Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/h0MSV8nB91P7cKXcAUpX_SyILMY.roa
File:                     h0MSV8nB91P7cKXcAUpX_SyILMY.roa (raw, json)
Hash identifier:          CFc1qSMlv90XG2/74rAGS1R8/RhiwGlZ1TMrpTCBQXU=
Subject key identifier:   87:43:12:57:C9:C1:F7:53:FB:70:A5:DC:01:4A:57:FD:2C:88:2C:C6
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A53A2FB10F129A5B6DE81DD1861296994
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/h0MSV8nB91P7cKXcAUpX_SyILMY.roa
Signing time:             Sat 02 Sep 2023 02:05:04 +0000
ROA not before:           Sat 02 Sep 2023 02:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18a:53a2:479e/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:53:a2:fb:10:f1:29:a5:b6:de:81:dd:18:61:29:69:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  2 02:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=87431257c9c1f753fb70a5dc014a57fd2c882cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:07:fe:4d:4f:eb:76:a3:b6:bf:67:d1:d0:
                    0f:2d:d4:46:55:11:bf:cc:68:10:e0:44:1f:51:ca:
                    8a:29:93:75:2d:d8:13:95:74:65:95:a5:0f:50:a3:
                    ac:2e:1a:39:55:ad:63:21:92:39:e4:c1:1b:e5:6e:
                    8a:cf:12:ae:ff:02:43:9e:61:a7:1d:38:ab:46:5f:
                    5b:49:69:80:36:2a:d9:c5:a6:7a:1a:70:be:6c:a0:
                    44:8f:bc:25:08:87:0a:e1:6c:5a:84:e1:95:2e:ba:
                    65:20:bd:5b:43:50:40:c2:11:7c:7a:17:eb:df:d2:
                    ad:1c:ab:e0:e3:73:44:96:88:88:63:45:50:8d:0a:
                    51:9e:0d:3d:26:d3:ef:a1:32:66:87:4f:7a:ff:52:
                    cd:cf:27:d6:c8:b0:50:fd:f3:c1:bf:e7:ac:20:83:
                    2f:6d:4d:65:97:91:4c:ca:67:5f:58:65:32:87:4c:
                    90:31:82:08:30:e6:c5:81:90:f8:60:9b:9a:8e:55:
                    a9:9b:3a:ef:77:4d:91:24:c9:a9:2c:e6:d9:3d:b7:
                    0f:80:28:aa:d9:bb:de:1c:93:f3:00:e2:af:85:48:
                    36:68:de:f8:45:a5:9c:b0:eb:a3:e2:1a:da:17:85:
                    12:6a:33:da:6b:04:96:cd:62:4a:5d:5e:dd:72:6b:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:12:57:C9:C1:F7:53:FB:70:A5:DC:01:4A:57:FD:2C:88:2C:C6
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/h0MSV8nB91P7cKXcAUpX_SyILMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:39:07:7e:07:1b:be:43:06:ae:c1:57:f9:02:fc:0d:4f:1d:
         33:d8:5c:10:e1:59:d5:a8:d8:fb:24:93:cd:f6:1a:1d:4d:4e:
         af:99:c5:94:43:65:64:ca:a0:fd:5f:4b:8f:94:80:4e:e3:c4:
         64:18:70:f7:1c:db:9a:d0:8f:9c:87:08:2a:e1:20:06:48:0d:
         d0:48:9b:6f:2e:9e:66:1b:5c:d8:f2:df:6f:a0:01:9f:6f:1c:
         b5:53:85:fe:bb:eb:2a:d3:17:d1:85:9b:d5:34:e4:c0:f2:af:
         18:2e:5c:8e:fd:f0:d6:9e:59:02:76:f7:59:26:21:3e:03:35:
         4b:d6:a2:a2:ad:e6:9a:c4:22:c2:bc:42:34:c5:3d:2d:54:3e:
         da:76:48:f7:7c:1f:c5:87:46:24:2d:b7:51:97:66:e1:31:3c:
         a8:71:8f:52:56:49:ad:33:c9:a5:3f:19:ea:05:8e:7c:27:22:
         fe:76:da:0b:fa:eb:44:85:9e:c1:54:e9:81:d8:e5:72:8e:0b:
         d3:29:fb:b0:85:e8:c2:e6:da:b3:5a:c2:39:4b:27:d6:e2:18:
         f4:84:fc:2e:23:5b:41:0b:22:b6:73:1a:5e:ce:4c:73:ad:c4:
         ad:c3:5f:a3:ee:d2:19:56:76:70:2c:c7:7b:d1:23:6f:bd:c5:
         ce:af:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----