Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PazB0-x2eU5TC3dbv9vHUW6w3Q.roa
File:                     0PazB0-x2eU5TC3dbv9vHUW6w3Q.roa (raw, json)
Hash identifier:          qT9zE6mQCNlUm+5dCWDfRM51x+2mIYX40tr6E77X+YA=
Subject key identifier:   D0:F6:B3:07:4F:B1:D9:E5:39:4C:2D:DD:6E:FF:6F:1D:45:BA:C3:74
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187C9130DA4C11D7368ECE3CD8419DE9A19
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PazB0-x2eU5TC3dbv9vHUW6w3Q.roa
Signing time:             Fri 28 Apr 2023 18:14:41 +0000
ROA not before:           Fri 28 Apr 2023 18:14:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c9:13:0d:a4:c1:1d:73:68:ec:e3:cd:84:19:de:9a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 28 18:14:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d0f6b3074fb1d9e5394c2ddd6eff6f1d45bac374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f5:30:2b:8d:e8:1c:1f:8b:30:52:b5:4a:19:
                    91:db:95:43:ba:09:8a:2f:84:89:02:2e:39:33:a7:
                    10:22:00:91:2c:63:6c:18:0a:83:3a:b2:91:bf:e4:
                    03:cf:2d:cc:d5:56:63:b1:9b:e9:16:7e:e9:3a:a8:
                    ce:8b:bd:28:c4:25:ec:5a:59:45:72:a2:f4:76:ae:
                    68:fe:e1:da:bb:1b:1f:d1:91:d6:2c:39:c8:ac:54:
                    ed:b7:d6:ef:9a:e3:88:a7:93:01:77:8b:e9:60:7a:
                    0f:18:75:fc:36:aa:8f:aa:78:1a:5f:c6:f8:f4:d1:
                    d5:8f:72:b9:7f:57:f5:31:81:e4:bb:a0:fb:a7:54:
                    b9:17:68:9d:1b:c9:d4:fd:df:44:51:d9:f5:ca:42:
                    b3:57:8d:4d:bc:ab:33:88:a0:a9:2b:b5:db:79:04:
                    be:55:3f:39:30:6a:8d:2b:e5:24:de:b3:4a:79:97:
                    e6:45:56:b0:32:da:83:7a:5d:9c:4a:e0:07:26:eb:
                    30:02:b8:b5:7c:1b:e3:cf:b2:5f:17:4c:29:96:5f:
                    f1:0a:b0:c6:ca:a2:e7:87:0a:bb:9c:f6:9c:0e:6b:
                    11:0e:f0:3f:cd:1e:d5:e1:ab:26:59:77:3d:40:d9:
                    2b:14:21:df:2c:c7:da:45:5a:fb:bc:55:68:17:4b:
                    c1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F6:B3:07:4F:B1:D9:E5:39:4C:2D:DD:6E:FF:6F:1D:45:BA:C3:74
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0PazB0-x2eU5TC3dbv9vHUW6w3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:d4:8e:c2:1f:1f:7f:5b:90:c9:7a:ff:8e:e7:2e:08:2d:
         b6:7c:1c:de:a8:e5:f0:b9:89:e0:d3:52:b1:75:ce:fc:79:02:
         be:96:8d:b4:2e:c0:2b:9a:01:2d:33:23:f1:e3:51:e2:cd:0b:
         de:52:77:a9:00:71:32:9f:e8:d1:3c:db:6c:d5:6f:eb:0a:b9:
         f9:f5:e9:ec:1f:f6:94:c5:45:e0:9b:c6:8e:2f:a2:44:e7:99:
         87:be:79:76:17:35:85:99:8c:a5:de:20:85:a1:b9:dc:62:11:
         8c:66:12:0d:b9:c7:5d:2d:e6:08:6c:1d:d0:46:df:da:9e:c3:
         95:f7:15:c6:ea:32:3c:65:8b:f7:7b:e8:51:ae:4f:24:57:1c:
         d4:44:28:13:30:40:c8:c6:6f:ab:20:91:da:6f:b8:c7:c5:17:
         c8:fd:a0:c5:b5:9b:7b:72:93:e4:6e:62:3c:7d:5e:e0:c6:29:
         8a:ae:72:05:89:7b:64:50:71:60:2e:97:13:08:c3:82:88:ff:
         e9:de:33:70:93:41:70:fd:11:cb:95:a7:c1:b2:e8:e5:e1:6b:
         2c:af:e0:23:64:a4:d0:78:1a:0b:b1:e9:7e:76:52:4f:72:1b:
         bb:28:54:34:ab:3c:d4:fa:dc:28:25:6e:8b:b2:70:11:55:a6:
         e1:83:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----