Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UTB_fgQb-3i6dG5X7GsIlsNT30c.roa
File:                     UTB_fgQb-3i6dG5X7GsIlsNT30c.roa (raw, json)
Hash identifier:          jCmUlrMEsnRld7iWH7pexHPuPzfzLf3dmCWzj11WISQ=
Subject key identifier:   51:30:7F:7E:04:1B:FB:78:BA:74:6E:57:EC:6B:08:96:C3:53:DF:47
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA947CF17589730DABE762ABF1688659E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UTB_fgQb-3i6dG5X7GsIlsNT30c.roa
Signing time:             Mon 18 Sep 2023 17:12:50 +0000
ROA not before:           Mon 18 Sep 2023 17:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a9:47:cf:17:58:97:30:da:be:76:2a:bf:16:88:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 17:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51307f7e041bfb78ba746e57ec6b0896c353df47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:a2:d3:c2:aa:7f:b0:fa:28:bc:4f:18:d1:
                    fc:21:43:b9:04:7c:1f:c4:3f:9a:54:47:9f:2f:48:
                    59:cf:dd:85:ec:69:9a:bf:d6:b7:93:be:f0:1e:c1:
                    26:56:01:ae:06:51:79:9e:6e:de:70:d4:aa:dc:cf:
                    26:d6:f8:82:af:d9:7e:f0:98:8c:4f:35:7f:94:90:
                    cd:1c:a3:ad:31:d1:36:ca:a2:bb:98:7c:b9:3d:67:
                    68:8c:26:de:13:77:68:99:23:01:2e:a1:9a:40:8c:
                    8e:15:8a:41:92:a6:ea:30:ca:3a:51:6e:be:a5:2f:
                    fc:37:9c:ca:7a:0b:90:e5:64:b6:c4:f2:01:bc:09:
                    43:43:fe:ca:16:d4:1b:34:59:26:9e:69:2c:72:26:
                    f3:76:96:04:c5:dd:08:34:57:98:7d:9d:62:24:41:
                    ca:91:e2:50:62:a9:e9:42:43:fd:93:df:93:e2:c8:
                    81:f4:cb:47:9f:23:5e:04:6e:24:f8:2c:47:96:f1:
                    d8:ca:d7:5a:09:08:04:f7:3c:37:9f:47:3f:64:dc:
                    53:99:22:27:15:fc:73:66:12:4e:f4:cd:1e:2e:92:
                    87:05:21:c1:df:88:4b:2e:05:a3:b8:7c:b6:fa:d6:
                    df:14:be:21:01:18:83:61:f4:19:c3:33:62:c7:74:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:7F:7E:04:1B:FB:78:BA:74:6E:57:EC:6B:08:96:C3:53:DF:47
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/UTB_fgQb-3i6dG5X7GsIlsNT30c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:d3:ca:0e:53:22:af:5a:50:56:5e:71:43:5f:ed:29:7f:68:
         71:29:d1:3a:38:75:4d:04:d3:59:a1:3e:34:0f:b4:1a:af:77:
         05:03:d7:d1:d7:80:b6:a4:32:24:ec:e0:a2:6b:61:74:6e:37:
         83:33:6f:8a:61:9d:ed:a2:fe:24:5c:0f:cc:2a:cb:7a:1f:62:
         8c:dd:89:1e:ac:53:e6:49:ca:ba:51:1f:f8:00:d3:a8:99:54:
         4f:de:2f:01:b8:25:4a:e5:22:94:b3:f7:c7:cb:da:8f:6a:50:
         16:41:f0:8a:39:8a:a0:ea:35:d7:c6:18:35:f6:5f:4d:76:0b:
         b5:96:eb:b8:c9:ea:7b:ad:19:4a:83:5f:79:9a:f0:5f:a3:94:
         37:12:0b:91:32:bc:fe:16:b0:e8:b6:f6:57:9c:ec:4b:8d:20:
         97:55:61:4a:d4:cd:32:bd:46:c2:40:10:d8:13:2a:89:98:16:
         a7:d4:58:d0:69:de:15:74:67:17:6a:83:d2:38:29:1a:62:a2:
         f2:b6:75:d2:7a:a0:39:52:bc:3b:0e:fb:ef:fc:7c:d5:f8:ba:
         92:fd:19:9a:8a:f3:ed:e4:ed:4a:74:27:83:80:ec:12:78:85:
         ee:f6:4d:f5:5f:f3:f0:d0:9c:65:95:43:83:a6:7d:33:2c:40:
         0c:0f:2b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----