Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cxh-7Yg55848g2h9RB38F2h_8xA.roa
File:                     cxh-7Yg55848g2h9RB38F2h_8xA.roa (raw, json)
Hash identifier:          EaKwxzsyh3smfCNfii1jVD2AOgS3GFGM1XP5L0IhOS0=
Subject key identifier:   73:18:7E:ED:88:39:E7:CE:3C:83:68:7D:44:1D:FC:17:68:7F:F3:10
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA837E5E2E92F831893C517D337AC5941
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cxh-7Yg55848g2h9RB38F2h_8xA.roa
Signing time:             Mon 18 Sep 2023 12:15:50 +0000
ROA not before:           Mon 18 Sep 2023 12:15:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a8:37:e5:e2:e9:2f:83:18:93:c5:17:d3:37:ac:59:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 12:15:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73187eed8839e7ce3c83687d441dfc17687ff310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:52:63:0a:1b:f6:5f:1b:44:49:57:9f:28:
                    35:18:55:8c:b2:e8:1b:8b:5c:0f:ce:2b:9d:63:af:
                    7e:12:da:f1:ad:b6:a4:d8:0f:c7:73:35:4d:86:2b:
                    83:81:15:4e:bb:c5:b3:f3:00:8e:a1:cd:40:ba:90:
                    54:b1:8b:87:56:3e:ab:a8:0e:34:35:3c:dc:4a:1e:
                    54:e1:05:53:89:81:9f:25:4d:8b:8e:9c:c4:fd:af:
                    05:c1:60:9c:56:98:82:8b:dc:3f:ce:6c:1e:72:13:
                    93:63:f8:bb:a4:ed:07:97:f6:67:e9:14:06:82:49:
                    f6:eb:0e:56:92:84:0d:4a:30:cd:9a:44:dc:0d:f1:
                    ba:95:e4:91:ea:92:e2:0f:9b:f5:0f:5b:0b:f3:d7:
                    cb:ad:7b:0e:00:4a:c3:d9:a3:25:10:75:6c:45:9a:
                    55:ca:62:87:68:0e:e7:e6:e4:5c:19:f9:57:d8:f0:
                    f5:ca:c3:4f:93:79:03:04:f8:2c:58:44:51:5b:bd:
                    34:0c:f6:a2:08:df:63:d2:72:29:65:03:fe:f5:97:
                    37:e4:76:e8:de:9c:fc:8e:af:84:1f:4f:19:91:d5:
                    82:9c:91:0e:83:f9:79:e7:88:43:d9:b9:21:16:79:
                    07:d4:d5:49:66:58:a5:06:4a:d5:df:c1:de:ba:f3:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:7E:ED:88:39:E7:CE:3C:83:68:7D:44:1D:FC:17:68:7F:F3:10
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/cxh-7Yg55848g2h9RB38F2h_8xA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:ed:c1:f8:e9:c1:dc:de:a4:bb:c8:9c:d7:ef:42:83:b1:
         1d:22:6d:9a:c3:f7:2d:09:45:52:18:1f:7f:4e:a7:80:38:56:
         4a:a0:1d:fa:92:3f:29:58:30:98:e0:d2:59:01:95:f1:09:bc:
         9a:b5:8a:fd:d7:ce:63:fb:16:28:15:72:43:81:6e:05:4c:48:
         04:f8:83:95:83:0d:3b:63:c1:83:87:98:4f:f9:32:e3:fd:e9:
         1b:4f:04:10:7b:d4:9d:97:8a:77:2d:21:78:90:a4:13:bc:9f:
         bc:f2:0b:7d:1b:47:bf:ad:17:0c:02:0c:1f:8e:4c:d2:e7:a1:
         4d:a8:33:c5:4f:3e:66:70:bf:87:50:33:18:71:1c:0e:fd:e1:
         d7:64:d5:f1:6d:a7:a1:98:54:96:8d:fa:8e:c2:1a:de:14:2d:
         b5:09:a4:2c:17:ab:5f:98:1b:9e:2c:78:f1:2a:7b:44:d0:05:
         4d:e1:98:0a:7a:1c:2c:4c:94:28:bf:55:85:32:bc:fc:14:be:
         de:3f:70:87:f3:69:85:1f:cc:e2:ad:8c:9d:64:1f:17:f5:fb:
         c9:e9:e4:2b:ac:0c:be:6f:bf:b0:ad:92:c4:90:a0:de:ab:74:
         02:5e:fa:d2:25:e6:7c:eb:2e:2c:43:fc:6b:64:8e:19:02:9a:
         8a:bd:00:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqoN+Xi6S+DGJPFF9M3rFlBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTE4MTIxNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzE4N2VlZDg4MzllN2NlM2M4MzY4N2Q0NDFkZmMxNzY4N2ZmMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHFSYwob9l8bRElXnyg1GFWMsugb
i1wPziudY69+Etrxrbak2A/HczVNhiuDgRVOu8Wz8wCOoc1AupBUsYuHVj6rqA40
NTzcSh5U4QVTiYGfJU2LjpzE/a8FwWCcVpiCi9w/zmwechOTY/i7pO0Hl/Zn6RQG
gkn26w5WkoQNSjDNmkTcDfG6leSR6pLiD5v1D1sL89fLrXsOAErD2aMlEHVsRZpV
ymKHaA7n5uRcGflX2PD1ysNPk3kDBPgsWERRW700DPaiCN9j0nIpZQP+9Zc35Hbo
3pz8jq+EH08ZkdWCnJEOg/l554hD2bkhFnkH1NVJZlilBkrV38HeuvPPiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHMYfu2IOefOPINofUQd/Bdof/MQMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvY3hoLTdZZzU1ODQ4ZzJoOVJCMzhGMmhfOHhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAErW7cH46cHc3qS7yJzX
70KDsR0ibZrD9y0JRVIYH39Op4A4VkqgHfqSPylYMJjg0lkBlfEJvJq1iv3XzmP7
FigVckOBbgVMSAT4g5WDDTtjwYOHmE/5MuP96RtPBBB71J2XinctIXiQpBO8n7zy
C30bR7+tFwwCDB+OTNLnoU2oM8VPPmZwv4dQMxhxHA794ddk1fFtp6GYVJaN+o7C
Gt4ULbUJpCwXq1+YG54sePEqe0TQBU3hmAp6HCxMlCi/VYUyvPwUvt4/cIfzaYUf
zOKtjJ1kHxf1+8np5CusDL5vv7CtksSQoN6rdAJe+tIl5nzrLixD/GtkjhkCmoq9
ADY=
-----END CERTIFICATE-----