Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L4yoyCH2vibuwT1glMe-xbiFinc.roa
File:                     L4yoyCH2vibuwT1glMe-xbiFinc.roa (raw, json)
Hash identifier:          +GM8wZrT79NwmhB8/Cw1Y2F54gFT+Qowp8Yz8mEKxZo=
Subject key identifier:   2F:8C:A8:C8:21:F6:BE:26:EE:C1:3D:60:94:C7:BE:C5:B8:85:8A:77
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01872551E593F613561C226C4B8D5AFD7F32
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L4yoyCH2vibuwT1glMe-xbiFinc.roa
Signing time:             Mon 27 Mar 2023 23:05:36 +0000
ROA not before:           Mon 27 Mar 2023 23:05:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:187:2551:4d49/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:25:51:e5:93:f6:13:56:1c:22:6c:4b:8d:5a:fd:7f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 27 23:05:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f8ca8c821f6be26eec13d6094c7bec5b8858a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:b2:9d:18:ca:f7:19:b7:c5:af:40:81:2f:
                    18:9f:71:f8:74:57:c2:2f:aa:c0:79:32:e2:47:c4:
                    a9:6d:29:08:30:39:45:50:e9:46:24:0a:51:d3:22:
                    00:17:0a:0f:02:74:ba:7e:fd:53:28:5b:f9:ff:19:
                    b3:73:c9:ff:a1:83:8a:2c:1e:c9:9c:a4:e9:3b:bc:
                    29:7f:17:9d:f5:36:e6:ec:47:fa:4e:63:00:41:49:
                    f4:1d:36:aa:d7:fb:d1:f6:3e:f4:f7:2e:14:0d:f2:
                    6f:0b:8a:65:9c:b3:2a:59:42:7d:84:b3:92:47:6a:
                    e1:97:9a:e5:4e:17:fc:75:96:29:5b:f0:60:b2:c1:
                    0b:fc:14:f4:25:b0:3d:14:ec:70:f5:d5:5b:02:02:
                    b8:80:01:f8:ca:9b:51:a8:ce:80:6e:23:da:0c:be:
                    9d:9f:db:34:1e:51:d9:b6:fb:06:f2:e5:78:17:7b:
                    09:df:c9:46:2f:8e:cc:b5:4d:84:80:ad:09:ea:be:
                    66:eb:e7:6f:46:5e:d9:f6:21:94:16:c7:02:c8:50:
                    d4:bf:2f:5a:b9:e7:34:f4:5c:ec:f3:e3:fc:70:64:
                    0b:40:e7:f4:74:e8:3b:b7:6c:d2:9d:89:85:22:ae:
                    41:96:87:1c:5e:65:5e:4e:59:a3:e9:36:fc:fa:07:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8C:A8:C8:21:F6:BE:26:EE:C1:3D:60:94:C7:BE:C5:B8:85:8A:77
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/L4yoyCH2vibuwT1glMe-xbiFinc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:60:2b:b7:d0:4a:fe:b9:78:e5:11:ba:bc:43:66:f7:7a:
         1a:c5:31:2a:52:c8:e0:11:ce:0c:6f:b1:4c:38:c2:f4:c3:0c:
         fc:24:23:8d:b4:3e:ec:73:28:91:8c:11:1a:9f:28:bc:1c:56:
         fb:2a:57:ab:b0:2d:13:bd:11:92:6d:32:e0:74:a7:e9:4f:25:
         7e:c1:59:68:93:6a:23:6a:3d:32:99:f2:ac:93:88:84:34:49:
         a7:95:65:e6:c9:ed:8d:bb:15:ce:7f:e3:88:59:af:4c:f3:58:
         78:b4:59:f1:be:08:6d:0f:a2:be:71:34:d0:74:11:bf:eb:da:
         3d:7e:c2:11:b5:20:47:d6:52:31:4a:0b:67:e5:be:11:6b:22:
         42:e1:42:a6:3b:09:50:de:c4:63:1d:7b:d2:84:47:f3:d6:21:
         8e:35:98:df:d8:5b:26:7f:56:10:0f:20:55:9c:f3:c5:0c:f5:
         0a:1e:66:98:c5:71:37:28:67:b8:c7:cc:d1:87:03:78:19:f2:
         b6:f1:04:0a:6b:3f:2c:20:9b:c4:ef:eb:5a:05:62:b8:71:d3:
         8a:83:d0:8a:68:98:c4:98:47:6f:6e:ed:08:ed:fe:c2:7d:14:
         56:97:de:f0:13:7d:14:4f:31:c6:70:ac:bf:d6:72:e4:33:36:
         c0:c0:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----