Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uFBe6k-fk8HQ2ZxWl3EJ1b3bPZ0.roa
File:                     uFBe6k-fk8HQ2ZxWl3EJ1b3bPZ0.roa (raw, json)
Hash identifier:          hSg1lLzWTOq+Gsq/e2U4Xp+3RnJG6oSqRvbeUOBoExY=
Subject key identifier:   B8:50:5E:EA:4F:9F:93:C1:D0:D9:9C:56:97:71:09:D5:BD:DB:3D:9D
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AA3478DB226EB5BE73BAA69547EB16E7B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uFBe6k-fk8HQ2ZxWl3EJ1b3bPZ0.roa
Signing time:             Sun 17 Sep 2023 13:14:50 +0000
ROA not before:           Sun 17 Sep 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a3:47:8d:b2:26:eb:5b:e7:3b:aa:69:54:7e:b1:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 17 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8505eea4f9f93c1d0d99c56977109d5bddb3d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:56:9c:ce:c8:3d:24:31:b3:9e:90:7c:e6:
                    a0:4d:18:0b:54:b5:3d:d3:7a:fe:b0:ca:8c:4b:9e:
                    c8:b9:c6:3a:64:d2:6b:b9:58:e5:72:3c:9b:cf:eb:
                    b6:9f:fe:d7:3b:79:ee:73:23:37:30:22:a6:64:bc:
                    78:b2:8c:a2:74:28:1e:e0:3d:e0:66:84:df:a0:b9:
                    6c:93:51:ad:e6:7e:60:1a:7d:90:21:f9:13:28:e7:
                    45:db:e9:af:d5:4c:1f:c1:d2:f6:00:1a:ff:74:b0:
                    b2:62:22:1c:d1:cb:d1:31:6b:a9:ec:f0:50:6e:09:
                    38:35:5f:5f:40:d9:08:6e:75:e9:a3:4e:17:0a:1b:
                    b7:56:c8:7c:92:b3:dd:4a:c8:37:2d:ac:54:80:17:
                    04:c6:5b:5f:17:0f:00:5f:f5:ea:3c:36:06:75:19:
                    c7:88:ef:ad:87:c8:dd:eb:11:b1:1b:9e:b5:54:c2:
                    cb:18:9f:c5:05:55:d3:f0:49:5d:7c:c0:f5:05:6b:
                    28:77:a1:37:60:c4:9e:38:07:dc:52:ad:31:6e:7f:
                    28:e8:6d:5d:5a:47:c3:27:d5:9b:45:b9:1a:4d:20:
                    20:8e:72:dd:02:c5:14:02:04:49:06:99:4d:5a:a4:
                    9f:a4:c3:2e:3d:83:92:87:77:8d:50:38:56:e8:db:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:50:5E:EA:4F:9F:93:C1:D0:D9:9C:56:97:71:09:D5:BD:DB:3D:9D
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uFBe6k-fk8HQ2ZxWl3EJ1b3bPZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:08:23:73:50:9e:9f:b7:c4:bd:97:0f:05:10:fd:4e:e8:87:
         1c:a5:1e:3f:dd:ac:2a:6e:6b:b0:8f:58:3c:95:d3:d9:8c:5a:
         78:d4:87:4a:82:fc:82:6d:6a:10:4e:5e:d4:d2:4d:b9:68:3a:
         12:e5:95:ef:4c:a1:79:ef:53:b8:a5:35:d8:7e:ee:74:bf:2f:
         5a:16:55:a4:ae:7e:c2:52:fe:8c:bc:10:33:42:77:00:45:8b:
         5d:1e:0c:6f:51:a3:2e:40:b6:ca:e3:9c:07:d1:2a:5e:0a:5a:
         01:11:b7:1e:24:10:0c:56:73:49:a5:c4:36:2d:b0:21:dd:38:
         1b:b8:72:9e:66:37:ca:94:91:24:5c:ea:75:5f:a4:b5:60:a6:
         f5:ce:fb:30:d1:68:d5:b6:aa:74:37:66:e4:bf:09:f3:ee:71:
         57:14:e5:7b:03:0d:16:9c:6e:da:39:9c:a3:a2:12:77:60:c4:
         ac:b2:6e:ef:8a:4c:3b:38:b4:91:94:a7:b6:5f:8f:a7:b3:50:
         73:16:ae:25:25:2c:a7:34:76:3a:f7:0a:da:15:ba:21:75:06:
         a1:83:69:c6:ef:b2:ff:2a:60:83:27:14:4e:b8:1e:58:48:61:
         a5:6b:1f:52:8f:1c:c1:3b:a9:75:8e:4c:e8:12:c6:2d:95:a3:
         51:3b:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----