Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slDcMKI0Yt772WTu2C7DQg5-wwU.roa
File:                     slDcMKI0Yt772WTu2C7DQg5-wwU.roa (raw, json)
Hash identifier:          QwKoMpl6xzXz2M2i/J24LLTIdYCX45ABwy9ATyjQxc4=
Subject key identifier:   B2:50:DC:30:A2:34:62:DE:FB:D9:64:EE:D8:2E:C3:42:0E:7E:C3:05
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA4F5DA3A05F93B9E5309A18E8AE968D0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slDcMKI0Yt772WTu2C7DQg5-wwU.roa
Signing time:             Sun 17 Sep 2023 21:04:50 +0000
ROA not before:           Sun 17 Sep 2023 21:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:a4f5:7e20/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a4:f5:da:3a:05:f9:3b:9e:53:09:a1:8e:8a:e9:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 21:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b250dc30a23462defbd964eed82ec3420e7ec305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7a:7b:1d:2d:6d:b9:b1:af:7b:c3:00:6a:6d:
                    09:49:36:bf:b0:44:86:2c:5b:9e:a2:8a:0f:11:79:
                    76:02:38:b4:11:96:17:83:9c:29:78:46:d7:e1:79:
                    76:94:aa:01:65:53:a0:18:24:5e:dd:fe:9f:5c:98:
                    d8:c0:2a:cb:d3:cc:b1:7b:c1:8e:7f:03:a0:50:d8:
                    72:a4:73:48:f8:14:26:97:bc:32:58:e3:4a:49:e7:
                    2d:56:39:12:3a:d8:60:53:80:f1:24:58:49:59:04:
                    e3:36:4e:dd:9b:71:e2:81:8e:ac:9d:8d:86:63:59:
                    65:53:63:36:cf:16:b4:cb:08:34:e3:67:a8:2f:93:
                    59:3a:a2:9c:ee:d2:6c:9a:aa:57:cf:6d:95:37:0b:
                    8e:54:0c:fe:31:af:0c:f7:05:61:8e:d2:e6:ff:09:
                    64:fb:73:fd:64:46:7f:04:35:d1:0c:59:ea:b4:c8:
                    54:b8:7e:ba:8b:7a:e9:e0:f9:bc:96:59:69:9c:d4:
                    a3:e7:da:92:02:4f:0c:0d:e7:b4:62:32:5a:7c:ca:
                    65:8b:70:f3:99:af:c0:58:0a:c1:cc:c8:ec:d9:3c:
                    7c:24:a8:6c:b7:e7:74:a0:78:bf:8f:db:50:88:95:
                    61:6f:86:0d:31:9e:4c:72:d1:ae:ee:1f:c4:5f:bc:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:50:DC:30:A2:34:62:DE:FB:D9:64:EE:D8:2E:C3:42:0E:7E:C3:05
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/slDcMKI0Yt772WTu2C7DQg5-wwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:7f:be:09:4d:69:a5:d1:7a:fa:4e:79:8d:69:24:40:a9:
         9e:0d:43:80:66:d2:08:73:d3:1b:c8:d2:af:dc:18:91:ec:5b:
         15:c6:e4:9f:39:94:3c:42:91:05:4a:0d:fe:89:4a:50:2c:f2:
         e4:1e:ae:00:38:ef:56:18:bb:49:13:05:39:61:7a:dc:5b:87:
         b2:59:35:7f:ab:ab:ce:25:ef:71:a7:13:e0:d6:4e:a8:86:68:
         7d:8e:1b:17:a9:f8:c6:c9:48:04:fe:ec:4e:0b:41:73:97:ab:
         c1:9c:b3:4b:6d:46:ce:57:59:40:2e:89:d5:5c:21:90:0f:c9:
         17:5d:5f:a5:11:ba:69:8a:3c:59:0e:7e:bd:2a:4f:0c:d2:07:
         27:32:2e:4a:0a:05:5b:05:2b:c0:d7:15:bc:c5:27:95:2e:3d:
         a7:7e:95:cd:73:1a:a7:c5:b6:5e:3b:19:15:92:13:51:5e:34:
         75:b3:38:5a:37:cb:c3:51:74:53:d5:c2:8a:a5:0f:ee:2d:8e:
         0e:97:d4:74:15:c7:d3:3a:6a:38:b2:eb:b7:c2:59:78:3c:69:
         42:c7:5a:8f:66:7b:ff:f7:23:84:09:26:22:3b:cb:8d:37:1f:
         45:b0:7e:8c:ab:77:34:03:6b:6c:53:51:7b:87:0e:0b:dd:6a:
         ac:d4:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----