Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-kLOKj2IFG4nsRkc5FW-Qqx1QPA.roa
File:                     1-kLOKj2IFG4nsRkc5FW-Qqx1QPA.roa (raw, json)
Hash identifier:          QBdpXiW2aVh/pJiVNzwRFn7orcyeEMDff8dtDmNElJQ=
Subject key identifier:   FA:42:CE:2A:3D:88:14:6E:27:B1:19:1C:E4:55:BE:42:AC:75:40:F0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188A3EC8C21845449C51285783B59C91D5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-kLOKj2IFG4nsRkc5FW-Qqx1QPA.roa
Signing time:             Sat 10 Jun 2023 06:09:28 +0000
ROA not before:           Sat 10 Jun 2023 06:09:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a3:ec:8c:21:84:54:49:c5:12:85:78:3b:59:c9:1d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 10 06:09:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa42ce2a3d88146e27b1191ce455be42ac7540f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:92:45:1a:1f:0b:72:0f:5e:e9:f8:4c:0c:
                    d3:c9:a1:b3:5e:11:25:b6:0b:f2:f7:ae:25:42:25:
                    1f:1f:10:de:28:63:7a:57:89:4c:7d:57:16:2a:e0:
                    d6:95:59:61:8a:e0:83:7e:a7:ee:72:22:93:7e:6b:
                    c8:0c:3f:ad:f0:e1:38:f6:30:53:cc:77:71:5b:77:
                    4c:20:01:33:45:b5:73:22:4c:0c:d5:1e:15:f3:20:
                    43:e1:eb:2d:72:2a:c1:14:15:78:c9:16:05:3e:99:
                    59:84:c0:80:a0:6e:b7:9f:27:28:1c:ea:ab:e3:7c:
                    19:f5:7f:eb:15:6c:35:49:67:9a:31:85:03:31:53:
                    96:9d:3c:4a:d8:82:eb:24:5c:1f:ae:c9:39:9d:09:
                    5d:9e:17:75:9c:88:00:bc:8d:2a:9b:c0:97:78:54:
                    1f:26:6c:7f:df:31:38:c3:57:d9:ae:bd:78:e3:d3:
                    2a:95:11:31:61:78:3a:a1:af:d8:c2:8b:60:1a:55:
                    8a:f8:a5:36:25:59:d6:91:7b:95:72:1c:26:8e:75:
                    39:02:e1:81:8d:f4:16:43:52:5b:8e:d6:04:2b:4f:
                    b8:a7:68:ec:7a:39:d0:9b:0a:5b:4d:f9:80:4e:fc:
                    15:4c:5e:88:dc:9f:cb:f1:bb:f9:a1:e9:04:51:82:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:42:CE:2A:3D:88:14:6E:27:B1:19:1C:E4:55:BE:42:AC:75:40:F0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-kLOKj2IFG4nsRkc5FW-Qqx1QPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:7c:d3:38:d8:85:6d:82:3c:27:af:f9:64:cc:17:7f:18:f3:
         c9:da:5b:df:22:9b:dd:c5:e9:99:fd:d8:9a:48:5d:b7:48:cd:
         f0:da:6c:5b:fc:32:af:d8:03:38:ea:0a:7c:fe:1c:d5:34:68:
         b2:ae:41:d3:16:75:59:e5:37:fe:0b:5f:f6:97:f1:8f:73:0c:
         7e:34:fc:9a:a6:98:c9:a7:55:ca:45:52:9b:11:c3:4a:16:ac:
         a5:f0:e0:42:b3:a8:3d:6c:8a:9d:ac:f7:c2:fe:33:7b:b5:cb:
         70:c5:66:75:03:65:ad:7c:53:6f:7d:ec:b2:a8:e8:48:93:54:
         1e:d6:bf:3c:8e:a8:86:ed:d0:29:d6:ea:84:87:9e:a9:43:9f:
         d8:fe:c6:d1:39:69:24:ac:4b:06:98:bb:80:5e:4b:95:d4:11:
         b4:ab:e1:c7:9a:3a:9e:d5:77:a5:7c:bf:56:87:e2:19:63:f0:
         32:b0:d4:c2:d6:b2:b7:dd:09:62:97:0f:e9:55:bb:db:e0:70:
         d2:a0:5e:4b:70:5b:2e:40:ea:c6:24:f1:c2:41:c4:d8:d5:9f:
         d4:81:bf:d6:2c:54:99:bb:a4:9b:d2:1a:e3:eb:76:e0:f8:1e:
         9a:0a:bd:85:6b:c8:98:b1:db:90:a8:33:67:67:dc:c5:d1:e9:
         9f:83:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----