Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y-9tVpaWXPZcrnxDjHnPRYp1E5g.roa
File:                     y-9tVpaWXPZcrnxDjHnPRYp1E5g.roa (raw, json)
Hash identifier:          C7Qbrw2rV2W67UloyVVjucnxlgBC7xh2SkVdxCHEtpg=
Subject key identifier:   CB:EF:6D:56:96:96:5C:F6:5C:AE:7C:43:8C:79:CF:45:8A:75:13:98
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A72595F24DF8C9A1E310213F00EE66586
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y-9tVpaWXPZcrnxDjHnPRYp1E5g.roa
Signing time:             Fri 08 Sep 2023 01:12:54 +0000
ROA not before:           Fri 08 Sep 2023 01:12:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:72:59:5f:24:df:8c:9a:1e:31:02:13:f0:0e:e6:65:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  8 01:12:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbef6d5696965cf65cae7c438c79cf458a751398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:bd:c1:37:b5:e6:59:89:1e:10:53:15:03:
                    23:76:4d:f3:01:4e:24:fd:92:d7:2d:80:ca:8f:9a:
                    27:a6:69:5a:7d:83:dd:54:41:62:c9:6d:40:57:2c:
                    95:86:cf:ca:18:cc:bc:49:aa:0a:36:28:6c:98:ff:
                    80:e1:02:d7:56:8b:34:0e:c6:13:37:de:b8:90:7b:
                    6d:bf:29:77:bd:f6:d2:7b:d3:26:79:62:6c:90:c8:
                    9a:d5:c1:46:99:0b:9c:d3:f0:2c:5c:e4:7c:d9:42:
                    17:c2:b9:a9:b7:59:37:16:3b:75:c9:4c:df:b4:ed:
                    4f:c9:32:e5:79:04:ab:ae:fa:6a:96:de:ef:4c:1d:
                    47:a0:7f:8b:87:07:8a:d0:d9:74:70:b9:a5:f8:27:
                    63:1a:22:3b:1c:0d:30:b4:83:59:18:aa:30:a5:81:
                    66:20:ce:b5:eb:bc:65:97:c4:04:ed:3d:54:db:28:
                    a1:72:d6:2e:67:dd:b6:dc:af:d1:e3:3e:c1:d9:e4:
                    73:ab:e6:cf:12:c7:54:94:e0:92:14:50:f7:98:3f:
                    61:b7:9d:28:c9:3d:57:80:76:38:1a:9a:f4:1d:1b:
                    44:04:dd:5e:7a:41:9d:1f:8c:1f:96:50:08:24:e3:
                    7f:b7:b7:38:9f:66:ef:c5:e4:3d:87:63:ca:4e:88:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:6D:56:96:96:5C:F6:5C:AE:7C:43:8C:79:CF:45:8A:75:13:98
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y-9tVpaWXPZcrnxDjHnPRYp1E5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:2f:02:54:b9:78:73:b0:f5:b7:87:10:bc:ad:d7:17:12:10:
         21:dd:13:85:3b:46:6c:6f:5f:05:fa:5a:9d:40:cd:bd:c9:c3:
         20:7c:ee:77:e7:14:92:71:29:43:93:20:55:b1:8d:e9:06:4a:
         96:4e:6c:54:5e:5e:28:8a:75:ff:8f:65:d1:34:6b:e9:ad:c6:
         7e:a8:d3:73:4a:ee:b2:fd:e3:71:30:49:59:3c:c4:5a:b3:34:
         fd:9f:dd:a7:39:25:19:86:1f:08:ca:e6:bb:9d:48:bc:eb:a5:
         09:56:1e:ca:01:d8:58:e5:e4:8f:25:d4:b2:49:94:e7:a2:1b:
         c1:2a:5b:b9:d0:3f:a1:a2:84:f9:9b:08:a6:49:0b:70:b9:bf:
         a5:dd:bc:f5:6e:a8:5f:51:17:7e:f8:19:36:1b:c3:ae:67:1a:
         61:ea:1c:05:36:d4:9b:60:2c:ce:01:08:3e:9d:06:9d:49:40:
         aa:4f:6c:57:1f:8e:51:70:21:f7:29:ff:2a:59:35:de:b9:a7:
         cc:b4:50:14:54:68:bb:0c:58:79:83:e3:a5:9d:4c:57:58:80:
         de:05:e0:9c:5c:6c:b0:8e:c6:d8:12:2c:be:0f:7e:67:15:52:
         6c:ee:ed:40:b0:8a:76:54:d9:1b:1e:da:49:5b:7f:76:d4:27:
         e2:60:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----