Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkAPKK4HMZn4HryXjH6pR_oFxf4.roa
File:                     AkAPKK4HMZn4HryXjH6pR_oFxf4.roa (raw, json)
Hash identifier:          ZwD5UrxdPPIyJu79W9LWBxhyileswyKLn1IEv0JH6r0=
Subject key identifier:   02:40:0F:28:AE:07:31:99:F8:1E:BC:97:8C:7E:A9:47:FA:05:C5:FE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187E59903D5113C81CC1499D90464411701
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkAPKK4HMZn4HryXjH6pR_oFxf4.roa
Signing time:             Thu 04 May 2023 07:10:23 +0000
ROA not before:           Thu 04 May 2023 07:10:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e5:99:03:d5:11:3c:81:cc:14:99:d9:04:64:41:17:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  4 07:10:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=02400f28ae073199f81ebc978c7ea947fa05c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dd:1a:f6:7b:ff:08:9a:52:97:53:3a:e4:23:
                    65:46:83:a4:10:da:5d:bd:94:0d:43:9a:6e:d7:79:
                    fd:21:e8:4d:ee:12:29:30:8c:ec:89:53:7f:39:c4:
                    51:fe:22:30:b1:dc:d2:1d:3f:37:c1:f9:c5:68:47:
                    8f:b7:54:3e:88:6a:0d:12:0b:b5:3d:cf:41:bb:75:
                    d1:b4:db:38:ff:c7:99:3c:26:9a:6f:fb:14:60:56:
                    77:17:14:1d:e0:da:15:0a:bf:d9:2a:ff:fa:75:87:
                    9e:c2:be:75:97:e2:07:b3:ef:9b:8f:48:88:48:23:
                    40:5e:d2:c2:e2:51:5a:a5:a1:86:64:c9:e7:8f:14:
                    57:00:b6:ad:a8:cc:42:03:45:ef:bf:30:b3:1e:4b:
                    03:e3:08:e5:36:34:df:b3:ab:fd:e4:b4:9e:9b:35:
                    e6:8a:a4:c1:fc:ae:8d:15:03:ac:5c:02:bd:b1:d1:
                    4c:7b:13:d8:65:4b:bb:42:01:ca:79:f4:77:c9:93:
                    f8:71:9e:5c:87:c4:22:46:0a:5c:20:31:0f:aa:9b:
                    8f:08:9b:df:c3:9b:32:5e:33:20:89:12:2c:4b:92:
                    a1:84:06:6f:0a:8b:a8:0d:63:0b:eb:e1:0e:a0:43:
                    86:aa:07:55:43:32:17:1f:74:25:58:6b:c8:cc:9e:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:0F:28:AE:07:31:99:F8:1E:BC:97:8C:7E:A9:47:FA:05:C5:FE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AkAPKK4HMZn4HryXjH6pR_oFxf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:84:e1:88:19:f9:6d:15:5a:fd:8f:21:5a:0e:7c:d2:0d:
         4a:2c:da:7e:d3:38:52:38:42:42:cf:93:04:d5:d8:ea:3a:7d:
         cf:c3:48:78:90:c4:df:c2:0d:7c:1b:89:50:4b:ce:50:19:3f:
         a5:2c:07:65:63:1a:2c:4d:7e:87:6e:41:ad:c9:cb:23:e6:0b:
         20:ce:c8:a2:5f:9a:e6:9c:78:2b:8c:1a:c1:34:1a:e8:ab:75:
         41:2a:b4:7b:13:20:dd:f2:fa:65:89:92:82:c5:86:9f:43:a1:
         ba:f8:22:41:db:4d:f6:b2:c6:cf:2c:97:10:df:cb:5e:1c:e2:
         bf:7d:c1:e0:38:d7:4f:d8:89:d2:fb:56:81:11:5c:84:43:9d:
         c2:8b:11:ce:f7:bf:12:36:21:5d:86:09:16:6f:66:4b:37:43:
         f5:29:af:a7:bd:1b:2d:c8:07:a9:ff:8b:dc:75:b8:e6:3f:79:
         53:c3:f1:33:f2:ff:ff:7c:cb:c3:ab:95:ba:5a:4d:d8:b3:84:
         cf:40:d3:6b:6b:3e:df:3f:a8:c4:cd:9f:26:41:aa:42:1d:2d:
         ab:29:12:87:6c:5c:74:3a:ab:e7:d9:f7:5e:3b:f2:e6:ec:34:
         f6:f8:9f:1f:c6:5a:6d:61:d5:65:be:7a:3e:ac:29:86:b3:72:
         f6:a4:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----