Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wpniIDZKRnTvIcrEsdF-tH4i3Zg.roa
File:                     wpniIDZKRnTvIcrEsdF-tH4i3Zg.roa (raw, json)
Hash identifier:          ZIoog4uDBF8Nf/uIN7wlzzWmAeWTDZHk7cyYUbIkUps=
Subject key identifier:   C2:99:E2:20:36:4A:46:74:EF:21:CA:C4:B1:D1:7E:B4:7E:22:DD:98
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A804492D91B9077A8459E0E43687B2EAE
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wpniIDZKRnTvIcrEsdF-tH4i3Zg.roa
Signing time:             Sun 10 Sep 2023 18:04:52 +0000
ROA not before:           Sun 10 Sep 2023 18:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:8044:1c94/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:80:44:92:d9:1b:90:77:a8:45:9e:0e:43:68:7b:2e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 18:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c299e220364a4674ef21cac4b1d17eb47e22dd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:6c:0e:7b:f8:80:a5:6b:61:d5:61:2e:dd:
                    92:11:b4:25:7d:60:67:c7:b5:05:94:5e:56:49:fb:
                    7a:59:04:49:29:80:79:87:d6:8a:b2:e6:51:ad:8f:
                    a0:9b:3b:af:b8:77:8c:ba:56:f1:52:d8:1a:45:b1:
                    eb:08:74:1c:24:cc:84:a7:f1:f6:91:77:af:cd:61:
                    42:d7:76:c3:6a:45:62:f7:d9:a6:b9:64:e0:a2:8c:
                    bd:45:a2:b8:70:0d:0f:30:cb:6e:6d:b3:d1:69:da:
                    eb:bc:38:e7:d1:8a:e3:aa:92:ac:fa:39:83:3a:8b:
                    59:db:1c:03:a8:44:7d:3f:eb:b4:98:c3:3e:20:0b:
                    9c:73:00:7f:15:ed:e9:22:a8:50:10:e3:ea:98:69:
                    85:a7:df:07:7a:98:97:c8:72:01:c1:dc:62:1b:fb:
                    14:28:ec:b8:41:4b:5e:d3:9b:17:64:8e:59:88:1d:
                    5a:40:33:5c:34:8b:cf:b0:82:93:b5:a7:c2:ae:c0:
                    d9:d6:7d:aa:8f:56:40:41:e7:e9:a9:8c:58:ad:6d:
                    2e:39:0e:74:4c:d6:22:0b:72:94:ec:cf:3a:0d:c8:
                    4e:80:81:5e:a2:0f:74:85:80:fc:ec:d8:7a:2e:8d:
                    9e:c1:cd:6f:f1:69:89:8f:9e:c4:dc:bb:0c:29:4d:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:99:E2:20:36:4A:46:74:EF:21:CA:C4:B1:D1:7E:B4:7E:22:DD:98
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/wpniIDZKRnTvIcrEsdF-tH4i3Zg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:91:74:1d:f4:82:69:0a:31:e3:09:f9:92:ab:6d:0c:8d:c0:
         cf:b3:53:f5:d1:7c:f7:8e:1b:6e:6d:2d:7d:34:bf:01:20:1d:
         55:c5:3b:27:3e:4f:00:ef:fb:d6:a3:b5:26:5c:1a:e1:66:4c:
         c0:a5:a7:ee:f0:25:82:39:28:27:5d:bf:50:bf:19:85:76:b5:
         07:fe:dd:8b:11:8f:08:20:69:de:6d:9b:a0:c8:5c:7f:e8:72:
         64:b8:4d:64:1b:6a:fe:a0:6c:c7:f8:24:4b:5b:e7:ff:71:0d:
         ec:67:f3:09:3f:cc:21:b5:e1:22:6b:ec:dd:13:e7:1c:94:0f:
         6d:17:08:1b:1d:9b:e7:07:ff:f6:2d:cc:13:d1:82:7a:a3:7b:
         6c:04:74:a8:d7:77:40:d0:0d:a9:d0:b3:e7:64:43:0e:d3:cf:
         7d:46:93:c0:58:ce:e2:e9:da:b3:42:a9:f3:95:4c:47:8b:6a:
         ee:cd:c5:69:2d:b6:df:8a:5d:e6:1b:f2:4c:93:53:62:76:be:
         5d:f0:27:01:46:02:09:77:cf:a5:5e:6a:7f:ed:bb:52:ac:45:
         e1:97:bb:dc:ad:1e:34:1a:0d:7d:8f:85:d3:e7:dd:a4:ef:6c:
         e9:87:b6:56:4a:b2:7b:e8:a7:78:1c:f2:25:56:c6:b3:36:f5:
         2f:83:75:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqARJLZG5B3qEWeDkNoey6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEwMTgwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjk5ZTIyMDM2NGE0Njc0ZWYyMWNhYzRiMWQxN2ViNDdlMjJkZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2ZsDnv4gKVrYdVhLt2SEbQlfWBn
x7UFlF5WSft6WQRJKYB5h9aKsuZRrY+gmzuvuHeMulbxUtgaRbHrCHQcJMyEp/H2
kXevzWFC13bDakVi99mmuWTgooy9RaK4cA0PMMtubbPRadrrvDjn0YrjqpKs+jmD
OotZ2xwDqER9P+u0mMM+IAuccwB/Fe3pIqhQEOPqmGmFp98HepiXyHIBwdxiG/sU
KOy4QUte05sXZI5ZiB1aQDNcNIvPsIKTtafCrsDZ1n2qj1ZAQefpqYxYrW0uOQ50
TNYiC3KU7M86DchOgIFeog90hYD87Nh6Lo2ewc1v8WmJj57E3LsMKU2kDwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMKZ4iA2SkZ07yHKxLHRfrR+It2YMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvd3BuaUlEWktSblR2SWNyRXNkRi10SDRpM1pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABKRdB30gmkKMeMJ+ZKr
bQyNwM+zU/XRfPeOG25tLX00vwEgHVXFOyc+TwDv+9ajtSZcGuFmTMClp+7wJYI5
KCddv1C/GYV2tQf+3YsRjwggad5tm6DIXH/ocmS4TWQbav6gbMf4JEtb5/9xDexn
8wk/zCG14SJr7N0T5xyUD20XCBsdm+cH//YtzBPRgnqje2wEdKjXd0DQDanQs+dk
Qw7Tz31Gk8BYzuLp2rNCqfOVTEeLau7NxWkttt+KXeYb8kyTU2J2vl3wJwFGAgl3
z6Vean/tu1KsReGXu9ytHjQaDX2PhdPn3aTvbOmHtlZKsnvop3gc8iVWxrM29S+D
dd8=
-----END CERTIFICATE-----