Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/reOmCoptY7T69n59hEbP8dd5PCc.roa
File:                     reOmCoptY7T69n59hEbP8dd5PCc.roa (raw, json)
Hash identifier:          NqHHK61hf+fFEIqcGOeH3GN7cqz2xMyTH/m5B/ZUL5M=
Subject key identifier:   AD:E3:A6:0A:8A:6D:63:B4:FA:F6:7E:7D:84:46:CF:F1:D7:79:3C:27
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A954BD731F125B527EFF752A342CB058D
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/reOmCoptY7T69n59hEbP8dd5PCc.roa
Signing time:             Thu 14 Sep 2023 20:04:50 +0000
ROA not before:           Thu 14 Sep 2023 20:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:954b:7776/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:95:4b:d7:31:f1:25:b5:27:ef:f7:52:a3:42:cb:05:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 20:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ade3a60a8a6d63b4faf67e7d8446cff1d7793c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:8c:3f:59:bb:ae:4a:6f:ed:fa:c4:cf:10:
                    42:74:39:ca:e0:bc:67:18:ce:08:88:1c:0a:41:5b:
                    5d:88:a4:b8:42:04:44:41:a1:53:50:bc:d0:a9:f3:
                    86:f9:5e:25:d9:4c:b2:45:18:82:df:17:16:a4:3a:
                    26:ac:91:ff:a3:21:08:bb:7a:a0:51:02:91:f2:ca:
                    91:12:8e:36:2a:20:4b:f9:9f:24:a8:e1:59:b9:6e:
                    76:32:8e:74:ca:83:b8:e8:b6:5f:4a:cd:ef:1a:30:
                    16:29:23:31:74:7c:1e:a3:ee:c5:50:7e:ab:1e:2a:
                    b2:30:8f:fe:ae:f2:eb:f6:f8:a8:32:6c:62:dd:ff:
                    0d:86:9d:45:50:00:59:02:b3:25:b9:73:3d:07:3d:
                    13:d1:e0:bb:c2:b1:73:70:4d:45:a8:32:45:97:3b:
                    5e:ca:57:bb:a7:7e:d5:d4:0c:86:92:de:ee:e5:86:
                    87:65:e3:dc:69:a6:ac:6a:37:8e:2e:cf:9c:84:96:
                    8c:a4:d1:16:61:4c:d4:23:52:35:a1:7d:2b:31:81:
                    07:b1:75:45:90:6b:54:71:75:27:e9:db:d0:34:24:
                    ac:ad:20:77:b6:4c:20:b1:8b:9b:4f:61:17:39:84:
                    94:39:8e:0a:93:a8:1e:08:c2:1f:e9:b7:e7:da:9a:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:A6:0A:8A:6D:63:B4:FA:F6:7E:7D:84:46:CF:F1:D7:79:3C:27
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/reOmCoptY7T69n59hEbP8dd5PCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:be:70:88:69:53:a0:c5:b5:e0:16:32:c9:ac:7b:8b:eb:
         7c:7a:1e:b8:6b:d5:59:e5:67:b4:82:c8:e8:fe:35:b7:a8:22:
         60:be:09:9d:35:a1:a4:f5:8b:41:e8:79:c4:63:40:1c:ec:f6:
         2e:4d:ea:2b:24:2f:c4:4a:b3:19:6b:f2:b5:e2:6a:c5:45:41:
         59:b3:e1:92:25:1c:fa:4a:d2:83:8d:24:b6:59:b9:d1:fb:3f:
         2d:10:b9:0a:4e:b2:90:d9:6b:aa:ec:0e:17:0d:7f:51:94:6d:
         3b:a0:77:d9:20:0f:f9:31:75:24:50:74:45:5e:03:b3:1c:3d:
         02:1d:c0:d1:28:33:39:9a:89:88:a7:08:5b:54:6c:ad:2d:c5:
         91:db:5b:49:f9:8b:d4:62:6f:8b:2a:93:64:50:6a:c4:25:d3:
         0c:97:2f:a9:49:0c:2f:e4:2d:43:e0:10:b5:0b:ea:fe:a4:c7:
         94:f6:96:6c:0f:7a:43:10:48:9f:8d:54:91:32:01:0c:8e:b0:
         08:99:ed:69:6c:c8:57:cb:ae:4c:d6:b8:84:e9:08:85:61:db:
         43:d5:5a:47:cc:05:a8:b9:4d:c9:41:8b:30:c0:18:37:f8:04:
         c8:d4:f6:de:98:f4:e5:eb:70:27:76:e9:0b:f0:0d:da:32:53:
         da:47:ed:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqVS9cx8SW1J+/3UqNCywWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MjAwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGUzYTYwYThhNmQ2M2I0ZmFmNjdlN2Q4NDQ2Y2ZmMWQ3NzkzYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKMP1m7rkpv7frEzxBCdDnK4Lxn
GM4IiBwKQVtdiKS4QgREQaFTULzQqfOG+V4l2UyyRRiC3xcWpDomrJH/oyEIu3qg
UQKR8sqREo42KiBL+Z8kqOFZuW52Mo50yoO46LZfSs3vGjAWKSMxdHweo+7FUH6r
HiqyMI/+rvLr9vioMmxi3f8Nhp1FUABZArMluXM9Bz0T0eC7wrFzcE1FqDJFlzte
yle7p37V1AyGkt7u5YaHZePcaaasajeOLs+chJaMpNEWYUzUI1I1oX0rMYEHsXVF
kGtUcXUn6dvQNCSsrSB3tkwgsYubT2EXOYSUOY4Kk6geCMIf6bfn2ppt6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK3jpgqKbWO0+vZ+fYRGz/HXeTwnMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvcmVPbUNvcHRZN1Q2OW41OWhFYlA4ZGQ1UENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABzDvnCIaVOgxbXgFjLJ
rHuL63x6Hrhr1VnlZ7SCyOj+NbeoImC+CZ01oaT1i0HoecRjQBzs9i5N6iskL8RK
sxlr8rXiasVFQVmz4ZIlHPpK0oONJLZZudH7Py0QuQpOspDZa6rsDhcNf1GUbTug
d9kgD/kxdSRQdEVeA7McPQIdwNEoMzmaiYinCFtUbK0txZHbW0n5i9Rib4sqk2RQ
asQl0wyXL6lJDC/kLUPgELUL6v6kx5T2lmwPekMQSJ+NVJEyAQyOsAiZ7WlsyFfL
rkzWuITpCIVh20PVWkfMBai5TclBizDAGDf4BMjU9t6Y9OXrcCd26QvwDdoyU9pH
7b0=
-----END CERTIFICATE-----