Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AYEZugk68CdR-19Oijs-q3YjOOk.roa
File:                     AYEZugk68CdR-19Oijs-q3YjOOk.roa (raw, json)
Hash identifier:          R2sydewk5vz+rKRGJI91bdjB7wPB8J0NUrKuVMLySNY=
Subject key identifier:   01:81:19:BA:09:3A:F0:27:51:FB:5F:4E:8A:3B:3E:AB:76:23:38:E9
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187891846291D00499C0D4A2D5187F0861C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AYEZugk68CdR-19Oijs-q3YjOOk.roa
Signing time:             Sun 16 Apr 2023 08:04:41 +0000
ROA not before:           Sun 16 Apr 2023 08:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:187:8917:fac6/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:89:18:46:29:1d:00:49:9c:0d:4a:2d:51:87:f0:86:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 16 08:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=018119ba093af02751fb5f4e8a3b3eab762338e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b7:c8:fe:a7:0c:c4:c9:58:ee:9f:79:1f:b0:
                    53:d6:31:7a:ec:d4:35:eb:31:db:49:e7:d5:ca:97:
                    f3:c0:71:22:d7:80:2d:64:2b:2c:d8:ed:2c:b3:15:
                    7c:99:c1:a4:eb:b3:ff:ce:ad:11:60:39:5f:f9:d4:
                    e6:ec:b4:aa:47:b1:ba:25:ad:80:15:d6:80:d9:a0:
                    fb:ff:0a:3e:54:d0:87:cf:84:6b:9c:26:99:53:6a:
                    37:c0:78:c4:b4:91:7e:a6:62:b3:64:03:67:6b:e5:
                    07:ae:34:27:da:e4:b8:17:16:eb:4c:34:9f:88:bf:
                    f6:2e:67:82:84:90:a4:da:e9:18:c7:ac:34:8b:44:
                    8a:76:05:ee:61:20:33:23:0c:52:52:cd:bd:1d:dd:
                    5a:a7:6e:07:4e:e3:d6:c8:81:7f:57:3c:16:7f:56:
                    1c:d0:73:01:5e:49:a1:0e:d1:a2:f0:75:30:70:69:
                    22:37:66:83:b4:38:b4:aa:45:f8:ac:d9:b0:d5:e0:
                    7e:99:70:df:de:2d:a4:69:99:23:0f:e4:1c:12:33:
                    9f:b0:5c:d0:f9:cf:14:8f:3e:61:f8:48:82:a5:b9:
                    cc:97:6b:cf:c2:b3:71:81:02:10:4a:c8:c0:00:95:
                    1c:08:45:0c:fe:9d:74:3c:c5:a5:90:11:56:67:0b:
                    5d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:81:19:BA:09:3A:F0:27:51:FB:5F:4E:8A:3B:3E:AB:76:23:38:E9
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AYEZugk68CdR-19Oijs-q3YjOOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:e4:9f:3b:26:84:bd:23:03:62:d0:bd:74:77:00:56:2a:ae:
         95:ed:00:2b:f7:b7:98:57:8f:5a:82:b8:82:9f:b3:33:24:46:
         ba:84:c4:54:3d:d8:9e:8d:40:0a:8a:73:f0:dd:55:64:45:e8:
         0d:85:eb:89:d9:4f:ca:20:23:df:3f:e1:63:a6:6c:96:54:f8:
         e7:5c:8a:b1:09:bc:3d:91:ef:20:8c:ae:a8:67:c9:d8:4f:60:
         57:f3:8a:93:3d:47:5c:e5:e3:cb:d6:36:9f:d3:49:c4:53:6a:
         ca:24:6b:28:9b:0b:d9:44:dd:0f:e5:48:f3:49:26:50:e2:72:
         0a:8a:49:7b:fd:11:be:2e:d5:67:c8:d6:a4:64:03:c8:ac:32:
         a3:35:a3:4f:d8:62:31:1f:99:86:6f:ec:15:17:9b:b8:33:1e:
         7a:e7:cc:8a:e3:68:9e:39:93:5f:23:fa:67:94:ab:ba:29:92:
         8c:3b:ac:9e:f8:0f:94:2b:8f:e9:12:17:72:19:8b:19:2d:fc:
         40:b2:3e:fe:66:0d:b7:be:b7:92:3b:51:89:70:1c:5f:f6:fd:
         69:5d:7f:ea:7e:c2:59:d0:eb:5b:fd:bd:e6:84:2a:87:a4:78:
         71:98:96:e4:88:af:1b:11:5b:9a:1e:32:52:03:8d:61:cf:fc:
         1d:ed:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----