:69:4c:b4:a4:ba:b3:80:f0:ae:
                    9e:28:ab:60:20:81:07:ac:79:a3:d4:8a:84:ac:a8:
                    a8:79:e3:d3:b8:a9:76:2e:1c:87:8b:cf:fa:f1:0d:
                    6a:53:70:48:03:36:77:76:b7:9c:28:0d:cb:4b:9a:
                    d5:78:63:d2:1f:91:e7:c6:e0:a3:f3:03:96:cc:37:
                    8a:1c:49:22:6f:fb:23:e8:58:ba:27:6a:11:37:2a:
                    ec:e1:ef:b2:8e:41:4c:a1:f7:94:8a:6f:6c:21:4b:
                    3e:41:de:53:cc:a3:c8:21:38:2b:3e:30:68:c8:58:
                    78:9e:bd:a9:bd:44:4e:b0:d2:66:8d:a8:19:ad:e9:
                    98:f7:72:32:d0:f3:db:90:ce:e9:aa:8b:84:a6:66:
                    98:48:eb:cb:ef:bd:c7:b0:0c:14:9f:db:87:7c:33:
                    68:fe:e2:9f:48:60:8c:ab:3c:2b:35:81:ae:4a:31:
                    3c:a6:9f:ac:dc:9c:63:ed:f0:6f:06:4a:72:2c:87:
                    a5:c9:38:d1:11:0c:8f:97:21:28:2a:1f:e9:84:88:
                    29:da:60:77:ba:3f:d1:a2:e0:14:e8:e8:55:cf:b0:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B7:F4:FA:7D:8D:D2:0E:C2:53:E0:14:D1:67:8C:9E:EC:EE:20:BA
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/rbf0-n2N0g7CU-AU0WeMnuzuILo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:4d:5a:1e:84:71:07:8a:10:f9:6e:7a:f4:63:8e:e7:e3:
         06:f6:b9:3f:8a:5a:87:af:64:8d:a7:46:bb:12:1e:e6:f1:f3:
         fa:a4:bc:21:e0:17:c4:9b:5c:37:aa:e6:ae:b8:f1:c1:56:9a:
         e0:fe:9d:65:28:50:06:a2:50:ad:fd:aa:a6:c8:90:3d:18:63:
         9f:68:53:9e:82:a9:7e:d4:ba:3e:b9:c5:7a:97:47:ef:0e:e6:
         40:fa:34:da:59:82:16:45:65:0c:e1:aa:8d:86:5d:3a:74:30:
         4b:c1:a5:c6:7c:e3:42:17:47:4b:05:44:92:f4:5c:b2:4a:db:
         60:d2:33:73:18:1b:18:d5:31:bf:c9:c3:77:55:2d:2d:b9:2b:
         26:0d:a1:2e:c0:1b:2e:be:15:ef:d9:bc:34:be:ca:04:9b:6d:
         44:db:7a:2d:8b:56:21:03:c2:ba:cb:76:1e:14:59:15:40:ca:
         e7:ae:5a:1c:58:70:5f:4c:cc:4d:cc:30:d4:f5:9f:d1:51:b7:
         89:98:59:20:e6:f7:d3:63:6e:60:86:68:18:42:3c:a8:09:5a:
         69:00:5a:b2:39:e7:a2:0e:7d:83:eb:24:27:c8:7c:c6:4b:87:
         56:99:fb:52:46:a6:27:ec:23:11:cf:a9:d5:31:93:0b:be:37:
         d6:a4:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----