Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wOquvUQdtG5hauVYtI2bM38ijow.roa
File:                     wOquvUQdtG5hauVYtI2bM38ijow.roa (raw, json)
Hash identifier:          rKv2o7M79/S9lpV+GMGE4aNOx4H9K9XUfj+gaik9HCk=
Subject key identifier:   C0:EA:AE:BD:44:1D:B4:6E:61:6A:E5:58:B4:8D:9B:33:7F:22:8E:8C
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A92EF98DB4797F9F3EA668BF10B5F6BB4
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wOquvUQdtG5hauVYtI2bM38ijow.roa
Signing time:             Thu 14 Sep 2023 09:04:50 +0000
ROA not before:           Thu 14 Sep 2023 09:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64:ffff:0:18a:92ef:50ba/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:ef:98:db:47:97:f9:f3:ea:66:8b:f1:0b:5f:6b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 09:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c0eaaebd441db46e616ae558b48d9b337f228e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:98:0f:48:9d:5b:f7:db:a9:4d:b3:6a:43:
                    32:a3:60:bc:af:40:5a:db:ba:86:b4:d7:2b:a3:6e:
                    71:2d:9b:51:34:3c:46:aa:7d:9b:f5:ea:70:64:67:
                    4b:48:9d:1e:41:5f:8c:8f:35:b9:ff:8f:31:e7:4f:
                    7e:43:c8:f6:9d:73:3d:93:f7:cd:6d:df:5d:63:0c:
                    70:81:22:ef:bc:91:10:f7:33:aa:60:57:f2:94:2b:
                    6d:e9:4a:01:7d:3e:48:08:c7:5a:d4:4f:78:c8:f0:
                    5b:1f:66:1c:31:3e:18:b4:57:9e:b1:f3:16:de:56:
                    95:99:6b:42:b5:70:cb:5a:59:65:37:52:ea:b1:0f:
                    70:8b:7c:7a:24:9e:27:68:85:bd:d9:bb:d7:21:75:
                    65:10:b5:a0:05:41:5a:6c:4a:e1:54:ff:12:63:61:
                    30:68:89:98:79:ca:24:e6:0b:6b:f3:3e:01:03:80:
                    f1:c6:12:57:c6:5d:6f:ac:9d:ae:fb:01:1d:b1:51:
                    0d:fd:8a:be:fd:af:98:0c:56:d5:19:b1:7a:55:e5:
                    34:5f:c2:e9:ba:a7:cf:5a:41:91:0d:03:bb:a6:8a:
                    54:3f:b4:b8:67:7b:b9:f4:41:8e:bc:36:56:6a:3b:
                    f2:82:cf:a5:3f:71:07:fa:36:55:74:04:cf:f7:1e:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EA:AE:BD:44:1D:B4:6E:61:6A:E5:58:B4:8D:9B:33:7F:22:8E:8C
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wOquvUQdtG5hauVYtI2bM38ijow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:50:02:b5:68:c6:66:5f:ce:a7:c8:89:2b:5f:3c:87:0d:71:
         c0:aa:be:98:6b:3a:da:78:c0:03:9a:c3:04:6d:9f:89:7f:d1:
         fc:8f:05:19:f4:d4:52:51:92:19:da:b5:3b:df:b9:ec:21:3d:
         78:2e:dd:d6:cd:9c:3a:4d:a8:63:21:c9:60:20:fb:fd:65:0e:
         29:50:fc:3a:d8:fa:46:db:1c:e5:19:25:25:9f:03:f2:bb:4c:
         0f:1f:6e:be:8a:53:07:d6:bf:79:38:b0:73:0c:03:3d:3a:77:
         c8:16:48:0a:9c:b6:d2:38:49:9f:c7:cd:3f:89:f4:02:a8:c4:
         7e:7c:25:eb:ab:06:44:ad:27:da:14:b8:aa:24:6d:24:e0:67:
         fc:74:e6:54:fa:6e:c3:83:44:22:8a:6c:f0:60:be:fa:ee:ff:
         73:ad:46:ba:c3:c2:9b:6b:73:34:a3:7b:6a:9e:bf:cb:ed:07:
         bd:0c:a0:54:00:61:cd:71:f6:e3:b8:da:11:98:8e:59:93:34:
         c3:5d:16:b7:32:f1:b6:b4:63:c4:9b:5f:a6:ba:95:cb:e5:df:
         d3:66:14:1d:1e:82:ed:d3:a1:38:f4:39:41:07:6f:1c:bf:d6:
         8d:a2:e0:2e:bd:11:dc:1c:5b:65:d3:1f:f1:88:b9:19:75:d8:
         48:de:66:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqS75jbR5f58+pmi/ELX2u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDkwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGVhYWViZDQ0MWRiNDZlNjE2YWU1NThiNDhkOWIzMzdmMjI4ZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDeYD0idW/fbqU2zakMyo2C8r0Ba
27qGtNcro25xLZtRNDxGqn2b9epwZGdLSJ0eQV+MjzW5/48x509+Q8j2nXM9k/fN
bd9dYwxwgSLvvJEQ9zOqYFfylCtt6UoBfT5ICMda1E94yPBbH2YcMT4YtFeesfMW
3laVmWtCtXDLWlllN1LqsQ9wi3x6JJ4naIW92bvXIXVlELWgBUFabErhVP8SY2Ew
aImYecok5gtr8z4BA4DxxhJXxl1vrJ2u+wEdsVEN/Yq+/a+YDFbVGbF6VeU0X8Lp
uqfPWkGRDQO7popUP7S4Z3u59EGOvDZWajvygs+lP3EH+jZVdATP9x7YOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMDqrr1EHbRuYWrlWLSNmzN/Io6MMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvd09xdXZVUWR0RzVoYXVWWXRJMmJNMzhpam93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJVQArVoxmZfzqfIiStf
PIcNccCqvphrOtp4wAOawwRtn4l/0fyPBRn01FJRkhnatTvfuewhPXgu3dbNnDpN
qGMhyWAg+/1lDilQ/DrY+kbbHOUZJSWfA/K7TA8fbr6KUwfWv3k4sHMMAz06d8gW
SAqcttI4SZ/HzT+J9AKoxH58JeurBkStJ9oUuKokbSTgZ/x05lT6bsODRCKKbPBg
vvru/3OtRrrDwptrczSje2qev8vtB70MoFQAYc1x9uO42hGYjlmTNMNdFrcy8ba0
Y8SbX6a6lcvl39NmFB0egu3ToTj0OUEHbxy/1o2i4C69EdwcW2XTH/GIuRl12Eje
Zk4=
-----END CERTIFICATE-----