Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ukTA5CfsuGO3CT8HEBr4jJIWTFY.roa
File:                     ukTA5CfsuGO3CT8HEBr4jJIWTFY.roa (raw, json)
Hash identifier:          n605dZxWzN78SJOQZkC8yEElbod418xsC9qFVleSrDY=
Subject key identifier:   BA:44:C0:E4:27:EC:B8:63:B7:09:3F:07:10:1A:F8:8C:92:16:4C:56
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018AAA5C4BDE82EF52E3CC2BA057634B0248
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ukTA5CfsuGO3CT8HEBr4jJIWTFY.roa
Signing time:             Mon 18 Sep 2023 22:14:50 +0000
ROA not before:           Mon 18 Sep 2023 22:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:18a:837b:f9c7/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:aa:5c:4b:de:82:ef:52:e3:cc:2b:a0:57:63:4b:02:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep 18 22:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba44c0e427ecb863b7093f07101af88c92164c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:0c:54:83:9a:ed:32:d9:1f:f8:98:d5:a9:
                    df:cd:62:88:a9:0d:a9:df:8d:86:67:18:cb:42:da:
                    23:65:5f:76:60:7a:82:b2:9a:9c:f5:4d:33:b9:2e:
                    e2:67:f0:34:18:64:fa:d3:64:2e:63:0d:21:12:8e:
                    19:94:0e:22:f7:32:3b:9a:60:b6:d1:d6:9a:3e:14:
                    0e:51:05:67:ba:61:70:cd:1f:90:c4:59:ae:5f:ff:
                    2d:79:4b:47:73:33:62:32:b6:8f:98:09:4d:c3:2d:
                    63:5f:04:fe:5f:28:fe:86:11:c2:f9:10:c9:72:f1:
                    ff:1f:32:8f:2e:8d:c8:45:87:f2:ee:6e:dd:f1:c7:
                    49:77:27:90:b3:96:5e:42:d0:9a:91:cd:98:01:a8:
                    5e:18:81:19:12:5d:e1:34:b6:e9:fd:f6:20:e6:d6:
                    1a:11:e9:e7:0e:7a:79:42:2e:4e:29:6b:0f:37:1e:
                    34:54:ce:7d:74:13:4c:62:67:8d:46:c3:4c:57:36:
                    be:ba:68:d9:5f:7b:ec:8d:d6:89:96:25:61:6d:96:
                    ad:bd:67:ac:03:a9:7b:e4:67:a0:44:86:e4:8d:80:
                    ba:78:13:8a:88:2f:04:77:98:75:0d:8a:07:db:c4:
                    f2:9f:0d:9f:d8:ce:19:6c:83:4c:82:25:ab:e7:45:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:44:C0:E4:27:EC:B8:63:B7:09:3F:07:10:1A:F8:8C:92:16:4C:56
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/ukTA5CfsuGO3CT8HEBr4jJIWTFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:32:de:85:e3:97:c1:43:8a:1a:45:77:61:09:46:36:b3:7b:
         64:f7:c5:4b:70:ef:96:e5:0c:34:fb:6d:51:9e:bb:56:71:d0:
         d1:ba:09:df:1b:da:73:cc:75:84:52:97:34:43:87:d4:23:ad:
         fd:de:1a:10:43:4f:5c:14:95:4d:a2:11:65:f6:65:57:81:c8:
         2a:fd:a6:5f:3c:8f:cb:ec:18:cd:f1:3a:9a:b0:5a:0a:7a:27:
         22:63:be:50:82:87:89:b1:fe:90:c6:e3:62:cc:8f:fa:5e:1e:
         b7:4b:a1:68:60:80:aa:3d:09:d9:0b:81:a6:ed:f3:bf:c3:6c:
         e3:ea:b2:a6:35:37:10:bf:55:46:ae:97:28:88:47:95:73:12:
         db:87:d9:ed:4c:93:09:f9:22:cd:cb:6f:34:e9:3e:c7:38:b3:
         90:8f:97:d5:19:7b:2d:9a:bb:84:bf:83:a9:aa:3a:08:a4:77:
         16:9a:94:e6:b2:8c:95:04:83:f1:3c:fb:ab:83:64:66:8e:43:
         10:c0:82:1f:b0:1b:b0:71:a6:09:7b:a5:4c:c6:62:81:4d:99:
         92:d6:7e:a0:66:cc:6d:22:38:fd:bb:71:12:32:ed:86:28:2a:
         a4:b3:0a:8a:e7:45:43:12:14:18:bb:74:9f:5c:91:22:65:a7:
         94:89:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----