Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/62HsLqX40VCnTL_MicHFXFBLIBA.roa
File:                     62HsLqX40VCnTL_MicHFXFBLIBA.roa (raw, json)
Hash identifier:          kOAJ9lUEw45PqFM/XX2qwZKILXnXl1fO3G1xa5/1Yeo=
Subject key identifier:   EB:61:EC:2E:A5:F8:D1:50:A7:4C:BF:CC:89:C1:C5:5C:50:4B:20:10
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A92B8A93CBC7D56233011295F0A255838
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/62HsLqX40VCnTL_MicHFXFBLIBA.roa
Signing time:             Thu 14 Sep 2023 08:04:50 +0000
ROA not before:           Thu 14 Sep 2023 08:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:92b8:a38/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:b8:a9:3c:bc:7d:56:23:30:11:29:5f:0a:25:58:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 14 08:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb61ec2ea5f8d150a74cbfcc89c1c55c504b2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:b8:91:19:84:d9:14:d5:bb:ff:c5:3e:e9:
                    75:17:85:3c:ac:5c:a8:83:53:3c:84:11:55:f9:0f:
                    b7:3a:f1:d5:24:47:70:ba:8f:33:07:60:1d:2e:22:
                    87:40:89:f1:2b:01:64:12:fc:42:af:11:20:78:3f:
                    69:5e:08:8e:c3:1e:00:a2:40:56:b7:af:9e:04:fd:
                    13:0c:d8:49:e2:dc:4e:dd:58:64:bb:38:7a:4d:32:
                    7d:b2:cd:f6:75:9c:c3:2c:25:8e:cf:ec:73:ab:34:
                    4d:1c:dd:4f:67:e0:ce:31:2b:a8:c7:29:a1:85:66:
                    ec:96:be:31:5e:ac:85:87:b1:d2:15:5d:a0:15:cb:
                    83:b5:bd:13:6d:82:a5:02:fa:17:58:ba:bd:fa:c6:
                    de:d3:d5:45:cf:8e:77:f7:57:82:13:f2:db:18:34:
                    c6:e0:db:3b:a5:40:52:ae:5f:ac:28:88:92:32:40:
                    b9:0f:e6:c1:c9:5f:ea:15:0a:9e:5a:66:b2:eb:59:
                    da:d9:00:b2:8a:c5:bd:a8:7c:3f:8c:2c:7a:6d:a5:
                    b1:ea:32:c1:18:e5:6a:25:b2:34:80:98:95:9d:5b:
                    6a:6f:73:61:e1:c2:f6:48:b1:d8:10:18:eb:69:cb:
                    92:0e:c7:fa:b8:c0:6c:60:3e:fe:6d:d5:93:f2:43:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:EC:2E:A5:F8:D1:50:A7:4C:BF:CC:89:C1:C5:5C:50:4B:20:10
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/62HsLqX40VCnTL_MicHFXFBLIBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:c9:01:de:3b:a8:10:43:15:37:e5:53:77:1a:a0:5d:3d:
         98:f6:0d:d9:4f:2b:1c:03:13:5c:aa:9d:f2:da:6f:43:7b:94:
         52:21:77:38:8d:d5:8e:a9:9c:5f:6c:4a:67:24:60:28:ba:c0:
         5f:2f:c4:42:7b:be:76:74:b8:19:d9:d1:ff:78:ae:07:43:9e:
         78:1f:ef:ad:1c:3d:e1:d9:b8:2d:a4:be:e7:3b:be:b1:25:93:
         ab:dd:84:6e:72:97:46:94:2d:61:20:5d:ef:ef:20:c5:ff:10:
         76:db:1a:7f:f4:3e:83:3b:21:13:b7:f6:ba:d5:a7:f3:7e:f9:
         ea:4f:d5:f5:4d:f2:35:e6:6e:bd:8c:33:50:9f:e4:8d:6b:72:
         49:19:03:98:96:c4:ee:78:eb:89:2a:25:5f:76:1b:99:e4:8c:
         af:34:b3:e4:8f:c4:2c:59:f2:56:a7:cd:25:0c:ee:d4:c2:7f:
         36:9a:76:ce:2a:1f:36:68:0a:92:a6:82:ce:47:7f:f8:b3:37:
         e7:1c:49:4d:ec:08:74:31:7b:4b:65:3e:9c:e3:37:11:6f:00:
         5e:a2:cb:0f:e7:2f:24:ac:48:b9:d3:bb:5b:e2:8a:2d:e4:55:
         bb:6b:64:c4:5c:73:22:d6:c4:ff:ce:18:b6:61:f2:d2:a1:9f:
         a8:89:a9:ca
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqSuKk8vH1WIzARKV8KJVg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE0MDgwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjYxZWMyZWE1ZjhkMTUwYTc0Y2JmY2M4OWMxYzU1YzUwNGIyMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEu4kRmE2RTVu//FPul1F4U8rFyo
g1M8hBFV+Q+3OvHVJEdwuo8zB2AdLiKHQInxKwFkEvxCrxEgeD9pXgiOwx4AokBW
t6+eBP0TDNhJ4txO3Vhkuzh6TTJ9ss32dZzDLCWOz+xzqzRNHN1PZ+DOMSuoxymh
hWbslr4xXqyFh7HSFV2gFcuDtb0TbYKlAvoXWLq9+sbe09VFz45391eCE/LbGDTG
4Ns7pUBSrl+sKIiSMkC5D+bByV/qFQqeWmay61na2QCyisW9qHw/jCx6baWx6jLB
GOVqJbI0gJiVnVtqb3Nh4cL2SLHYEBjracuSDsf6uMBsYD7+bdWT8kOUNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOth7C6l+NFQp0y/zInBxVxQSyAQMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvNjJIc0xxWDQwVkNuVExfTWljSEZYRkJMSUJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH3iyQHeO6gQQxU35VN3
GqBdPZj2DdlPKxwDE1yqnfLab0N7lFIhdziN1Y6pnF9sSmckYCi6wF8vxEJ7vnZ0
uBnZ0f94rgdDnngf760cPeHZuC2kvuc7vrElk6vdhG5yl0aULWEgXe/vIMX/EHbb
Gn/0PoM7IRO39rrVp/N++epP1fVN8jXmbr2MM1Cf5I1rckkZA5iWxO5464kqJV92
G5nkjK80s+SPxCxZ8lanzSUM7tTCfzaads4qHzZoCpKmgs5Hf/izN+ccSU3sCHQx
e0tlPpzjNxFvAF6iyw/nLySsSLnTu1viii3kVbtrZMRccyLWxP/OGLZh8tKhn6iJ
qco=
-----END CERTIFICATE-----