Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dv2-B-U9pBjZVv9EZLr9-TDZaFU.roa
File:                     dv2-B-U9pBjZVv9EZLr9-TDZaFU.roa (raw, json)
Hash identifier:          Cs9GDCCko7HMQxG9DEXUSRKTvZEBqJBhromRH5/nIBc=
Subject key identifier:   76:FD:BE:07:E5:3D:A4:18:D9:56:FF:44:64:BA:FD:F9:30:D9:68:55
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A45F42C519E454574146525EC1D44078B
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dv2-B-U9pBjZVv9EZLr9-TDZaFU.roa
Signing time:             Wed 30 Aug 2023 10:19:04 +0000
ROA not before:           Wed 30 Aug 2023 10:19:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:45:f4:2c:51:9e:45:45:74:14:65:25:ec:1d:44:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Aug 30 10:19:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=76fdbe07e53da418d956ff4464bafdf930d96855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2b:97:8e:b8:79:58:c8:f9:7f:4b:0f:cf:ca:
                    9f:e6:00:a7:1b:cc:19:62:e2:31:d6:eb:a7:e7:c2:
                    df:25:5a:cd:ac:fa:39:a7:50:b1:ab:c6:f9:40:da:
                    fd:4f:48:fc:93:0b:9d:03:a1:81:9a:8d:30:23:35:
                    1d:53:93:0b:f7:61:ad:04:15:a2:66:dc:3d:ef:f5:
                    0e:85:cc:53:ce:bd:10:a7:3d:bc:c1:f9:54:18:b1:
                    9f:57:9d:94:eb:32:e5:19:38:40:33:8d:3b:d6:1f:
                    02:59:c9:c8:c4:e0:5f:ef:57:41:0b:12:59:86:a8:
                    6c:fa:48:1a:f9:57:1b:ea:c3:fd:fa:eb:d1:df:6f:
                    dc:9e:6e:28:5c:e3:0a:be:b3:6c:d1:71:a8:3e:7d:
                    9e:b8:fc:94:c1:81:c8:ce:90:47:e2:dc:05:53:a4:
                    ad:a8:71:dc:2d:4a:11:3c:97:1d:4a:24:ac:d1:ea:
                    51:29:19:75:6d:f5:f5:53:32:2e:53:85:95:60:02:
                    fb:fd:29:b0:66:f0:b9:37:3f:fb:ab:b3:ce:65:fb:
                    eb:80:20:a8:ae:ea:98:77:06:d1:0c:18:d0:22:1e:
                    79:00:50:22:9a:95:d0:4a:2e:c1:51:98:44:0b:48:
                    96:8f:eb:b6:9a:b8:eb:84:f0:c7:f8:a2:da:71:37:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:BE:07:E5:3D:A4:18:D9:56:FF:44:64:BA:FD:F9:30:D9:68:55
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/dv2-B-U9pBjZVv9EZLr9-TDZaFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:ad:f6:87:b8:76:fa:1f:1e:57:25:3a:86:9e:b5:57:3d:
         e7:48:12:c6:71:03:4e:e2:0b:7f:21:61:f8:38:dd:18:65:92:
         ee:23:8d:c9:6f:87:92:a2:27:63:bd:14:50:fa:cd:12:b9:b8:
         ae:1b:93:34:24:3e:51:8e:b0:64:d2:a7:ea:ba:e1:a7:6c:86:
         76:a0:a5:b5:5c:33:76:31:28:1b:b3:62:07:b5:b5:79:a8:11:
         63:19:3e:b2:0b:8d:9c:a7:e1:40:f6:47:54:39:c1:cc:06:85:
         93:ec:0c:7f:9b:72:a8:80:9f:43:42:1e:2c:f9:ae:47:d8:15:
         67:7b:25:a7:3a:66:76:13:32:59:e2:ff:fb:56:34:49:7a:40:
         bc:2c:5a:eb:50:29:ab:01:f9:76:06:ee:ee:83:8a:06:8b:aa:
         9f:05:1b:59:07:51:9f:cd:cd:8a:fe:4b:d2:92:43:b1:ea:64:
         bd:c7:f4:bf:e4:7b:ef:9c:95:c8:e7:95:fc:f5:16:b7:6a:eb:
         e5:84:18:05:9c:3e:02:b8:ae:e8:ea:51:a9:60:02:66:a8:1b:
         66:94:3c:ec:62:c1:5a:ee:53:eb:d2:f8:45:f8:08:05:89:1c:
         be:86:08:34:f7:5e:28:2d:00:b1:8d:02:a3:fb:2b:d5:72:97:
         f2:c7:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----