Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uuYI7iGi6O__sbdqqjTxx_A1eU8.roa
File:                     uuYI7iGi6O__sbdqqjTxx_A1eU8.roa (raw, json)
Hash identifier:          K4L4Crqd5v0EQpGC48uA1nhJd1CaNe78JOifCYKvsM4=
Subject key identifier:   BA:E6:08:EE:21:A2:E8:EF:FF:B1:B7:6A:AA:34:F1:C7:F0:35:79:4F
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A60C485C80115680499EDE2095A652D13
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uuYI7iGi6O__sbdqqjTxx_A1eU8.roa
Signing time:             Mon 04 Sep 2023 15:16:46 +0000
ROA not before:           Mon 04 Sep 2023 15:16:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:60:c4:85:c8:01:15:68:04:99:ed:e2:09:5a:65:2d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  4 15:16:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bae608ee21a2e8efffb1b76aaa34f1c7f035794f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:15:0a:80:5f:45:0e:69:c5:6c:91:19:b7:
                    cb:1c:9b:18:69:08:83:88:0f:05:fa:95:c2:3a:10:
                    3b:b5:b8:6b:bf:4f:a9:a5:d2:03:3f:b0:1a:da:e6:
                    9f:9c:58:14:83:28:e3:81:91:b7:7c:c8:41:65:35:
                    7d:e9:b1:e0:f2:50:dc:2f:3a:e9:df:93:30:f0:3f:
                    a6:1a:65:bc:ba:51:ac:4c:86:fd:48:91:e4:a7:23:
                    63:bf:db:1d:fc:9a:b8:91:63:4a:b9:a0:95:a4:2d:
                    92:47:aa:7b:44:6f:a2:d1:ca:a1:11:67:6f:96:66:
                    05:58:e3:ce:ca:c5:67:16:87:29:20:fc:14:b6:32:
                    a8:a5:0b:9c:d1:81:d2:45:e8:81:91:a5:12:42:d9:
                    22:a2:3e:f4:14:d3:2c:2a:27:36:46:ec:94:9e:24:
                    7d:c7:23:9e:4d:c8:9c:58:e6:9a:6e:ea:11:20:c3:
                    7f:e3:2c:54:f1:7a:02:dc:8e:6d:c6:79:10:d9:10:
                    1d:41:21:fd:1d:7a:90:22:45:62:ca:8b:26:f2:37:
                    b4:d5:81:db:a1:a0:5c:69:81:e4:e0:36:00:e6:bb:
                    8f:59:44:c8:fb:70:6f:fe:0b:59:c3:b0:e1:5d:91:
                    fa:60:42:d3:cb:9a:f1:f7:57:60:08:81:01:b1:c8:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:08:EE:21:A2:E8:EF:FF:B1:B7:6A:AA:34:F1:C7:F0:35:79:4F
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uuYI7iGi6O__sbdqqjTxx_A1eU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:17:e7:29:64:73:d8:a6:20:7f:93:98:39:cd:8c:59:e2:
         79:35:f5:3e:63:80:15:68:1a:57:25:52:a8:4f:a1:d9:f0:db:
         98:2f:da:e0:76:4b:70:12:7f:14:ed:ee:d4:1c:ea:1f:f7:f3:
         33:8c:4f:6a:4f:40:c6:d7:64:7a:de:8a:7c:7b:ae:a1:9f:24:
         64:28:09:28:21:3a:44:77:ba:17:36:3e:d9:a5:dc:6d:c0:e6:
         80:c0:b2:9a:98:b4:93:40:d9:eb:a5:ca:b5:e6:6b:cf:2d:6d:
         94:c7:b0:27:13:3a:a7:2a:bc:eb:2b:36:82:52:f3:4a:b5:c1:
         bb:84:97:5b:50:cf:fc:5c:62:3a:b9:20:54:f2:d0:d9:be:c7:
         ea:77:bc:67:ea:4c:7f:41:4e:34:24:ec:ee:7b:ce:42:a9:be:
         8d:2c:21:ba:2a:d5:b9:3d:60:cd:d4:8d:69:f4:92:34:ac:74:
         ea:84:79:ad:a2:0a:ea:a1:f3:96:ef:60:c6:e0:24:79:f4:4a:
         5d:fc:d0:cc:0f:d6:c9:ec:79:ea:f0:f8:74:01:3f:e1:9c:b6:
         5c:5c:f7:37:e0:19:5d:e6:ee:1e:2c:4a:f9:ba:bd:9d:d5:85:
         9a:b0:80:25:5f:d5:43:3b:64:3a:8d:2e:0a:71:ab:e0:a0:8d:
         7e:95:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----