Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ku_tT0GSx4maqd3oq5-edFgCeFE.roa
File:                     Ku_tT0GSx4maqd3oq5-edFgCeFE.roa (raw, json)
Hash identifier:          zVzWG1aA++hC0aHJUzqcSmZmJTkKaT9mWKdGV7vDLxM=
Subject key identifier:   2A:EF:ED:4F:41:92:C7:89:9A:A9:DD:E8:AB:9F:9E:74:58:02:78:51
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8081DCE2CB9E8DC5104A6EC010AFEB8E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ku_tT0GSx4maqd3oq5-edFgCeFE.roa
Signing time:             Sun 10 Sep 2023 19:11:48 +0000
ROA not before:           Sun 10 Sep 2023 19:11:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:80:81:dc:e2:cb:9e:8d:c5:10:4a:6e:c0:10:af:eb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 10 19:11:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2aefed4f4192c7899aa9dde8ab9f9e7458027851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e9:2d:5d:ef:52:e0:cb:3f:2c:67:b2:89:00:
                    87:d9:90:91:aa:25:56:07:80:6a:b9:64:42:0f:0e:
                    50:7f:ec:fa:c2:6e:e5:97:9b:1a:d9:71:45:5d:4e:
                    a7:0d:02:1f:68:58:66:d9:4c:3f:f0:5f:ae:46:0a:
                    11:f3:72:26:29:f5:ba:49:3e:e8:65:67:e6:a1:91:
                    83:4f:35:12:36:6c:9d:83:56:6b:20:15:42:a4:e7:
                    ed:8e:66:fb:26:13:a1:55:97:1d:8c:af:98:12:eb:
                    cd:70:98:d0:60:0f:27:cd:2d:97:15:df:da:d4:da:
                    e7:0b:47:e0:b3:1c:a4:3c:0b:57:e8:dc:af:96:15:
                    4b:81:aa:94:f4:53:fd:29:5e:41:03:22:16:62:f8:
                    97:b7:36:da:65:ba:b6:b3:57:a7:2b:24:8b:4f:c9:
                    a1:ba:2a:a6:cb:f2:ea:4c:e1:bb:fc:ae:06:93:1b:
                    b3:db:3e:00:8a:e0:6c:f9:6d:2e:da:83:eb:8b:ac:
                    35:77:e7:2c:ad:78:fd:8d:f0:09:19:0f:65:96:af:
                    49:4c:5c:dc:0d:91:1b:84:62:d3:2e:05:63:86:31:
                    f9:48:80:92:62:53:d7:b0:22:15:66:21:f2:6e:b4:
                    f5:f3:e3:f1:15:4b:4b:fe:c7:26:30:52:23:18:a4:
                    00:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EF:ED:4F:41:92:C7:89:9A:A9:DD:E8:AB:9F:9E:74:58:02:78:51
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/Ku_tT0GSx4maqd3oq5-edFgCeFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:c9:63:c0:2c:96:c9:3e:87:65:d3:78:5d:26:ed:29:6a:f0:
         d6:60:78:2b:b9:52:a8:31:06:7e:e1:30:03:e4:ad:a4:e3:fc:
         0d:44:fc:25:b6:6e:2c:09:17:58:ca:a2:4b:68:b1:a5:fe:9e:
         16:25:bb:32:cb:3f:17:c2:0e:90:fa:c4:7e:5f:10:ed:06:ac:
         f6:49:f8:b2:3d:63:3c:c1:b7:37:9a:7b:ef:a8:26:57:b5:27:
         82:b0:5c:9e:bc:43:be:53:80:e1:b9:17:f1:08:6d:99:ea:27:
         11:3b:02:f5:da:65:eb:ed:f1:b6:37:c5:8d:62:2d:01:0b:2c:
         ba:71:23:ce:62:53:58:98:34:06:12:f2:f5:a3:4b:8e:d8:1a:
         3e:5e:0c:af:f9:cf:06:fa:0d:f7:90:31:b9:48:e0:f5:90:ac:
         d4:80:11:3d:30:87:06:ee:79:67:84:c3:f9:10:9f:ea:3b:61:
         51:4f:94:10:5f:d2:d0:64:93:3e:58:db:21:40:f9:a3:60:9f:
         a9:92:9b:cd:54:43:d3:d7:da:0c:34:7d:c6:2a:0e:ce:7f:9b:
         cf:aa:5c:5b:9d:d8:06:a4:96:91:50:ad:ba:c4:95:24:db:6c:
         7a:4c:b6:33:3d:d9:08:5a:d0:19:df:b7:2c:40:30:9a:d6:7b:
         24:90:37:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----