Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BUvBSx1T9kJULSlbEAhUtg9H5OA.roa
File:                     BUvBSx1T9kJULSlbEAhUtg9H5OA.roa (raw, json)
Hash identifier:          +vQkkXysy+59nlIm+8KiIzk20SrZ05QtVO1w1dKCNuQ=
Subject key identifier:   05:4B:C1:4B:1D:53:F6:42:54:2D:29:5B:10:08:54:B6:0F:47:E4:E0
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A7B2589DF832540E4D6A4F46A73469B18
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BUvBSx1T9kJULSlbEAhUtg9H5OA.roa
Signing time:             Sat 09 Sep 2023 18:12:52 +0000
ROA not before:           Sat 09 Sep 2023 18:12:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:7b:25:89:df:83:25:40:e4:d6:a4:f4:6a:73:46:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 18:12:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=054bc14b1d53f642542d295b100854b60f47e4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:2a:20:14:ee:5e:30:80:d9:31:12:e7:bf:
                    79:d5:aa:02:c2:6e:99:16:94:8a:4e:66:2c:f8:50:
                    79:13:ec:64:84:c3:45:48:4f:0b:ce:c4:d5:c1:1a:
                    0f:0a:0e:07:18:da:a3:d0:20:90:f8:6d:ee:cd:d0:
                    a6:1a:45:6d:2f:9a:6e:a1:2e:9d:22:8e:98:9f:38:
                    48:ac:88:51:4f:71:f2:e7:33:3a:88:55:83:f5:b9:
                    72:e3:2c:08:cc:4f:0c:0b:22:32:e7:da:2c:b9:b4:
                    5d:7b:d9:2e:fe:89:e7:eb:a6:b6:8b:28:2e:0f:bd:
                    41:61:64:a8:ca:24:cd:d1:09:2e:13:e5:df:26:f4:
                    d2:e6:fd:a3:66:f1:cc:96:96:42:6d:48:02:f6:9f:
                    7f:54:45:25:9b:5b:5a:14:0d:05:10:45:29:d5:6e:
                    af:c9:cd:30:71:a3:33:b8:bf:df:71:d5:a9:d1:e0:
                    f3:68:52:e4:e8:1d:e3:c3:08:c9:a5:d7:0d:bb:db:
                    dd:2c:94:93:42:49:01:d0:e5:9e:b5:f4:84:3d:f0:
                    74:37:5c:a4:e5:bc:34:15:90:da:53:34:c5:f9:67:
                    50:a1:f3:fe:d5:33:7f:ce:09:5e:2f:43:ea:d1:8a:
                    1c:1c:df:3f:10:2b:ea:29:88:d5:e8:1a:31:4d:0b:
                    31:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4B:C1:4B:1D:53:F6:42:54:2D:29:5B:10:08:54:B6:0F:47:E4:E0
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/BUvBSx1T9kJULSlbEAhUtg9H5OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:7b:fe:f3:cf:47:4b:58:1a:39:f9:e1:cb:f1:5b:24:01:
         98:69:32:5c:bc:aa:b4:a9:82:52:39:62:e3:17:d2:18:1b:64:
         83:78:43:60:dd:6f:d9:ac:6b:94:89:40:fd:6f:58:f0:30:aa:
         29:c6:ee:2c:53:61:ef:59:cb:ab:e6:e3:d2:3e:19:3e:d9:95:
         42:ae:b0:ef:31:34:24:0b:3a:d5:de:c5:77:0d:9a:ae:78:f9:
         0f:b8:ca:81:39:cf:f8:77:1f:99:e6:7e:b2:b5:8f:f4:ac:1f:
         7b:80:1e:b1:a0:6e:71:e1:20:73:28:d0:46:a7:e4:a4:46:c5:
         2b:23:98:e3:c6:5c:54:94:4d:a3:92:3e:20:49:ac:f5:79:04:
         1a:a4:83:87:6b:a8:19:b4:d5:e8:ad:fb:1b:ea:e3:9e:d1:e2:
         b9:69:c3:13:7e:a5:50:c7:67:dc:b8:16:6c:df:75:65:75:47:
         9c:a3:e5:46:a4:0e:32:c5:fc:b4:56:cb:30:67:41:1a:63:9b:
         89:77:cf:1d:e1:48:3a:96:c0:e8:08:94:b3:06:34:3f:6e:9d:
         1f:4f:40:cf:05:a5:34:47:70:8f:c3:4c:16:2e:ac:c5:91:3e:
         35:da:77:f1:83:a3:9c:c4:88:6c:18:89:ee:6a:42:29:1d:19:
         ac:cd:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----