Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nuHS2i3aSnkEx7DA70KNWzDrkw0.roa
File:                     nuHS2i3aSnkEx7DA70KNWzDrkw0.roa (raw, json)
Hash identifier:          AGKMnFvYeo9xlrm40JoyUKch5xvaHvPBUjummsLs4zA=
Subject key identifier:   9E:E1:D2:DA:2D:DA:4A:79:04:C7:B0:C0:EF:42:8D:5B:30:EB:93:0D
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A8FC1B009DEB344B70CE285322534BE9C
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nuHS2i3aSnkEx7DA70KNWzDrkw0.roa
Signing time:             Wed 13 Sep 2023 18:15:49 +0000
ROA not before:           Wed 13 Sep 2023 18:15:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8f:c1:b0:09:de:b3:44:b7:0c:e2:85:32:25:34:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 13 18:15:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ee1d2da2dda4a7904c7b0c0ef428d5b30eb930d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fd:6c:11:b0:fd:7f:8f:af:e2:6e:f7:8c:48:
                    d5:29:b6:b5:72:7f:1d:e9:99:68:af:29:30:a8:03:
                    24:b5:76:61:bf:71:55:93:43:81:89:ed:a8:d4:f3:
                    b9:d7:24:73:a8:f4:c7:3e:5f:94:44:aa:30:3d:21:
                    91:3e:c3:77:71:e7:1f:04:8a:a5:e6:5e:b5:2a:cf:
                    86:35:38:c8:f9:85:b8:4c:64:e9:be:e6:dc:f2:26:
                    e2:f7:1a:a1:09:00:70:a7:60:d9:31:3b:56:86:20:
                    6c:63:02:b2:21:cc:bf:a9:98:91:ce:71:c7:f2:67:
                    5c:a7:1a:79:76:52:a4:a6:37:89:5a:73:10:f9:2e:
                    4d:60:82:33:1f:0d:45:18:6e:e8:e7:ce:cc:27:7a:
                    ab:a0:37:97:5b:6b:5a:c5:2d:ed:9b:12:ab:9f:7c:
                    db:44:66:e6:99:e3:84:cd:76:61:43:92:64:5c:4b:
                    43:c2:54:c0:11:ef:db:c9:fc:f1:b6:fc:dd:38:3c:
                    fc:b9:65:38:7d:79:6e:02:14:85:7e:eb:b8:af:f6:
                    d4:12:2d:b5:c7:1f:75:09:fb:82:83:cc:2f:9d:75:
                    d1:01:db:9c:93:90:c1:2d:2b:0b:7a:8e:61:32:9b:
                    dc:95:b8:6d:19:1b:d7:79:5b:40:2c:15:a6:b9:0d:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E1:D2:DA:2D:DA:4A:79:04:C7:B0:C0:EF:42:8D:5B:30:EB:93:0D
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/nuHS2i3aSnkEx7DA70KNWzDrkw0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:01:d5:86:da:65:dc:aa:be:ad:83:3a:4f:cb:fa:e8:37:b9:
         de:43:3f:5c:1a:33:5d:1d:48:e5:89:46:b2:9a:6d:f3:31:c8:
         3b:9a:d6:41:54:d5:44:39:35:8d:e4:c7:8e:e6:ea:f9:34:18:
         fc:77:1d:35:a6:6e:b2:e4:46:f1:db:36:8d:95:d8:ce:7e:c9:
         5d:21:97:a1:75:3c:67:73:e0:b3:a5:e8:fb:67:24:16:89:08:
         9a:d8:00:96:ec:26:0a:c8:c2:30:6f:be:18:9d:f5:15:e2:10:
         f6:f0:df:7e:76:5f:90:21:e5:98:63:57:0d:17:55:c1:fd:72:
         00:12:4c:80:8c:51:64:49:74:e1:3c:bf:a2:87:ee:1c:ae:f2:
         cd:ff:a9:b7:3f:c5:16:9b:4c:c9:71:f8:49:86:74:6b:d0:3c:
         30:26:23:5a:fa:59:68:58:02:16:38:13:ae:7a:5f:f5:68:bf:
         53:6f:f1:f3:f2:f1:79:3e:0b:9a:15:41:c8:a6:61:be:0c:c6:
         86:be:b2:4c:79:55:37:fc:3c:0f:b9:7b:cf:ca:b5:53:4a:8b:
         5b:84:27:23:aa:32:be:3b:dc:7d:12:02:d5:79:15:3c:91:97:
         be:42:03:65:1d:ad:a3:84:6c:8d:9f:7b:c2:ca:33:61:83:c2:
         06:6d:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----