Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KAmM6aXSFdjpDB6vhg7q6-J02MY.roa
File:                     KAmM6aXSFdjpDB6vhg7q6-J02MY.roa (raw, json)
Hash identifier:          +vhwGq3ltjfYUJTx1+n2mZ8vAGVTXZdMaglf+G4euDM=
Subject key identifier:   28:09:8C:E9:A5:D2:15:D8:E9:0C:1E:AF:86:0E:EA:EB:E2:74:D8:C6
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187A26FB1D5D8FB8C5C760B5A7873D2024D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KAmM6aXSFdjpDB6vhg7q6-J02MY.roa
Signing time:             Fri 21 Apr 2023 06:10:41 +0000
ROA not before:           Fri 21 Apr 2023 06:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a2:6f:b1:d5:d8:fb:8c:5c:76:0b:5a:78:73:d2:02:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 21 06:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=28098ce9a5d215d8e90c1eaf860eeaebe274d8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6c:d4:7c:d7:cf:e9:6b:13:b8:b5:b7:08:4c:
                    a6:cc:60:70:41:60:b8:0f:19:ad:64:8d:f3:03:94:
                    55:66:1c:3a:52:ec:63:4a:5b:cf:14:d9:fb:4c:fd:
                    60:1b:5d:b2:53:c2:d3:6a:00:e1:2e:6f:48:4b:46:
                    dc:12:d6:22:b5:b4:b8:95:d1:ac:3f:37:73:85:e0:
                    90:b6:7c:1c:56:81:33:fc:17:17:fe:b4:7d:71:58:
                    ee:1d:b2:ca:f8:85:e6:d3:a5:2c:24:b5:9a:9b:ec:
                    f6:f7:dc:89:bf:7d:5c:83:5a:85:84:11:2a:7c:5a:
                    93:2d:29:c8:1c:a0:c9:82:e5:7f:b7:cc:ab:b3:96:
                    30:6b:a3:34:59:ca:ef:fe:46:74:34:ed:91:43:f8:
                    e6:d6:99:22:3b:50:bc:14:49:49:32:f4:8c:e6:b1:
                    c7:c6:e4:ce:01:5f:6e:7c:d4:d5:3c:9f:bf:e2:13:
                    4d:4e:5a:4f:4e:fb:21:8e:4c:ae:c3:8a:cb:64:88:
                    a5:80:87:71:d9:9e:9f:8a:c1:42:1d:ef:9a:c7:e9:
                    b8:48:8a:c6:8d:e6:f7:66:ee:84:73:1b:58:b0:10:
                    7f:0c:a5:01:e9:c9:14:75:be:61:c8:a5:83:6b:57:
                    f8:b5:c6:02:ac:87:6d:12:75:0f:d7:a0:9a:80:13:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:09:8C:E9:A5:D2:15:D8:E9:0C:1E:AF:86:0E:EA:EB:E2:74:D8:C6
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/KAmM6aXSFdjpDB6vhg7q6-J02MY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:a3:87:e9:54:2c:e2:09:02:e2:6b:16:46:ee:68:33:c6:19:
         3b:ea:7b:39:73:52:fc:c0:f6:e4:9e:11:28:28:96:cc:a7:c4:
         59:ed:ec:b1:04:28:b2:aa:63:9d:a4:f7:28:47:a8:f0:53:b3:
         8c:fe:81:f4:c3:d8:34:6b:5f:58:97:c6:7c:3a:bb:2f:0c:3d:
         d1:e0:5c:08:7d:10:fa:2b:03:ff:b9:f0:cc:cf:10:51:34:67:
         67:de:a4:c4:5f:19:97:12:86:15:04:e1:db:90:8b:78:b0:1f:
         d7:25:b2:8c:39:36:86:52:ce:6d:d7:bf:18:f2:11:56:b8:a7:
         44:20:71:93:e0:97:a7:af:67:ab:0c:cc:04:5a:70:89:cd:95:
         4e:3f:02:cb:b1:07:8b:f9:54:36:27:dc:74:ac:ce:fb:fc:d9:
         c9:1d:ff:41:4d:67:c6:b8:2f:81:8a:c9:23:5a:0e:8b:e3:94:
         2e:be:16:b7:21:34:45:d3:4b:90:48:5d:6d:5c:cc:7e:31:30:
         d1:8f:d2:16:c6:bb:c2:35:63:36:3d:4f:5a:6e:b9:9d:03:1a:
         92:fa:46:63:a0:e6:f2:17:b3:5a:e6:ed:5b:43:4a:ff:e6:91:
         be:07:ef:49:9f:2d:e8:08:6f:5b:c4:a1:2a:f5:51:72:b7:8f:
         19:85:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----