Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t_7i1oryIHemQ57KZtRy81IvZws.roa
File:                     t_7i1oryIHemQ57KZtRy81IvZws.roa (raw, json)
Hash identifier:          /EynK0bTqKk0flXs952a3ScTf6aey9vHGNttWlVwask=
Subject key identifier:   B7:FE:E2:D6:8A:F2:20:77:A6:43:9E:CA:66:D4:72:F3:52:2F:67:0B
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A9213DDD789A27538BAAE5B22E4FDE6D3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t_7i1oryIHemQ57KZtRy81IvZws.roa
Signing time:             Thu 14 Sep 2023 05:04:50 +0000
ROA not before:           Thu 14 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:9213:8a9b/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:13:dd:d7:89:a2:75:38:ba:ae:5b:22:e4:fd:e6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7fee2d68af22077a6439eca66d472f3522f670b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:0f:eb:59:f2:6d:b3:51:e5:49:21:1a:ce:
                    85:da:0c:ec:32:13:33:df:7f:85:4a:fe:2a:e7:2b:
                    20:56:02:2d:43:65:e4:09:fc:4c:02:c4:39:20:32:
                    00:ca:fb:f1:11:c0:bd:5f:b6:75:e8:5f:25:60:f9:
                    d8:1c:c4:4b:29:91:cf:b8:07:0b:2e:1f:ab:54:8c:
                    82:ce:0e:43:8b:31:53:b3:eb:80:e1:59:54:99:06:
                    73:08:32:94:f3:81:e3:9c:94:b2:b3:95:fe:2d:97:
                    4c:e0:37:b4:3f:25:c2:ef:e5:b3:98:6d:8b:4a:f6:
                    db:7c:0c:3a:18:d7:8a:cc:c9:9f:4b:1f:d5:9d:87:
                    13:79:e3:78:d1:76:40:af:59:72:4b:4d:bb:0f:e3:
                    28:53:1b:74:57:a7:20:dd:08:7b:46:28:e0:09:01:
                    a3:ca:e9:cd:4c:a7:21:86:e7:0b:5b:2a:e0:e7:8d:
                    38:26:92:00:91:76:6b:d1:ac:38:84:ae:5b:1a:e2:
                    11:b4:e2:31:31:e8:bd:7b:69:b5:91:70:64:d6:c3:
                    44:fe:68:72:f2:de:ae:bc:f2:49:ea:7a:a8:72:6d:
                    48:4b:4f:76:df:46:13:5d:0a:c5:55:82:e8:ba:c0:
                    35:e9:7c:91:80:d2:4c:10:f3:43:2f:d6:75:41:be:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FE:E2:D6:8A:F2:20:77:A6:43:9E:CA:66:D4:72:F3:52:2F:67:0B
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/t_7i1oryIHemQ57KZtRy81IvZws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:03:bd:bd:7c:68:a3:8b:2f:f1:e9:9e:7e:0c:a7:2d:3e:7d:
         7e:d3:83:5f:5a:1a:f8:10:ad:bd:dd:1e:65:02:8e:e1:1e:19:
         44:2a:18:71:35:e4:6a:a2:8b:25:be:4e:48:db:dc:7c:b9:ff:
         87:9d:b9:7c:d2:9c:8b:a9:2b:34:5e:6b:72:f6:cf:20:b1:b5:
         39:37:41:89:00:15:0a:b7:8f:73:50:94:b7:cd:ed:9b:17:b6:
         5f:42:81:58:51:00:73:41:4a:91:68:56:6c:67:cd:61:67:6b:
         3b:7a:df:93:3c:93:6e:08:dc:b3:0a:66:11:f8:68:6d:e6:7a:
         7e:c7:1f:40:6e:2d:9a:2b:69:ff:f6:6c:66:62:e3:87:82:e3:
         56:ce:a6:24:4d:24:aa:c6:1e:e2:9d:6d:5a:01:ec:87:21:c8:
         df:08:79:b8:a1:86:c4:fb:2e:1a:0d:11:af:88:83:dd:11:8a:
         25:9e:03:12:ca:9e:3d:05:6c:26:17:c3:d2:fc:9a:50:02:c4:
         29:a8:46:4d:e8:65:47:2e:a1:cd:af:92:ae:2f:a0:a1:c1:5f:
         45:6f:36:ce:44:b0:34:ea:10:52:88:4e:14:dd:c7:c5:7c:bf:
         94:0b:e9:e7:c0:9e:df:14:62:24:f8:ad:b1:94:a5:1a:ff:9f:
         bd:ae:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----