Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Nz3AmJ99GLHWqGe0lqruToEGEI.roa
File:                     2Nz3AmJ99GLHWqGe0lqruToEGEI.roa (raw, json)
Hash identifier:          aLJ2DiulUBe0iA3j/tUxr3uOf45UIJ0btkIRNFX2DU0=
Subject key identifier:   D8:DC:F7:02:62:7D:F4:62:C7:5A:A1:9E:D2:5A:AB:B9:3A:04:18:42
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01873EE4353588288D62D340A7BE054DB2E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Nz3AmJ99GLHWqGe0lqruToEGEI.roa
Signing time:             Sat 01 Apr 2023 22:15:55 +0000
ROA not before:           Sat 01 Apr 2023 22:15:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:3e:e4:35:35:88:28:8d:62:d3:40:a7:be:05:4d:b2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  1 22:15:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d8dcf702627df462c75aa19ed25aabb93a041842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:eb:88:ef:0e:6c:1f:84:8e:67:ff:cf:23:0f:
                    05:bf:dd:11:b7:5c:e6:88:80:0a:42:c9:e6:6b:59:
                    f1:3b:cc:80:be:79:1d:9c:c2:2b:dd:19:d5:28:b4:
                    d1:5f:b2:58:e3:ea:f9:a0:51:f4:86:d9:11:70:2b:
                    0d:59:19:09:74:16:00:09:6b:42:0e:0e:85:8a:b9:
                    b6:22:41:a6:46:69:8b:47:b0:0a:ef:9c:b4:92:c0:
                    f5:2c:27:0e:1f:ba:bf:da:b7:19:b6:08:7c:ad:59:
                    0c:14:37:f5:e3:5f:f7:bb:d6:a1:29:cc:75:1b:39:
                    ed:86:21:c0:ca:1c:2e:d6:e1:47:10:ea:e9:88:eb:
                    c8:41:cf:d6:56:35:df:c2:2c:ae:96:52:87:3f:d9:
                    88:3d:a9:b9:3b:1e:fa:cc:90:e8:da:f2:14:79:48:
                    8a:9a:38:d7:59:7f:f0:a7:ec:db:6f:84:6a:5b:b7:
                    db:c4:7e:95:c4:5b:bf:11:7a:e8:dc:a3:a6:84:66:
                    98:a0:e8:d9:00:00:42:07:1b:d9:a0:6b:dd:3c:c8:
                    16:9f:9d:3b:3a:20:07:32:3d:34:5c:a3:66:cc:56:
                    36:33:6e:f5:14:71:c9:1b:c7:ef:16:0a:05:d4:3d:
                    a4:3b:9d:03:a2:a7:96:51:08:14:fa:26:06:6b:11:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DC:F7:02:62:7D:F4:62:C7:5A:A1:9E:D2:5A:AB:B9:3A:04:18:42
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Nz3AmJ99GLHWqGe0lqruToEGEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:ba:e4:7d:a9:a8:61:7b:0e:d0:e4:00:6f:a4:41:1f:91:
         34:6d:85:76:04:f6:9e:29:4d:60:67:b3:aa:e9:2e:41:99:9e:
         42:00:17:b4:d6:b0:f4:87:e1:70:dc:36:98:5a:52:e4:b2:40:
         80:4b:11:0d:2d:9d:62:b6:4f:64:3d:20:57:0c:05:11:e6:87:
         96:1d:ba:7a:86:18:e4:5a:8a:b4:53:55:31:f4:b7:18:7b:76:
         47:d0:79:d3:c5:ad:be:f2:47:0c:34:51:93:5c:9d:f4:49:5d:
         58:e0:2a:bb:89:d6:56:b6:6e:0d:0d:c6:56:ba:0c:35:2c:9c:
         21:29:c9:a0:17:62:cc:f4:2a:8c:cd:63:2f:1f:b4:1d:9f:3a:
         2e:64:f5:3e:dc:6b:09:78:e2:1e:bd:a9:c9:61:90:70:f7:e1:
         65:2a:96:b6:62:1d:42:f8:28:ed:fc:2f:89:6c:f1:8e:1f:77:
         51:ab:ba:14:d1:91:cb:d0:1d:e8:55:70:1b:05:a3:c3:41:70:
         e4:c9:69:34:7e:03:b6:1a:b8:14:09:31:87:3c:7b:a7:73:46:
         74:af:cd:85:a6:e2:ab:5f:72:cc:37:7c:3d:e9:02:64:61:db:
         3c:33:d0:d4:0c:53:18:2d:be:96:dd:8b:84:56:73:92:e9:d6:
         da:1a:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----