Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-AWUtG-WnGVh93j7-USnSxrlPI.roa
File:                     P-AWUtG-WnGVh93j7-USnSxrlPI.roa (raw, json)
Hash identifier:          p+a6r96mG3RRrFm04F+63a8oCZK4AfHQSbl1iaYAtt4=
Subject key identifier:   3F:E0:16:52:D1:BE:5A:71:95:87:DD:E3:EF:E5:12:9D:2C:6B:94:F2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01878A306C5F121C2B9F8237A7E58A6747B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-AWUtG-WnGVh93j7-USnSxrlPI.roa
Signing time:             Sun 16 Apr 2023 13:10:41 +0000
ROA not before:           Sun 16 Apr 2023 13:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8a:30:6c:5f:12:1c:2b:9f:82:37:a7:e5:8a:67:47:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 16 13:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3fe01652d1be5a719587dde3efe5129d2c6b94f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:f9:d6:61:79:3c:7e:e2:c1:12:db:b1:bb:
                    7d:40:90:77:7a:4f:b9:a1:5c:13:28:b7:e0:24:49:
                    0d:89:01:49:28:74:4e:1b:b0:a2:8f:bd:57:62:48:
                    f7:4a:13:94:79:f1:69:09:07:b7:da:94:e3:ab:34:
                    92:67:a3:09:3b:5e:ce:36:98:73:78:fc:81:28:b4:
                    60:16:4d:b3:b8:2d:f6:b5:cd:72:56:ce:ef:70:61:
                    b4:36:39:e1:cb:35:6b:11:ee:b4:d6:24:7b:00:b2:
                    1a:5e:f4:9f:b9:33:ce:8d:49:16:64:b6:1d:78:68:
                    c5:ba:6b:f5:9d:bf:82:83:d7:22:63:3d:a7:40:e5:
                    89:5f:c3:c5:48:f5:33:cd:dd:60:a0:bc:17:27:9e:
                    e9:b1:10:42:26:6e:a6:c5:23:84:2d:d6:58:3b:27:
                    65:53:e4:61:41:2a:49:d6:0d:36:49:db:7f:b9:f2:
                    00:73:46:4e:6d:fc:86:51:f0:0c:65:08:0c:5f:b6:
                    23:e4:1f:d4:25:d6:b4:9d:53:49:20:89:52:db:d3:
                    0e:64:76:9b:51:0e:a1:85:a9:13:77:95:ff:3d:1f:
                    8d:cd:9c:a9:3c:eb:83:62:3f:52:c5:4f:bb:f1:a4:
                    34:dc:83:56:59:4b:3c:55:c4:7e:cd:02:4b:b7:e1:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:16:52:D1:BE:5A:71:95:87:DD:E3:EF:E5:12:9D:2C:6B:94:F2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P-AWUtG-WnGVh93j7-USnSxrlPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:f7:78:ed:7e:df:7a:25:a7:4f:5a:f1:f4:9e:5a:de:8c:55:
         4c:d1:8e:df:2f:38:11:62:20:9d:49:62:de:f4:f8:4b:76:5f:
         0f:c0:09:5a:4c:cf:81:1e:58:ba:a2:a3:5a:88:57:5e:4f:48:
         e6:dd:51:6b:fb:2c:2b:34:67:73:7a:03:8d:e4:15:64:c1:19:
         df:26:3c:7d:ab:8c:e4:4c:24:be:69:a4:65:6f:f3:ee:0c:5e:
         38:10:44:90:ef:4d:ee:4b:c1:0c:64:0a:ed:cb:2a:a7:3b:35:
         22:c4:65:1d:d9:ec:02:96:00:c1:74:3e:d5:bc:c0:fb:80:bb:
         1a:f1:3c:17:a6:b8:c8:ec:3f:d2:22:c8:ff:58:70:7f:19:3f:
         04:97:58:d1:62:83:38:e3:93:42:b1:eb:d7:af:89:c6:cb:74:
         26:4f:96:88:c9:41:93:79:74:23:27:04:53:c2:d9:09:73:42:
         2e:90:c6:7a:af:02:b6:57:38:18:c7:35:f0:ed:1e:2f:d4:d4:
         7c:a1:b8:cb:e3:ef:92:88:74:83:bc:f1:44:f6:96:7a:2b:f3:
         1c:4a:bf:4e:a7:c0:59:30:31:20:01:5d:13:1c:d6:7a:a1:13:
         e5:0c:53:f5:82:21:cd:64:df:69:1d:cd:a9:9d:b2:ec:ac:6f:
         b2:36:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----