Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83NSHekzG50MxuCObdcaRCz_rXA.roa
File:                     83NSHekzG50MxuCObdcaRCz_rXA.roa (raw, json)
Hash identifier:          Mgi4FbBzXIxQDpPWdIfBlXxCQQv1DhnHSKzPSmPqBj8=
Subject key identifier:   F3:73:52:1D:E9:33:1B:9D:0C:C6:E0:8E:6D:D7:1A:44:2C:FF:AD:70
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018789937778AA203D4EE4C4C3E42642F49D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83NSHekzG50MxuCObdcaRCz_rXA.roa
Signing time:             Sun 16 Apr 2023 10:19:15 +0000
ROA not before:           Sun 16 Apr 2023 10:19:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:89:93:77:78:aa:20:3d:4e:e4:c4:c3:e4:26:42:f4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 16 10:19:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f373521de9331b9d0cc6e08e6dd71a442cffad70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:4e:ac:2b:8c:81:df:8b:67:89:e8:a3:8e:
                    52:45:73:5a:72:0f:89:d6:2a:ce:8d:16:b5:d0:12:
                    d4:0c:5c:51:78:6a:bc:c5:ea:33:45:c5:e4:b5:91:
                    6d:61:b8:1a:93:ca:25:8c:62:13:e5:fd:3c:67:c3:
                    37:78:79:ef:9e:0f:53:82:11:97:03:16:cb:c8:b4:
                    64:e3:6b:c8:2d:11:8a:53:80:a3:5a:95:72:4d:ee:
                    03:85:d1:5e:3d:64:9d:6c:da:86:ee:6c:2a:15:e4:
                    80:23:32:48:3f:8b:5f:0b:c7:64:ff:d5:f2:9e:f0:
                    e8:94:bb:5b:69:fa:3a:2f:2c:55:e3:27:14:d5:16:
                    b8:cf:c5:ca:6f:3f:be:60:49:4c:f5:5d:e4:64:d2:
                    d1:e5:07:6e:2b:ba:11:44:3a:e5:e4:9c:1e:e1:a3:
                    47:97:bc:24:e7:ff:2e:6d:52:9d:7f:80:29:14:af:
                    30:e9:f8:9e:35:c2:d5:56:13:25:62:79:70:54:8b:
                    29:0e:fb:13:fa:1b:93:45:87:1e:7a:cd:62:1b:9e:
                    9a:e1:4d:cb:26:d9:c0:55:48:01:5d:39:3b:86:53:
                    42:93:94:74:73:d0:44:39:be:55:c3:6b:ee:36:ca:
                    42:c5:12:0c:2a:07:56:2e:4a:e4:b8:1e:ac:89:93:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:52:1D:E9:33:1B:9D:0C:C6:E0:8E:6D:D7:1A:44:2C:FF:AD:70
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/83NSHekzG50MxuCObdcaRCz_rXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:5d:6e:64:8f:40:12:b6:e5:e2:1b:71:4e:34:b3:5d:2e:
         bc:43:3c:7d:00:c5:f4:02:17:c3:c3:e0:98:5b:79:c7:6b:9e:
         13:ad:9c:7b:6e:37:c4:ac:52:f8:f1:7c:20:ad:62:e8:49:1c:
         e2:d4:af:3c:ed:58:69:31:3b:9a:83:14:98:84:1f:95:20:1a:
         91:08:8a:3b:17:b5:d1:18:bf:bb:c1:9c:e9:5a:e0:09:6c:bc:
         fd:d9:cb:50:df:b6:e9:af:44:3f:ae:b2:fb:45:83:07:24:e7:
         89:2c:0a:eb:d7:ae:5e:da:0a:85:13:0b:4c:b3:0a:c5:9e:6d:
         79:09:7f:df:3d:75:97:43:b7:63:af:2c:ec:7d:92:1a:6f:e5:
         57:d0:ea:a2:80:c3:e3:25:a8:bc:a1:ab:19:cc:cb:81:f1:dd:
         13:b6:75:46:41:1c:d1:27:72:a2:c8:d7:5b:fd:be:55:c4:86:
         99:1f:a4:b8:97:c5:39:4d:f5:d6:50:ed:69:63:35:08:1e:1a:
         42:f2:fe:fa:29:54:10:84:e8:b9:14:d5:b3:22:b4:3d:64:f5:
         d6:8f:9e:e4:3c:a2:b1:7d:ce:22:fe:59:45:6d:98:f1:2e:28:
         7d:35:9e:70:3f:eb:5b:e3:7c:3e:54:dc:04:51:96:20:56:aa:
         40:98:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----