Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGG-1aefk44ypu3FfUfCvc9sxYI.roa
File:                     vGG-1aefk44ypu3FfUfCvc9sxYI.roa (raw, json)
Hash identifier:          13GpzgMMJF6ZknKm/5hM4/7nDQgB/u+1Eo7AtkvX9yE=
Subject key identifier:   BC:61:BE:D5:A7:9F:93:8E:32:A6:ED:C5:7D:47:C2:BD:CF:6C:C5:82
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8C808F42EB4CE38102D3883F339E5BE8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGG-1aefk44ypu3FfUfCvc9sxYI.roa
Signing time:             Wed 13 Sep 2023 03:05:50 +0000
ROA not before:           Wed 13 Sep 2023 03:05:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8c7f:bbff/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8c:80:8f:42:eb:4c:e3:81:02:d3:88:3f:33:9e:5b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 03:05:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc61bed5a79f938e32a6edc57d47c2bdcf6cc582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:e2:2f:7c:35:20:98:2a:d8:89:32:3b:72:
                    18:10:5e:e8:31:05:60:b8:2a:6b:37:69:c5:32:97:
                    3f:3d:97:62:32:e7:4a:a0:ed:bd:13:b8:f2:77:5b:
                    df:15:bf:6a:ba:14:44:3c:e6:81:85:91:9e:81:1e:
                    23:e9:02:e6:ea:a5:42:6f:b6:91:7b:18:d2:f4:09:
                    7e:88:50:d5:43:13:b7:1d:d5:e0:f4:8d:26:e7:bf:
                    cf:ba:1b:5c:8e:a9:de:7c:fe:16:93:88:f2:92:89:
                    6c:3a:c2:37:86:f3:5a:9e:40:00:3c:6e:5c:e8:08:
                    6a:ac:71:6e:08:b1:b9:5f:69:f5:13:fe:95:90:70:
                    fd:b4:c6:74:aa:97:ae:54:90:e7:ff:91:c7:22:3c:
                    b3:a8:4e:e1:2d:03:dd:69:52:c3:28:1e:3a:4c:c5:
                    a6:53:53:99:54:94:e5:84:9c:7f:52:61:3f:3a:0d:
                    4b:8a:28:e0:4e:eb:05:36:5f:45:9f:bf:0c:65:6d:
                    ef:14:92:f1:7a:f5:30:aa:82:7c:52:cb:b0:62:1e:
                    6b:78:ac:69:3b:97:9c:56:9c:bc:2a:3b:1d:61:ff:
                    8c:90:47:53:be:a4:d6:5d:b4:86:38:3f:09:c5:40:
                    74:02:05:9c:be:ef:a4:98:a4:b0:a9:55:ed:59:da:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:BE:D5:A7:9F:93:8E:32:A6:ED:C5:7D:47:C2:BD:CF:6C:C5:82
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/vGG-1aefk44ypu3FfUfCvc9sxYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:40:8e:09:81:a3:f6:9a:9e:9f:f8:c8:d7:4d:13:f7:45:
         69:28:b5:75:eb:e4:98:c2:9b:d5:cd:81:1d:d7:f2:08:ba:53:
         15:97:5d:c2:8c:9c:48:4d:6f:e3:41:70:40:84:43:15:b0:09:
         9b:24:1d:8d:8b:3b:9f:d0:98:07:01:d8:36:1c:52:08:3e:52:
         63:05:12:a1:1b:19:11:70:a4:83:57:09:42:09:d7:a4:56:b3:
         eb:ea:9a:2e:5f:c7:cd:68:da:e3:fd:77:b7:30:c3:41:cd:49:
         fd:9f:dc:cf:15:27:9d:38:e7:74:06:76:b8:b7:71:dc:ab:93:
         d6:97:31:f5:40:3a:91:af:43:a6:c3:e6:fd:3d:4a:19:d9:9c:
         f7:54:eb:07:45:5e:3a:80:42:a5:49:d9:61:29:37:07:c3:f2:
         cf:1a:66:68:41:94:d0:67:04:f5:d4:b5:8b:dd:a2:3c:e3:de:
         c0:61:62:7b:35:c0:8c:e0:85:3f:b5:c9:e2:a8:f1:b8:08:27:
         91:34:5d:3c:81:55:28:ee:1b:e4:c8:f3:41:3d:ab:93:f1:a1:
         72:83:69:8f:86:0e:1b:f0:dd:ba:e4:bb:a7:d4:b4:5d:93:1e:
         67:7e:ee:3c:79:0e:d0:f8:53:03:09:06:87:d3:3c:b8:d9:cd:
         40:5a:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----