Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dovtGmfLDbO-sH-3WjN4hehPpM.roa
File:                     1-dovtGmfLDbO-sH-3WjN4hehPpM.roa (raw, json)
Hash identifier:          d1A1PbXB/3/40GDB/Gd9y8UTpdFzZ98bAjhCv4jUrJs=
Subject key identifier:   F9:DA:2F:B4:69:9F:2C:36:CE:FA:C1:FE:DD:68:CD:E2:17:A1:3E:93
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187397CD2FB039D49F797127DEAA8ECDE60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dovtGmfLDbO-sH-3WjN4hehPpM.roa
Signing time:             Fri 31 Mar 2023 21:04:54 +0000
ROA not before:           Fri 31 Mar 2023 21:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:187:397c:77fd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:39:7c:d2:fb:03:9d:49:f7:97:12:7d:ea:a8:ec:de:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 31 21:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9da2fb4699f2c36cefac1fedd68cde217a13e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:51:6a:b9:26:c5:c5:af:20:0c:36:fb:0e:
                    dc:af:ba:ef:f5:97:39:55:de:07:3e:b9:55:f4:5d:
                    f0:82:ec:29:6c:d0:27:27:cb:a4:e4:67:31:2f:08:
                    6e:48:04:56:93:4e:77:16:94:56:d9:95:6e:71:4c:
                    7f:db:66:09:65:7a:ea:2a:dc:fb:bc:b2:05:a1:f6:
                    b1:52:67:8b:97:5d:20:f6:1a:96:23:91:3c:7d:1f:
                    06:1d:46:12:e6:e1:c2:2d:85:91:a6:db:2f:f0:74:
                    3d:58:c1:65:07:d6:bf:aa:e1:f8:1e:7e:4b:ad:dc:
                    3b:cd:9a:45:a3:7f:62:ee:df:01:e9:b8:f8:97:ed:
                    5c:ac:87:82:e7:aa:69:e0:ae:b3:af:39:a5:4c:59:
                    f2:65:5e:f0:ba:a6:c9:e2:c7:0f:75:ef:17:86:8c:
                    6b:0f:20:09:e2:af:c9:0e:c1:ab:c5:7d:39:bb:9c:
                    85:2c:4f:2e:44:42:fe:bc:e2:de:1c:ff:ec:1f:c9:
                    1e:ba:4a:74:f7:78:3a:01:58:59:ac:0a:22:a1:45:
                    ec:f2:2b:33:07:02:6c:33:9d:2c:ce:08:c0:05:5c:
                    f1:28:77:1d:81:aa:07:1b:95:c6:0e:3a:82:52:84:
                    7b:06:ea:82:5d:8c:58:af:ee:0b:7f:a5:38:a9:5b:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:2F:B4:69:9F:2C:36:CE:FA:C1:FE:DD:68:CD:E2:17:A1:3E:93
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dovtGmfLDbO-sH-3WjN4hehPpM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:0a:7c:5e:a9:ee:6b:98:fa:64:16:6e:49:86:bb:19:4a:
         70:00:ff:10:ea:ad:7b:60:68:84:7d:35:90:d2:1a:4e:e4:28:
         45:f5:89:e5:7b:3b:ce:db:70:54:bc:e9:53:76:35:2b:dc:c6:
         55:e8:5d:a6:7c:d6:58:52:82:50:d4:9a:92:2c:f9:c3:13:54:
         33:77:e3:dd:41:45:c9:88:ec:58:07:47:82:c7:4f:82:fb:ca:
         e9:9e:79:3a:60:3a:35:a2:5b:0e:c9:02:91:f9:d9:87:01:60:
         68:6d:da:c4:78:5f:c4:2a:15:ce:e8:9d:24:fc:aa:2f:d6:f3:
         78:73:1b:e5:97:ed:58:32:c6:29:a1:00:aa:70:a4:cb:8f:1d:
         18:e4:92:89:69:f6:a0:b0:64:69:b5:02:83:ab:27:d1:e6:5b:
         c2:cd:c3:bc:6b:78:b2:68:6e:86:3f:2c:45:af:22:f6:d5:99:
         64:a7:79:60:50:c7:a2:c6:49:91:14:4e:3b:66:5f:92:f3:81:
         aa:98:80:cf:ec:25:95:fe:00:2b:b7:8e:1b:88:bd:9a:a0:55:
         61:74:fd:8b:aa:93:a6:d2:e6:a7:38:e2:b9:d7:17:a4:eb:8b:
         1c:f1:29:4c:c3:b7:76:e4:51:87:56:ba:b5:42:8e:53:d9:41:
         0e:e8:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----