Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-oxFM7tQbLGpTxLS2Q2yeMocs.roa
File:                     7F-oxFM7tQbLGpTxLS2Q2yeMocs.roa (raw, json)
Hash identifier:          JilkXd6HzxQ2p2krPlO5EaOgagC+X3hEfYmkGRNWcsg=
Subject key identifier:   EC:5F:A8:C4:53:3B:B5:06:CB:1A:94:F1:2D:2D:90:DB:27:8C:A1:CB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186F0211F9191E8EFF71196E145BB2894E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-oxFM7tQbLGpTxLS2Q2yeMocs.roa
Signing time:             Fri 17 Mar 2023 15:12:27 +0000
ROA not before:           Fri 17 Mar 2023 15:12:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f0:21:1f:91:91:e8:ef:f7:11:96:e1:45:bb:28:94:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 17 15:12:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec5fa8c4533bb506cb1a94f12d2d90db278ca1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:51:a1:cb:34:34:d1:ef:1b:86:4e:08:64:
                    21:2b:16:25:3b:02:65:75:bf:4e:b6:d7:fd:13:cc:
                    56:25:4a:8f:0d:56:e2:be:e8:14:ad:76:a7:52:7d:
                    ab:5b:15:b1:c7:69:11:8f:25:2c:25:23:6b:4d:0c:
                    5f:15:8d:cc:a0:1f:7c:fc:56:3e:b9:2e:b5:33:ce:
                    4b:50:62:23:4b:10:79:fe:2e:e0:71:81:e7:36:e0:
                    4e:b4:d9:81:ce:69:7e:6f:a9:55:04:8a:d7:8a:08:
                    6d:8e:b3:bf:a6:24:ad:75:df:aa:8d:5c:69:86:0b:
                    08:72:ec:54:cd:87:05:17:67:69:7d:5b:a5:83:e6:
                    2b:5d:3c:d7:9e:ee:0a:db:62:ec:ad:7f:f0:df:da:
                    d1:98:1d:87:13:a6:be:22:aa:ff:c2:9c:2a:f7:d5:
                    79:83:fd:46:2c:be:da:3c:da:25:03:a6:75:76:a1:
                    0b:9c:9f:b0:4c:e2:6c:ab:61:f2:39:d5:1c:a4:a3:
                    a9:1b:7d:08:92:26:c8:58:fc:dc:76:31:c5:db:71:
                    51:88:d9:94:d2:15:e9:cb:f3:1c:4c:e0:57:f0:f0:
                    48:c4:12:d3:42:d8:ea:c9:a8:09:5c:f5:12:f9:b5:
                    2b:e9:22:78:63:7f:b8:3f:95:5a:14:ca:3c:61:1e:
                    f6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5F:A8:C4:53:3B:B5:06:CB:1A:94:F1:2D:2D:90:DB:27:8C:A1:CB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7F-oxFM7tQbLGpTxLS2Q2yeMocs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:5e:26:d5:3b:f7:4f:25:93:9c:62:04:7a:ec:b2:b6:35:87:
         e8:fa:f8:12:f4:f5:29:db:12:09:4b:96:96:2a:9d:ab:bd:2b:
         a9:87:35:61:53:13:42:5a:09:7a:f7:f4:63:70:75:29:a7:2b:
         08:aa:df:9e:bb:88:58:da:33:4f:46:1c:32:b8:cd:dc:3e:84:
         79:22:19:31:41:1c:6e:b6:91:de:ba:0d:55:29:31:44:c4:ba:
         3f:3c:18:75:b8:e4:4d:f8:c1:3b:bd:cf:1d:d3:d7:70:49:12:
         0a:f2:22:f7:91:41:6e:08:f9:da:a1:d2:33:8a:8e:89:e5:04:
         3f:41:b8:38:33:a6:70:e0:60:d9:ac:76:a1:32:2d:72:f1:35:
         30:12:bb:d5:39:66:a0:d3:29:fd:3e:61:d5:88:f5:cc:a5:44:
         8b:47:b1:28:8b:e1:37:80:5c:be:b2:28:a4:bf:86:4d:c7:21:
         d5:36:1f:27:fa:7b:e6:6a:d2:3e:81:23:3e:49:78:3a:1f:ff:
         dd:f9:be:d4:60:f8:95:0a:82:d9:11:da:8a:e2:f7:dc:3c:44:
         f1:ad:b4:92:94:d3:12:77:16:21:fc:78:68:62:d3:2f:42:1a:
         e0:c0:58:ff:34:6d:ff:60:d4:ad:d7:ac:7e:3d:ff:41:50:b6:
         aa:2d:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----