Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/12Qv2VcQgdTxrjOBZOIWzArDc-w.roa
File:                     12Qv2VcQgdTxrjOBZOIWzArDc-w.roa (raw, json)
Hash identifier:          q+h1gdeguDZ5mwV94MkKVvy9gv8VVTXQ48iBx5dQWF8=
Subject key identifier:   D7:64:2F:D9:57:10:81:D4:F1:AE:33:81:64:E2:16:CC:0A:C3:73:EC
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018781D2199D9CC3A0AB3822C97DFE86E73E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/12Qv2VcQgdTxrjOBZOIWzArDc-w.roa
Signing time:             Fri 14 Apr 2023 22:10:42 +0000
ROA not before:           Fri 14 Apr 2023 22:10:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:81:d2:19:9d:9c:c3:a0:ab:38:22:c9:7d:fe:86:e7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 14 22:10:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7642fd9571081d4f1ae338164e216cc0ac373ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:b4:95:f0:2b:b1:46:bc:16:7c:b4:47:ca:
                    ae:98:40:d1:c4:67:73:f1:44:22:1a:d9:f7:6a:9f:
                    b4:cd:86:27:ea:03:47:f4:be:cd:bd:7a:58:11:a3:
                    4f:d8:38:90:09:d3:5b:4d:7b:60:47:f8:15:a1:3e:
                    c3:5c:7e:88:63:59:24:2e:b4:ab:3f:96:ce:6d:d0:
                    c7:0c:1b:ec:ad:bd:d5:39:55:ab:b7:2e:91:72:ea:
                    8d:13:78:ee:5f:68:13:b4:58:40:52:5b:ab:7a:4f:
                    67:e2:a3:af:3f:ce:14:07:c0:99:0b:c3:f3:94:52:
                    5c:8f:3c:96:9f:ca:54:16:20:1a:26:93:06:9b:22:
                    e0:b9:02:41:02:04:78:2b:d8:76:78:f2:2f:15:0b:
                    e5:09:d3:06:81:b3:89:f8:8b:ff:1a:8f:3b:d8:02:
                    e6:00:38:56:3d:f9:65:5b:19:15:fc:01:c8:3e:19:
                    53:41:02:61:40:87:cf:8e:38:5d:7a:57:44:f7:41:
                    09:b5:9e:2d:44:d7:28:a4:39:7a:a6:37:e6:65:10:
                    55:bf:6a:ef:42:a6:7c:2a:ca:98:5d:db:c8:7f:d9:
                    da:15:fd:04:36:a9:e8:96:9e:02:ad:17:cc:ed:5f:
                    d2:52:c8:94:da:25:51:65:c5:17:4a:9b:59:b5:77:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:64:2F:D9:57:10:81:D4:F1:AE:33:81:64:E2:16:CC:0A:C3:73:EC
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/12Qv2VcQgdTxrjOBZOIWzArDc-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:ec:60:45:22:c1:47:e7:c5:20:51:df:fc:56:95:c2:bf:
         46:15:44:40:91:70:6f:04:f3:6b:e3:f7:b0:d1:f2:67:f7:17:
         ab:f9:49:5f:86:ca:ff:ae:dd:b9:d5:d5:52:31:16:51:dc:c4:
         75:cb:bc:e0:b6:df:db:9e:f9:de:83:77:d4:e5:53:70:4e:de:
         d9:20:57:04:d3:6d:97:44:df:7d:2a:62:f9:e9:50:a2:94:92:
         e5:81:4c:a6:85:63:ff:d5:15:2e:22:27:78:3a:7f:46:f2:13:
         34:ca:a2:c3:3c:ba:ec:54:bd:55:14:89:4e:1b:ba:c2:d9:9e:
         ae:6d:a2:f5:fe:33:71:04:36:7a:f0:8c:5b:e8:76:35:62:5b:
         3b:3a:20:01:07:a0:e8:2a:7d:db:ff:fe:0f:b2:72:98:f6:03:
         24:2e:ee:04:2d:a5:ab:17:6c:47:6a:6d:ac:08:24:d2:b9:d2:
         99:d6:46:61:a9:eb:2e:3d:ca:05:23:fb:d0:c9:58:17:b5:e3:
         e9:a8:96:f5:b7:c6:5d:58:92:de:0f:6e:ec:f4:43:ae:e9:28:
         51:c8:9f:b6:4e:39:14:99:97:f4:5d:ae:8e:08:50:a0:02:73:
         31:54:4f:c4:50:a3:6e:d7:a4:1e:a9:0c:ef:c5:c1:44:99:c9:
         e2:02:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----