Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HUQ6cfqJbCsT6BOkfs-NpEpA734.roa
File:                     HUQ6cfqJbCsT6BOkfs-NpEpA734.roa (raw, json)
Hash identifier:          4QDKqQXa6SnELOPSy75p+9kNhHc0cIDTZuO034xMBaY=
Subject key identifier:   1D:44:3A:71:FA:89:6C:2B:13:E8:13:A4:7E:CF:8D:A4:4A:40:EF:7E
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AABD3A9D434471B7783B21E5F366F7503
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HUQ6cfqJbCsT6BOkfs-NpEpA734.roa
Signing time:             Tue 19 Sep 2023 05:04:50 +0000
ROA not before:           Tue 19 Sep 2023 05:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:abd3:4827/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ab:d3:a9:d4:34:47:1b:77:83:b2:1e:5f:36:6f:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 19 05:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d443a71fa896c2b13e813a47ecf8da44a40ef7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:54:ef:fe:0d:2e:3b:76:45:0e:86:af:e4:
                    b9:4a:d8:22:32:99:9d:8f:f7:1d:fa:8a:00:be:6d:
                    25:ce:bc:90:22:b9:c4:4f:03:e3:e7:8a:c2:8d:62:
                    50:11:74:e4:c4:86:31:00:3b:05:b3:af:19:56:fc:
                    33:0e:b3:fd:8d:ac:0c:04:13:fe:d1:17:5a:1e:41:
                    c7:aa:87:82:4d:96:7e:8e:4f:e6:a1:35:5d:07:98:
                    78:c4:ec:ce:25:ef:45:f8:eb:5d:3c:19:49:2b:72:
                    05:23:fe:66:02:fa:1f:23:db:38:3b:28:bd:4f:db:
                    ac:f8:58:9a:0e:a3:bf:fb:78:43:ea:69:aa:63:e3:
                    30:92:0b:a6:e0:c6:79:59:65:c9:a9:86:a4:80:b0:
                    79:63:65:67:39:7b:37:35:a5:43:51:d2:f3:f5:6d:
                    7b:40:d0:5e:03:ee:b9:cb:e9:5b:b7:04:d9:b7:ee:
                    7a:ac:be:11:6f:1e:ae:28:91:23:7c:7d:c5:21:9d:
                    07:42:0a:51:17:de:e7:2f:48:11:17:50:15:49:3b:
                    91:3a:c0:5c:02:ca:32:ac:65:9b:bc:99:ac:9d:23:
                    30:0b:73:76:4e:76:7a:db:93:10:6e:f2:cd:e3:7b:
                    95:e9:99:fc:7e:41:91:7a:55:b0:94:ad:b1:5f:cb:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:3A:71:FA:89:6C:2B:13:E8:13:A4:7E:CF:8D:A4:4A:40:EF:7E
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/HUQ6cfqJbCsT6BOkfs-NpEpA734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:f7:12:6c:7e:d0:74:9f:6d:dc:81:53:5c:31:e4:6e:e2:
         cf:a3:56:85:9d:a6:91:26:a0:a2:39:2d:57:71:8f:c1:79:12:
         a8:db:0d:bb:60:34:48:1d:56:81:04:56:8b:92:34:22:04:79:
         a5:c4:69:61:2d:55:bf:fe:31:08:1d:38:b2:3d:7a:15:e2:3b:
         6c:7b:38:ff:80:1b:07:2f:04:86:01:ea:75:d6:44:0d:c0:25:
         05:81:fd:60:97:e8:b3:95:00:4f:6c:40:f6:bb:f1:d6:76:1c:
         f7:75:58:5b:c5:3c:cb:1a:7e:32:10:3d:a3:74:e3:51:c5:37:
         67:67:e7:0b:aa:4d:a0:8f:9c:55:2b:cc:80:13:c6:1b:16:5f:
         2d:09:36:c0:3d:bc:73:ed:bc:32:a2:d7:b8:ed:7e:8d:54:99:
         85:46:14:98:33:e3:cc:7a:33:42:5d:04:c1:00:0c:8e:2a:09:
         ca:5d:cb:92:ef:25:6e:e3:50:5d:3d:a8:32:cd:49:46:5a:1f:
         dd:0b:aa:21:f6:70:d6:5a:98:32:87:be:d7:16:c9:8e:af:83:
         bc:96:51:00:d3:a5:e3:0b:ce:77:b7:19:a0:fe:9c:55:5d:9d:
         85:94:e3:13:f1:6a:75:12:13:4c:03:49:cb:cb:f0:54:a9:da:
         02:15:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----