Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5AgavYrDMJwwA64BHT9TqKaWQMY.roa
File:                     5AgavYrDMJwwA64BHT9TqKaWQMY.roa (raw, json)
Hash identifier:          ScT++xORoI3JBV4fGIUor3V/GdxaJm4QX9RfwC7kXWU=
Subject key identifier:   E4:08:1A:BD:8A:C3:30:9C:30:03:AE:01:1D:3F:53:A8:A6:96:40:C6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C127413710968864CCB61E55C25A73BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5AgavYrDMJwwA64BHT9TqKaWQMY.roa
Signing time:             Wed 08 Mar 2023 12:17:00 +0000
ROA not before:           Wed 08 Mar 2023 12:17:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:27:41:37:10:96:88:64:cc:b6:1e:55:c2:5a:73:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  8 12:17:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4081abd8ac3309c3003ae011d3f53a8a69640c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:90:31:a4:61:36:f1:0a:ca:a3:38:96:9e:b6:
                    01:42:6a:63:39:94:37:0d:05:2b:14:1c:0b:ed:c0:
                    57:b8:ea:8c:70:f3:7e:cf:27:75:7b:58:b9:a1:e9:
                    01:2b:9a:2b:9c:5e:39:cb:0c:5b:eb:c0:ee:43:6c:
                    f8:30:81:2a:5a:4a:52:b0:0e:5b:56:a9:94:78:c7:
                    0d:10:43:ca:8f:00:48:36:dd:e5:df:5d:45:aa:bf:
                    af:9d:57:8c:6f:e7:f9:2c:76:e1:af:9c:90:bc:05:
                    91:3c:f3:55:ed:11:97:f4:3c:0b:26:49:28:ba:c0:
                    96:5d:73:1f:a5:b7:82:91:34:1b:eb:e8:0b:7c:15:
                    df:57:93:07:7a:dc:0e:b8:9f:01:88:f9:8d:15:ae:
                    be:fe:a6:64:4a:39:e1:94:5e:ed:27:84:54:86:ef:
                    ca:14:62:ab:62:8c:d3:ba:5d:57:40:72:4b:f3:89:
                    d0:30:fc:06:da:84:19:e6:28:d4:82:3e:6c:ca:b4:
                    94:b5:0d:c3:db:95:d8:1a:48:33:2e:94:32:c7:2a:
                    9f:85:73:ed:c8:96:d9:20:db:4f:16:b5:36:09:05:
                    96:39:20:de:d9:1c:6e:8b:fe:02:36:b4:2e:c0:e2:
                    47:5c:49:18:e0:c3:4d:0f:5c:b8:ef:74:ad:29:21:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:1A:BD:8A:C3:30:9C:30:03:AE:01:1D:3F:53:A8:A6:96:40:C6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5AgavYrDMJwwA64BHT9TqKaWQMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:24:46:cf:1f:0f:61:d4:17:8c:5f:24:3c:f0:81:57:f0:d2:
         6d:80:82:aa:1b:b2:d7:14:f0:ed:24:cb:54:d9:b4:45:0d:c3:
         4f:82:fb:22:cc:93:74:e8:54:65:33:d1:58:97:58:46:ee:11:
         f1:96:9f:3c:2b:9b:ea:a0:c4:09:76:db:09:1b:d6:14:f6:72:
         61:c0:f5:d6:7e:d0:a7:7c:f5:96:9d:42:b1:6e:ed:f1:ce:1d:
         b5:b7:bf:d8:ae:3b:c9:82:aa:fe:06:bd:94:f1:c4:0e:fb:27:
         a8:8e:10:63:8f:c2:9c:e7:8d:a6:9d:3b:64:ae:f3:99:95:f9:
         65:b6:b5:9e:3e:a0:54:fe:c7:95:fa:2a:86:65:d5:ae:7d:66:
         e4:0b:fb:59:87:84:74:db:1b:37:b2:9f:12:dc:4c:e7:f4:c9:
         a7:da:4c:79:5e:16:8b:f6:2f:ce:55:e0:70:bc:a6:74:ed:b2:
         bc:a3:fd:2f:69:e3:0d:ce:ed:27:eb:2c:83:ae:41:87:22:65:
         92:6c:c8:8b:2a:67:19:8b:e3:a4:2a:c2:42:8c:bf:3d:6e:51:
         19:7b:21:82:96:34:1b:7f:6a:c9:24:6d:2e:1c:3e:a8:98:6b:
         68:51:b4:5b:bf:7a:ec:70:c9:3d:41:51:6a:36:7f:f2:22:3c:
         67:12:98:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----