Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/U-H6a5ZGqLfLip_kh0_vUVHuWqI.roa
File:                     U-H6a5ZGqLfLip_kh0_vUVHuWqI.roa (raw, json)
Hash identifier:          BcI5a4Roax/g4G/v0z+86soHDsos1JX64NVMCufG5zw=
Subject key identifier:   53:E1:FA:6B:96:46:A8:B7:CB:8A:9F:E4:87:4F:EF:51:51:EE:5A:A2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4AE2AF04E100C999DFCB1BD6E2520B04
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/U-H6a5ZGqLfLip_kh0_vUVHuWqI.roa
Signing time:             Thu 31 Aug 2023 09:18:04 +0000
ROA not before:           Thu 31 Aug 2023 09:18:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:e2:af:04:e1:00:c9:99:df:cb:1b:d6:e2:52:0b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 09:18:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53e1fa6b9646a8b7cb8a9fe4874fef5151ee5aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:79:fa:20:59:73:db:c5:fe:5d:62:a3:05:
                    9d:75:1b:6a:16:e7:17:01:f4:f8:fd:36:68:a3:61:
                    fa:e9:35:fb:02:28:71:47:aa:c6:35:b9:30:3f:4d:
                    bd:a0:34:52:2c:8c:0b:e2:6b:8b:66:31:ea:a6:40:
                    ae:9d:55:0c:7e:eb:40:7b:50:e1:25:c5:96:f9:51:
                    08:42:5d:c9:1b:0e:9e:90:05:b4:57:c9:e2:df:c5:
                    35:28:56:e0:5b:d5:33:56:6f:74:4d:7b:53:28:bb:
                    d2:d6:fc:e1:2e:5d:d2:8f:e4:58:16:13:a4:af:56:
                    79:72:64:5c:ec:bb:f2:1f:2b:52:51:5a:0a:05:6f:
                    a5:96:e7:aa:35:d9:e7:70:5a:8b:cf:31:2d:df:e8:
                    52:ff:04:53:47:a9:05:c0:51:8b:a7:72:41:7c:81:
                    7b:57:3e:35:8b:0c:6b:e2:33:a1:68:e0:81:9e:83:
                    d4:75:22:e4:2d:54:39:25:20:ef:58:87:0c:49:a6:
                    20:42:47:0c:eb:73:47:e0:37:e8:96:34:30:9c:92:
                    04:3f:f9:d9:ad:99:b0:d2:fb:ab:87:7b:3c:41:c6:
                    6a:34:e6:06:b8:81:1a:df:5b:77:4b:88:fe:a6:94:
                    ee:58:dc:a1:dd:12:d5:6b:9b:33:75:e4:05:ec:21:
                    e7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:FA:6B:96:46:A8:B7:CB:8A:9F:E4:87:4F:EF:51:51:EE:5A:A2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/U-H6a5ZGqLfLip_kh0_vUVHuWqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:a7:71:3a:75:5a:70:c4:39:70:28:85:9c:fb:66:f8:3a:
         67:1d:bf:4f:da:77:01:7b:72:cd:5a:83:1d:7d:16:fd:f9:b3:
         3e:6e:4e:c9:0d:7f:b2:d3:b1:c8:2e:68:72:d1:fc:f5:01:7f:
         c3:e2:3c:62:70:26:00:fc:f0:25:1e:c5:f0:20:a8:e4:81:ba:
         e8:2c:11:bd:92:7c:9e:1a:c4:6f:6a:81:a2:f6:44:09:8d:cd:
         13:4e:f5:0c:c4:e4:ac:00:f3:c6:36:d0:08:12:f1:31:0d:90:
         c6:5c:63:18:9a:8d:01:e9:c9:41:37:ee:54:39:8c:ac:17:88:
         75:25:c3:c2:69:ea:a6:1d:6a:db:30:7a:b7:90:74:d9:c8:b6:
         75:05:ef:bf:c6:b0:85:50:ed:2e:c5:58:3b:f2:04:9f:43:0c:
         79:c0:b0:e8:96:29:a4:bd:a8:85:33:93:3e:ad:fa:b0:50:09:
         5a:d3:11:1d:ce:9a:bd:0d:3d:1f:bf:d9:9c:6b:46:b5:0c:87:
         9e:07:38:91:98:3f:fb:42:d3:9b:b6:b2:3d:d2:af:bb:27:07:
         f8:a1:3d:4d:60:e0:81:f0:cb:c3:eb:09:f1:27:a4:25:27:59:
         84:93:fb:2c:67:ca:70:3d:ba:3e:c5:6d:a1:46:a0:8d:b3:92:
         57:a1:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----