Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa
File:                     y13MZ6uHU_YF_J2ugklGFZ095XA.roa (raw, json)
Hash identifier:          fl2QIcAgoTTkULnkO5MDqdDg8Qc+CWF0lbiRD51qD8k=
Subject key identifier:   CB:5D:CC:67:AB:87:53:F6:05:FC:9D:AE:82:49:46:15:9D:3D:E5:70
Certificate issuer:       /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial:       018A77ED902754F7DBEE67A96CE78E25813F
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa
Signing time:             Sat 09 Sep 2023 03:12:52 +0000
ROA not before:           Sat 09 Sep 2023 03:12:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:77:ed:90:27:54:f7:db:ee:67:a9:6c:e7:8e:25:81:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
        Validity
            Not Before: Sep  9 03:12:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cb5dcc67ab8753f605fc9dae824946159d3de570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:c2:1e:d3:f2:6d:9b:29:40:dc:f1:b2:74:
                    64:03:db:52:40:2b:6f:0e:24:b8:55:73:81:f1:c9:
                    51:f3:54:90:bf:89:82:16:f0:26:0b:b1:a1:37:9b:
                    00:19:17:55:6f:1d:8d:d5:25:96:5f:f0:67:dd:3c:
                    0f:93:04:79:d1:28:64:8e:23:7c:e4:67:c9:43:49:
                    57:e7:85:ca:69:c7:59:c2:a1:38:ac:c7:15:80:70:
                    fe:2f:a5:ed:71:40:ea:20:a3:af:b6:5d:a1:30:7a:
                    ae:17:66:cb:54:2d:bf:84:61:02:e1:55:36:b8:c9:
                    3e:d9:2e:df:3c:b7:64:c8:d9:b4:d6:25:07:fb:8e:
                    67:cb:29:e6:79:10:d2:77:f0:c4:93:2c:7a:46:b9:
                    20:29:90:f5:6d:ca:f3:1f:f2:d0:b0:49:17:f0:48:
                    25:96:e2:a3:4b:9c:1a:22:cf:15:0c:4c:2d:f1:d3:
                    52:31:bb:3a:d7:f7:23:b7:21:52:a4:22:32:50:28:
                    e8:b0:ec:76:5e:9f:40:59:2d:8e:97:2f:18:29:7a:
                    6c:53:d9:45:e6:c8:89:28:fe:3b:d3:50:d4:33:e9:
                    81:19:ad:28:10:6a:cc:7f:0f:8c:54:95:e0:2e:9b:
                    66:a7:cb:e7:76:52:24:40:a7:03:b9:56:1c:da:80:
                    5f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5D:CC:67:AB:87:53:F6:05:FC:9D:AE:82:49:46:15:9D:3D:E5:70
            X509v3 Authority Key Identifier:
                keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/y13MZ6uHU_YF_J2ugklGFZ095XA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:89:ed:8e:2b:4c:94:76:64:5d:7c:b4:69:24:3f:7a:64:2f:
         d4:f6:5d:42:65:eb:d9:70:8b:85:0e:9b:34:91:79:5b:b7:5a:
         c6:0f:28:b4:09:31:c5:d1:1f:f2:87:3a:b7:76:a2:ca:1a:b4:
         85:74:57:8a:c2:46:5d:e5:d7:25:02:bc:e8:d7:9c:4f:8c:0e:
         31:a2:4a:6e:90:35:39:84:76:bf:d8:29:13:1b:44:90:7c:08:
         40:97:68:42:e9:5c:7e:2b:50:5e:23:de:af:13:6b:b9:4a:7e:
         50:fb:dd:11:fd:0a:1b:72:b5:de:b7:29:78:45:4e:46:12:c1:
         3f:8d:cb:ea:bf:4c:bf:55:0f:3b:68:aa:c9:67:07:c6:24:13:
         61:f1:53:fd:c4:b2:8c:56:08:29:0a:18:3b:e9:61:9b:c6:de:
         12:89:2f:d9:16:e6:e5:6f:8e:d2:be:2c:8f:ea:e2:a7:6b:32:
         b8:c2:7b:31:0d:33:fd:52:aa:81:a1:5c:f1:4c:7c:bd:28:3e:
         6a:67:82:1e:86:4b:0f:87:6a:d5:cb:8e:77:bb:36:16:bb:9e:
         11:61:5c:5d:e2:29:80:fc:2c:27:ec:50:1f:05:3e:46:41:89:
         b1:f8:59:e7:4b:b6:7b:f0:54:43:69:88:65:48:80:1c:eb:92:
         75:c0:14:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----