Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HILma7XcWYQIVQv4--cjPASxcOI.roa
File:                     HILma7XcWYQIVQv4--cjPASxcOI.roa (raw, json)
Hash identifier:          esNuezL44d5CIewwO9pS3JtiTwpyGfQcpqLrN3G5u8k=
Subject key identifier:   1C:82:E6:6B:B5:DC:59:84:08:55:0B:F8:FB:E7:23:3C:04:B1:70:E2
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A4AD6C8964A61530B1907AF0999335114
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HILma7XcWYQIVQv4--cjPASxcOI.roa
Signing time:             Thu 31 Aug 2023 09:05:04 +0000
ROA not before:           Thu 31 Aug 2023 09:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:4ad6:408a/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:d6:c8:96:4a:61:53:0b:19:07:af:09:99:33:51:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 31 09:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c82e66bb5dc598408550bf8fbe7233c04b170e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:e1:da:06:bf:c3:a8:b4:f2:4b:b5:8f:42:
                    da:6b:f4:7f:bc:0e:21:1f:e4:67:2f:2f:53:bf:33:
                    1b:52:20:58:1c:c3:60:0b:10:a9:9d:14:ea:c3:a7:
                    68:d2:ee:74:4e:6b:69:6e:9e:7c:fa:b8:bf:5f:03:
                    94:6d:2d:3c:e5:50:9c:39:eb:c3:3f:3e:04:a6:63:
                    e3:cf:6f:38:1a:67:e9:ee:56:e7:8a:78:d9:18:a5:
                    39:35:ab:d1:86:a5:08:56:96:d5:35:fc:56:04:af:
                    f7:34:0e:8a:e6:4e:26:a7:5f:d2:1c:4c:6f:72:8c:
                    63:24:5f:7e:21:5d:ec:56:33:c0:87:b4:40:d1:a1:
                    18:ae:35:bd:a3:bb:4c:6f:3f:8d:a7:80:73:55:bd:
                    c3:a3:da:86:64:7d:ac:b7:66:16:7f:71:07:55:99:
                    17:a4:4c:21:94:2b:c9:bb:33:f5:68:e3:9c:34:79:
                    b7:19:51:95:9c:67:2a:4b:ae:ba:15:9f:8e:86:c7:
                    5b:88:fc:18:ca:31:b8:62:f1:06:4f:67:a0:3e:fa:
                    4e:06:d6:25:3c:f8:b4:94:d3:3d:f7:6e:e5:e6:5b:
                    de:0c:43:6d:d8:e0:b2:00:9e:15:5b:57:68:51:8e:
                    e1:ab:06:bb:af:f5:7c:f6:e6:99:cd:28:8c:f8:7f:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:82:E6:6B:B5:DC:59:84:08:55:0B:F8:FB:E7:23:3C:04:B1:70:E2
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HILma7XcWYQIVQv4--cjPASxcOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:21:d6:13:b8:94:7d:6c:39:25:a7:a3:bf:39:34:1f:03:
         08:04:66:e5:fb:f6:89:a1:aa:22:b0:9c:51:0f:35:1d:88:aa:
         a1:b8:f3:50:30:3f:8e:b2:16:ac:1f:e6:4e:eb:e2:33:3f:20:
         82:a5:d8:36:9d:96:c3:53:1e:a3:0e:65:d7:51:b0:74:88:78:
         54:46:30:0a:21:4d:90:0c:33:e8:63:b7:37:6b:11:b3:24:ec:
         cd:81:60:0b:77:e1:78:ba:53:68:82:c4:5f:b8:95:77:1b:15:
         74:ce:e9:b9:e5:ab:0f:fd:27:c8:bd:b2:26:1e:f2:e6:ab:50:
         ee:15:23:12:1f:f7:54:c8:63:8a:42:37:cf:c9:a2:7f:a0:d0:
         ed:ab:ba:bd:ae:56:7c:83:76:14:f6:d6:51:de:f5:d3:d8:52:
         24:02:0c:23:58:97:f7:22:f5:23:6b:3b:53:2e:ee:e5:19:22:
         c4:4e:41:4b:d8:4d:23:fa:ba:e3:14:cd:51:cf:1c:2c:52:0e:
         15:b5:ae:84:e1:66:f9:56:59:79:e8:6b:26:73:0c:84:6a:3d:
         f9:58:0a:dc:f6:c0:f5:cb:36:d6:b9:47:ef:63:2d:16:7b:fc:
         25:f1:47:87:01:0d:c7:a3:d8:ba:d2:ee:25:f7:1e:24:15:85:
         da:ce:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----