Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LamZrdt6jjeGss94pG7LqGMCO0c.roa
File:                     LamZrdt6jjeGss94pG7LqGMCO0c.roa (raw, json)
Hash identifier:          n8oQy7JTtqHGr4sbZgox+2MW+yalob8Mu8nQrVORj4w=
Subject key identifier:   2D:A9:99:AD:DB:7A:8E:37:86:B2:CF:78:A4:6E:CB:A8:63:02:3B:47
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A590D165836BAF1162A438CC41AAF217A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LamZrdt6jjeGss94pG7LqGMCO0c.roa
Signing time:             Sun 03 Sep 2023 03:19:04 +0000
ROA not before:           Sun 03 Sep 2023 03:19:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:59:0d:16:58:36:ba:f1:16:2a:43:8c:c4:1a:af:21:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  3 03:19:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2da999addb7a8e3786b2cf78a46ecba863023b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:4a:e2:c7:49:47:46:17:6d:7d:41:db:22:
                    ac:d0:6f:1f:37:38:b7:a9:0a:39:ab:70:5d:01:90:
                    0c:7f:ac:03:1a:da:7c:76:a4:ea:40:2b:e1:6d:a4:
                    c3:58:4c:70:a1:3c:ce:5f:1b:d8:28:22:67:6e:3c:
                    41:5d:76:89:61:a2:96:ce:88:5e:c3:47:1d:f6:c2:
                    b8:66:3c:5b:4a:ee:30:a3:90:49:13:fe:19:9a:50:
                    27:38:19:4d:4a:39:24:ff:16:1e:bf:49:d0:7a:9c:
                    0d:78:44:90:81:c2:81:e6:00:a3:43:4c:77:ac:f4:
                    8b:4f:46:a0:95:69:6f:62:23:44:7b:ed:65:2b:fe:
                    55:4f:a1:45:33:88:a0:10:b3:fb:c1:ac:8e:6d:7d:
                    03:a4:d8:1a:c5:37:f5:d0:7c:f7:9e:60:84:e2:1d:
                    7e:57:c9:61:30:0e:7a:71:0f:43:be:61:93:24:94:
                    be:e4:f3:81:a6:fe:1b:ca:c0:48:19:91:da:3e:3c:
                    0f:27:30:da:07:ab:0d:eb:b9:09:04:3c:91:a1:17:
                    7b:b9:b3:73:e4:74:fa:02:a0:04:57:c0:a3:98:3c:
                    9c:be:00:0b:d0:e1:09:71:20:e6:dc:c1:35:e3:c9:
                    d2:fd:17:bb:a0:57:e5:ab:00:80:9c:95:35:ea:67:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A9:99:AD:DB:7A:8E:37:86:B2:CF:78:A4:6E:CB:A8:63:02:3B:47
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/LamZrdt6jjeGss94pG7LqGMCO0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:8e:97:34:f2:d3:6d:b0:8b:f0:df:91:ae:98:b3:fc:7d:39:
         6c:02:cc:18:dc:e0:5e:24:c4:fb:37:a1:cc:5d:91:ef:fd:32:
         d5:1b:da:1c:47:97:4f:e4:0d:22:f0:06:90:a7:51:d4:79:c6:
         59:64:56:ad:35:a2:23:2b:61:45:88:b4:95:fa:6b:d8:44:13:
         94:44:85:54:cf:f5:a4:76:1e:e9:26:88:a6:8b:19:b0:b6:53:
         1b:eb:c3:19:cb:0b:f8:30:f1:9c:d0:5a:18:11:c6:24:c6:4c:
         d3:6c:7d:02:3f:fd:da:f4:0d:d3:4b:7f:86:78:3e:32:a1:0e:
         c4:15:d1:d3:64:5c:eb:a3:7b:1d:ea:a9:82:ba:35:4a:1a:e4:
         22:4f:54:35:47:ee:99:ea:2f:d4:08:22:91:63:05:3b:5c:aa:
         e0:4a:68:3c:57:e2:2a:43:80:52:3a:94:d5:c8:4d:b7:b8:39:
         c1:80:a9:c9:24:3f:06:ff:1c:20:a0:23:59:95:2a:30:2b:14:
         ba:9e:fb:01:4e:15:cf:1b:7a:0b:8d:21:72:98:9f:70:1c:75:
         cc:70:cd:09:b6:32:c7:ef:c2:d5:cd:e5:bd:dd:90:60:5d:1c:
         f1:05:d1:d8:85:35:f2:13:68:d6:7f:ea:92:7f:78:98:d1:91:
         c7:3a:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----