Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xzFXTbu3TrKu-zXxPiEl2BaLWHo.roa
File:                     xzFXTbu3TrKu-zXxPiEl2BaLWHo.roa (raw, json)
Hash identifier:          5Gt9Bd/r5X+yr8XoeqiZKQPJE2YS6Fgh1SYeMfffJO4=
Subject key identifier:   C7:31:57:4D:BB:B7:4E:B2:AE:FB:35:F1:3E:21:25:D8:16:8B:58:7A
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4956425F204BF020CAB0327250A51CC0
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xzFXTbu3TrKu-zXxPiEl2BaLWHo.roa
Signing time:             Thu 31 Aug 2023 02:05:04 +0000
ROA not before:           Thu 31 Aug 2023 02:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:4955:7933/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:49:56:42:5f:20:4b:f0:20:ca:b0:32:72:50:a5:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 02:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c731574dbbb74eb2aefb35f13e2125d8168b587a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:3f:77:8a:5e:bc:43:72:e0:df:e5:8c:f4:
                    56:54:09:76:10:ad:94:84:5c:9f:45:be:cd:56:73:
                    fa:a3:fb:1f:9b:2f:2a:03:04:53:9b:52:4a:a0:c4:
                    9f:fe:34:ed:cd:1e:9d:6e:c4:3f:cf:e8:d3:ec:7e:
                    96:81:aa:4c:03:7e:50:3b:37:15:4e:09:d7:99:30:
                    a7:66:98:e2:38:ba:97:87:42:4d:8a:35:a6:0a:6d:
                    37:e4:03:2a:a0:73:94:76:0a:11:1b:3f:32:b3:50:
                    e9:74:8e:10:17:f2:5e:cc:3d:e7:bc:cf:a7:df:a0:
                    66:a0:b7:1c:aa:72:48:3e:d7:2c:4e:f1:2b:cc:e4:
                    df:1b:92:ca:2d:1d:39:da:75:34:60:3c:a0:88:60:
                    e0:2a:4d:39:48:e5:67:63:e8:58:d4:1b:14:ee:35:
                    e3:ae:93:b0:dd:e9:48:9b:47:2e:ab:d7:c5:ae:c3:
                    1b:57:aa:07:65:09:f5:52:f7:c1:0a:5d:ff:3f:14:
                    8d:e1:7c:6e:b5:3d:78:3e:f6:e7:f7:ad:32:13:b4:
                    9f:33:79:11:e4:9b:f9:fe:8a:1c:91:2d:c4:7f:2c:
                    82:78:16:24:a7:85:a8:4c:67:8e:7a:b4:f2:ea:8f:
                    c2:6b:79:68:aa:e2:a9:df:fc:41:c1:b9:5b:4a:f4:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:31:57:4D:BB:B7:4E:B2:AE:FB:35:F1:3E:21:25:D8:16:8B:58:7A
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/xzFXTbu3TrKu-zXxPiEl2BaLWHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:91:05:15:fb:4a:82:ba:9f:db:bc:d1:23:1c:fc:02:62:ba:
         42:6a:64:14:2d:67:03:a4:18:21:96:bc:9b:80:ab:47:8b:f2:
         4e:0b:9c:ab:b9:4b:dd:52:f1:41:91:83:21:43:da:eb:19:1b:
         e0:c7:ef:a4:39:1c:d6:f7:75:34:2c:45:73:c5:23:93:d9:1b:
         05:91:13:0d:03:b4:ab:a8:e8:46:70:45:ec:1e:c7:68:5c:39:
         50:a2:a7:4c:a0:66:72:0e:dd:ae:21:c7:37:30:5e:fe:0b:90:
         05:5c:56:92:0c:b2:5e:c6:a9:0f:01:b6:f9:d7:cf:a0:2e:93:
         11:03:12:c6:60:1b:fa:4b:4d:e6:78:d6:17:2d:b9:de:ad:50:
         82:4e:4c:45:01:7c:11:23:f0:08:4c:7d:11:48:ce:dd:a2:bf:
         4b:32:ba:48:b3:4f:46:3a:e3:26:e4:5d:f4:f5:46:b7:17:c4:
         e0:6d:47:6c:68:11:8d:1b:d6:73:55:9e:dd:c1:c7:21:83:16:
         a1:c3:c3:68:de:af:fe:25:48:88:a0:5e:01:ed:1f:fd:ce:8b:
         7c:27:99:e4:a8:2b:92:90:e4:b0:cb:67:3f:02:95:cf:b9:e8:
         99:40:48:91:8b:d1:c3:f1:39:58:1d:2c:3c:08:79:27:c3:87:
         60:6f:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----