Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iLA_8XWA0e_pZwwqRRg4afYQ0gg.roa
File:                     iLA_8XWA0e_pZwwqRRg4afYQ0gg.roa (raw, json)
Hash identifier:          jTksaIg7U3zzxpOrYfEd8bKsPTPZwnH6hwoHeD10HrA=
Subject key identifier:   88:B0:3F:F1:75:80:D1:EF:E9:67:0C:2A:45:18:38:69:F6:10:D2:08
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A909AAB2EFB8A3F521A2541299104934B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iLA_8XWA0e_pZwwqRRg4afYQ0gg.roa
Signing time:             Wed 13 Sep 2023 22:12:50 +0000
ROA not before:           Wed 13 Sep 2023 22:12:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:90:9a:ab:2e:fb:8a:3f:52:1a:25:41:29:91:04:93:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 22:12:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88b03ff17580d1efe9670c2a45183869f610d208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:81:9b:8b:95:7f:6d:4d:a6:01:a2:c6:83:
                    9a:ce:1b:0f:a3:63:68:61:b3:8c:2a:55:8b:d2:36:
                    df:45:ae:69:25:12:39:ff:65:f7:fc:2b:03:a7:da:
                    f4:d8:15:24:d7:dd:f1:d0:9a:bf:d1:e9:b5:d2:4a:
                    9d:ca:c7:4a:22:b2:4c:db:e6:e0:86:af:fb:6b:24:
                    02:41:85:f6:81:26:a5:ba:a5:4a:3e:81:82:32:24:
                    df:75:90:9e:b1:11:e5:09:50:9b:b3:64:98:90:fc:
                    47:8b:a5:7f:b7:f8:2e:84:95:9b:19:ad:ca:96:f8:
                    f8:43:fe:5b:0a:e5:9e:ee:f2:73:80:3f:4a:69:ff:
                    dd:4e:65:94:5d:8d:11:2d:4e:19:16:d9:67:0f:3f:
                    fd:e3:c1:4b:12:3e:c4:f7:78:96:2f:36:54:7a:f3:
                    c5:a2:18:da:ff:99:39:38:3c:89:7f:e0:a7:ba:77:
                    f0:23:18:ee:47:ea:a2:23:b5:29:c4:6d:c5:33:2a:
                    cd:03:54:78:6d:f9:c1:0d:e4:ed:80:5e:b8:65:82:
                    3b:44:42:55:87:9b:b2:20:0e:f3:03:54:ae:e2:b3:
                    a6:93:ee:d7:6d:2b:74:71:00:7e:45:5e:47:31:d4:
                    61:7c:5c:db:2b:f5:8e:2b:32:28:d4:f5:c1:9e:52:
                    60:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B0:3F:F1:75:80:D1:EF:E9:67:0C:2A:45:18:38:69:F6:10:D2:08
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/iLA_8XWA0e_pZwwqRRg4afYQ0gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:6b:a0:2a:2d:8e:2b:c4:41:cf:2f:03:02:05:48:73:03:d6:
         c6:ab:6d:8f:01:bd:8c:20:a6:61:2a:43:ae:98:d8:a3:3a:dd:
         a4:2b:9d:be:71:8f:17:3d:23:ca:29:12:57:30:79:9d:bd:12:
         aa:0a:93:02:ce:f0:72:77:3a:4f:2c:f0:4d:15:67:4b:4f:5f:
         ff:20:56:13:b0:79:dd:a3:6e:de:62:a1:39:b8:5a:80:07:35:
         9f:87:ed:86:23:f8:0c:93:77:bf:45:63:93:05:06:cb:ea:24:
         fc:9a:f9:b2:83:7b:35:49:0d:e9:6b:7f:48:c5:1e:e7:05:f3:
         3d:e2:74:87:67:dd:83:dd:fe:0e:2f:6d:10:7f:cb:27:d9:46:
         db:11:dd:6a:91:e9:ec:eb:74:3c:11:3a:59:55:0a:7a:2c:54:
         4f:48:5e:49:43:e0:c7:e2:94:4a:dc:05:9f:fa:ff:d1:51:e8:
         47:cc:9d:f3:f6:ec:ee:8f:d6:d0:d4:ab:8e:90:98:27:09:64:
         dd:fa:42:7b:ce:a8:2c:fa:49:20:e8:18:c8:b0:fe:47:cf:d0:
         2a:e6:c9:ef:c8:6f:90:a4:9d:59:1e:fb:b8:6f:cd:83:ac:5a:
         ff:25:57:84:9c:12:ae:88:b5:bc:f7:2e:8f:c0:a8:37:8e:6c:
         5e:71:95:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYqQmqsu+4o/UholQSmRBJNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWYxNGM4NTA3NDVhN2MzMTJlYTJlYjBiZTAzMDUyZTQ5
NjcyNzUwHhcNMjMwOTEzMjIxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGIwM2ZmMTc1ODBkMWVmZTk2NzBjMmE0NTE4Mzg2OWY2MTBkMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLOBm4uVf21NpgGixoOazhsPo2No
YbOMKlWL0jbfRa5pJRI5/2X3/CsDp9r02BUk193x0Jq/0em10kqdysdKIrJM2+bg
hq/7ayQCQYX2gSaluqVKPoGCMiTfdZCesRHlCVCbs2SYkPxHi6V/t/guhJWbGa3K
lvj4Q/5bCuWe7vJzgD9Kaf/dTmWUXY0RLU4ZFtlnDz/948FLEj7E93iWLzZUevPF
ohja/5k5ODyJf+CnunfwIxjuR+qiI7UpxG3FMyrNA1R4bfnBDeTtgF64ZYI7REJV
h5uyIA7zA1Su4rOmk+7XbSt0cQB+RV5HMdRhfFzbK/WOKzIo1PXBnlJg8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIiwP/F1gNHv6WcMKkUYOGn2ENIIMB8GA1UdIwQY
MBaAFKofFMhQdFp8MS6i6wvgMFLklnJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQt
ODNmY2QyMjU0ODJhLzEvaUxBXzhYV0EwZV9wWnd3cVJSZzRhZllRMGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84YmY5YzUtMWQyMi00MzllLWIwYmQtODNmY2QyMjU0ODJh
LzEvcWg4VXlGQjBXbnd4THFMckMtQXdVdVNXY25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHhroCotjivEQc8vAwIF
SHMD1sarbY8BvYwgpmEqQ66Y2KM63aQrnb5xjxc9I8opElcweZ29EqoKkwLO8HJ3
Ok8s8E0VZ0tPX/8gVhOwed2jbt5ioTm4WoAHNZ+H7YYj+AyTd79FY5MFBsvqJPya
+bKDezVJDelrf0jFHucF8z3idIdn3YPd/g4vbRB/yyfZRtsR3WqR6ezrdDwROllV
CnosVE9IXklD4MfilErcBZ/6/9FR6EfMnfP27O6P1tDUq46QmCcJZN36QnvOqCz6
SSDoGMiw/kfP0Crmye/Ib5CknVke+7hvzYOsWv8lV4ScEq6Itbz3Lo/AqDeObF5x
lcI=
-----END CERTIFICATE-----