Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UeiYrczQqU5zrOGVmww0fJvqn7s.roa
File:                     UeiYrczQqU5zrOGVmww0fJvqn7s.roa (raw, json)
Hash identifier:          a8RoojQX+n34J5P0i6pk8iwRDD3sbMu6llL/LOQfwLc=
Subject key identifier:   51:E8:98:AD:CC:D0:A9:4E:73:AC:E1:95:9B:0C:34:7C:9B:EA:9F:BB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187481E3EC4B549C94A5F1F5EF8798C5C9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UeiYrczQqU5zrOGVmww0fJvqn7s.roa
Signing time:             Mon 03 Apr 2023 17:15:54 +0000
ROA not before:           Mon 03 Apr 2023 17:15:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:48:1e:3e:c4:b5:49:c9:4a:5f:1f:5e:f8:79:8c:5c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  3 17:15:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51e898adccd0a94e73ace1959b0c347c9bea9fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:b8:52:7d:5e:fc:2e:38:d6:8d:7d:34:93:
                    0c:fe:75:d6:e3:92:12:63:3f:00:72:e5:ab:76:32:
                    0e:2f:19:44:47:84:84:b5:dc:11:c2:89:12:cb:dc:
                    8d:84:9c:0f:00:99:95:e6:da:02:ad:74:60:4d:e9:
                    8a:c1:9a:fe:f8:a8:2d:87:bf:1a:cf:9d:bc:73:6b:
                    d2:2b:2a:7f:bd:2f:52:17:e1:41:b3:09:9c:91:8a:
                    12:30:5f:19:4c:1a:1d:61:c0:02:2f:35:97:cf:45:
                    03:d1:63:ca:56:ca:95:37:7d:4b:5c:81:13:6a:7c:
                    f5:87:cf:b7:33:54:61:3e:04:a4:83:d7:83:0d:d7:
                    da:d8:2a:8a:a7:c6:ac:36:a0:c5:13:07:9d:c8:bb:
                    e5:66:73:b7:94:33:cd:13:e4:bc:ea:b0:68:d4:18:
                    4b:bf:0d:03:c0:5f:18:69:c4:d7:12:82:b2:5f:ea:
                    65:34:25:99:39:4d:db:78:6d:30:80:08:1b:45:d4:
                    e3:be:a3:76:6c:24:51:11:8d:de:d8:39:2a:d1:41:
                    4d:5b:49:69:59:49:73:c3:13:8d:cf:9c:b3:36:82:
                    0f:69:1b:5b:b0:8b:0f:48:ff:01:ac:22:76:f1:8e:
                    38:8f:5c:41:2a:ba:8f:46:2a:c4:9f:a4:b6:79:9f:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E8:98:AD:CC:D0:A9:4E:73:AC:E1:95:9B:0C:34:7C:9B:EA:9F:BB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/UeiYrczQqU5zrOGVmww0fJvqn7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:de:42:b6:a3:f9:f8:4f:a3:8a:34:95:ba:77:d5:fb:b5:
         60:46:f3:8d:4d:b5:0f:22:53:95:4d:92:54:10:e0:48:a5:07:
         0c:fa:2c:ce:ae:91:ae:84:36:e5:c0:68:37:2c:74:ee:b5:3d:
         16:cf:ce:5a:a1:93:fe:cd:5c:3e:0b:4f:a7:90:7c:3d:09:cc:
         93:18:09:f5:e1:63:1f:b9:6f:75:69:cd:57:95:b3:2a:e0:53:
         11:b6:30:a3:ea:e4:69:e8:33:28:de:a8:83:c3:b4:82:e0:05:
         57:b4:9a:96:a0:b4:92:2a:09:f4:fc:d1:cf:3b:68:37:ac:55:
         0c:b0:af:e8:53:f3:02:99:ce:98:b0:22:2e:41:08:1e:0b:d3:
         ae:07:5b:9e:75:4d:f7:af:42:cf:37:f7:ba:bb:84:32:55:43:
         33:62:e8:d7:52:b1:40:43:84:82:eb:14:e5:8a:2b:4d:ed:66:
         8e:67:01:57:72:c8:85:52:54:e9:14:0b:e6:5d:87:2e:c5:1d:
         b5:18:8e:a9:78:cb:c3:0c:c3:1e:f0:fe:15:e6:a9:73:fb:15:
         80:2d:d6:a4:47:06:3c:6c:5b:e4:42:87:7a:63:27:ed:c1:af:
         09:47:0c:eb:76:2d:46:66:48:26:4b:2d:86:d7:2d:59:a0:4d:
         74:e1:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----