Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MVCepvdcNax48d3ygms6QYccBo.roa
File:                     5MVCepvdcNax48d3ygms6QYccBo.roa (raw, json)
Hash identifier:          jekGnMDJ3zeLE7BKkeCPLP+xrbu/8udr+w3KGL0TOD0=
Subject key identifier:   E4:C5:42:7A:9B:DD:70:D6:B1:E3:C7:77:CA:09:AC:E9:06:1C:70:1A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187E1BE12C753A2F7C60A886B51E822353B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MVCepvdcNax48d3ygms6QYccBo.roa
Signing time:             Wed 03 May 2023 13:12:22 +0000
ROA not before:           Wed 03 May 2023 13:12:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e1:be:12:c7:53:a2:f7:c6:0a:88:6b:51:e8:22:35:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  3 13:12:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4c5427a9bdd70d6b1e3c777ca09ace9061c701a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:08:2c:1c:15:5d:94:d8:7a:5e:37:d9:e9:8e:
                    39:50:4f:74:51:41:1c:fc:8d:ab:c8:a5:f0:d0:75:
                    78:59:d4:e2:50:c2:7f:5e:7f:18:f6:4c:c5:f9:be:
                    eb:19:17:23:1c:05:39:aa:59:7b:e7:c2:9b:21:67:
                    ea:e8:06:5b:ef:d8:31:b5:6b:8a:77:60:82:8e:e2:
                    d5:fb:cc:d5:05:96:b4:04:39:13:ba:38:eb:88:28:
                    a6:2d:dd:4c:29:99:04:33:f6:e6:5f:42:58:3d:90:
                    53:0e:dd:70:38:db:2a:88:49:61:7e:d3:e2:98:9f:
                    99:81:a2:06:10:87:cd:45:82:71:a1:3a:aa:89:dc:
                    cf:f8:b2:01:6e:83:55:0e:57:94:01:0f:75:be:29:
                    4c:19:9d:d5:f1:72:49:49:00:01:4c:c9:b4:90:1f:
                    28:20:49:40:d5:7b:d2:40:7e:76:45:25:a5:64:79:
                    0b:78:ad:85:36:e0:dd:e3:45:5e:c4:bf:5a:38:01:
                    17:31:af:de:74:50:f3:ee:f3:a3:30:00:ba:dd:ab:
                    94:76:45:ff:68:f4:41:ff:40:04:e0:d8:5d:ee:c2:
                    1e:41:9d:69:2f:5d:5e:d0:14:68:c0:b8:55:d7:7c:
                    f6:83:a3:68:58:00:12:58:f2:f3:6b:d5:a1:0a:25:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C5:42:7A:9B:DD:70:D6:B1:E3:C7:77:CA:09:AC:E9:06:1C:70:1A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5MVCepvdcNax48d3ygms6QYccBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:37:07:a8:bd:91:2b:9f:c1:1f:a1:82:f8:58:f3:cf:df:f8:
         9a:85:0d:5a:7e:a5:83:13:f8:7d:73:f5:08:69:42:e8:17:10:
         16:8a:37:ea:85:10:c3:c9:85:61:d0:3a:02:43:21:91:a8:dc:
         99:83:41:3b:ac:64:53:55:aa:34:84:1d:97:19:6c:75:94:47:
         f1:db:35:14:2e:79:9a:8b:cf:a9:70:a4:e4:30:59:09:f1:ae:
         84:e6:e3:cf:65:b5:42:c6:e3:76:13:e6:b9:ae:c8:01:f4:60:
         77:d8:0d:5c:09:bc:36:f4:e1:32:77:f8:2f:ff:bc:fb:52:14:
         72:65:f7:ac:e9:e0:92:a2:f9:94:d7:b0:05:3a:04:d7:b7:fb:
         81:38:36:19:12:4e:79:fb:2a:4f:a0:8b:65:fb:51:8f:2c:1b:
         ad:1a:c9:43:d8:bc:ec:b8:7e:d5:aa:b0:78:9f:0c:2e:aa:e2:
         c9:06:49:48:ad:06:92:7e:b0:70:5d:87:0b:1f:b3:ff:38:29:
         bf:dc:8b:95:9c:89:2e:3a:43:bd:a8:6d:74:3a:59:30:4d:c5:
         f2:49:5b:92:d8:4e:a5:2d:92:e4:94:ca:f8:cd:f8:20:63:23:
         81:9d:cf:af:f5:dd:6c:19:ee:37:9a:37:6d:3a:25:0c:2a:93:
         50:5b:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----