Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SAGJP5107Lio--I1QKjFYSdd9Oc.roa
File:                     SAGJP5107Lio--I1QKjFYSdd9Oc.roa (raw, json)
Hash identifier:          P+nEIdcLQsscyAer/sk3xYQJZR/JCmBrGj8xN0eO/2o=
Subject key identifier:   48:01:89:3F:9D:74:EC:B8:A8:FB:E2:35:40:A8:C5:61:27:5D:F4:E7
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A5A56AD2BD0653140BA10701DAC1823E3
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SAGJP5107Lio--I1QKjFYSdd9Oc.roa
Signing time:             Sun 03 Sep 2023 09:19:04 +0000
ROA not before:           Sun 03 Sep 2023 09:19:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5a:56:ad:2b:d0:65:31:40:ba:10:70:1d:ac:18:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  3 09:19:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4801893f9d74ecb8a8fbe23540a8c561275df4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:2b:08:0a:25:7a:bc:56:09:0c:2f:b1:39:
                    cf:27:2a:d3:40:06:c3:4f:0e:70:19:b9:b7:87:86:
                    a6:05:78:a8:6a:3d:e8:5f:ac:a3:f1:2d:0b:92:37:
                    5a:8a:9c:5c:49:b6:40:e2:0d:8a:c0:d8:ff:fa:8c:
                    5e:0d:94:72:f9:00:84:d1:c8:7a:8f:7b:56:88:1d:
                    51:8e:f4:05:66:0b:61:99:55:7e:41:89:be:dd:d2:
                    88:e0:ee:a4:37:6d:2d:c6:08:cb:d9:08:c9:98:a6:
                    c2:93:9f:7e:61:67:2b:61:21:17:11:85:96:66:cf:
                    db:52:bf:40:41:40:b5:51:10:ed:21:34:74:6c:dd:
                    66:6f:e8:3a:61:d3:00:05:50:2f:78:10:a2:79:12:
                    fd:f4:a5:f5:54:ac:6b:a3:f4:81:c9:8c:3a:4d:25:
                    cf:64:82:ec:a7:e5:8a:aa:38:54:19:59:88:59:9c:
                    e6:24:e5:ed:18:8a:f5:2d:29:52:11:1d:ef:80:2a:
                    96:3e:f4:f9:88:97:32:b0:b0:51:91:a1:69:0e:99:
                    11:24:ec:f9:d9:6d:b2:49:13:b9:63:3f:74:af:33:
                    fa:cf:05:73:5b:d7:e7:19:07:4e:ae:71:22:48:dd:
                    81:95:e2:0e:43:97:20:23:14:d3:26:0c:64:c2:58:
                    ef:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:89:3F:9D:74:EC:B8:A8:FB:E2:35:40:A8:C5:61:27:5D:F4:E7
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/SAGJP5107Lio--I1QKjFYSdd9Oc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:60:ef:38:2a:77:e1:17:96:59:97:b0:cd:c1:d4:9e:b4:08:
         e5:aa:02:55:14:6f:d2:ec:6b:40:ae:a2:68:7a:85:87:38:b1:
         6f:1f:4e:ce:7e:1c:7a:d5:b8:cf:44:ab:f1:1a:91:66:d2:10:
         36:16:37:cb:57:4a:54:1d:34:c3:91:56:ad:64:58:6d:af:0e:
         ac:a5:d3:68:75:eb:31:0f:06:39:19:66:a1:6b:bb:ba:3b:5a:
         de:92:f5:32:88:42:da:ca:33:ab:52:a4:b2:e3:c5:d8:7f:10:
         63:94:f3:58:e7:96:68:66:04:90:8a:d9:d5:79:33:83:eb:e0:
         c1:b1:2a:01:36:16:de:3e:d0:c5:c6:c7:62:30:90:ae:11:c4:
         03:9d:bb:03:7d:33:ad:bd:99:0c:51:d1:13:7e:21:32:5c:64:
         08:0e:85:55:80:a1:4e:53:22:63:ba:49:43:cd:47:21:0e:b5:
         28:22:2d:9f:a9:df:a4:34:b3:1f:7f:26:de:70:d2:59:f0:5b:
         9f:f5:7b:c6:b4:39:21:9d:42:f9:95:b3:41:5d:c6:3b:0b:24:
         1d:26:5b:82:a1:22:3d:51:26:45:78:f5:db:90:87:bf:72:9b:
         38:b0:3c:5e:cf:b0:18:11:c8:84:15:a5:0a:fd:d8:b7:7d:54:
         40:fe:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----