Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr7Y6WJJr4wE8U8y6plHHsvqYX4.roa
File:                     Vr7Y6WJJr4wE8U8y6plHHsvqYX4.roa (raw, json)
Hash identifier:          oQkORlAO/AcRyFKek5PE1mRvtfGrmCG2N1hVGHRpXTQ=
Subject key identifier:   56:BE:D8:E9:62:49:AF:8C:04:F1:4F:32:EA:99:47:1E:CB:EA:61:7E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01879063F173913B6B4F0A7B4B258B0A3C4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr7Y6WJJr4wE8U8y6plHHsvqYX4.roa
Signing time:             Mon 17 Apr 2023 18:04:41 +0000
ROA not before:           Mon 17 Apr 2023 18:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:187:9063:afbe/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:90:63:f1:73:91:3b:6b:4f:0a:7b:4b:25:8b:0a:3c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 17 18:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56bed8e96249af8c04f14f32ea99471ecbea617e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:b9:b7:06:a2:30:a2:2c:dd:f9:7f:0b:3c:
                    f3:82:d1:c2:ef:4f:f6:5e:92:6e:35:4d:7b:f1:8b:
                    ae:f9:e3:aa:1c:48:e3:8f:cd:d8:f9:82:e0:a1:8f:
                    ab:ef:aa:ed:80:2b:a6:b1:b7:11:33:12:a9:86:d9:
                    8b:f7:17:3d:aa:c7:09:89:99:79:36:47:fb:b4:e4:
                    0d:16:c8:d0:30:88:52:1b:25:69:42:20:75:e0:06:
                    59:18:51:b8:20:f3:7d:85:67:48:25:87:b9:5e:7a:
                    f0:4b:20:4a:6a:fe:0a:cd:4b:64:f0:6f:a5:67:0a:
                    32:e8:4d:14:6e:5a:08:15:bc:a1:3d:88:6f:ac:f9:
                    50:f5:c0:61:61:44:ee:68:0e:1a:f0:5b:e5:73:bd:
                    af:61:2d:a9:0a:35:bc:2e:2c:cd:3d:dd:bd:d6:53:
                    fe:7b:a9:a1:c7:9d:70:a3:a0:52:2f:c2:48:2e:fb:
                    12:8e:31:2f:77:03:0a:d8:d8:e5:99:9b:f1:17:25:
                    95:1d:db:f3:d5:59:51:e0:f0:0a:e0:c4:01:91:6f:
                    32:9a:b5:85:cf:e9:53:fc:cd:fe:90:6d:70:bc:6b:
                    95:99:dc:01:a2:61:0f:97:2e:e0:f4:7a:22:74:6b:
                    8b:da:dd:67:7d:2f:87:cc:4b:b9:f5:3e:b6:64:b9:
                    fa:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:D8:E9:62:49:AF:8C:04:F1:4F:32:EA:99:47:1E:CB:EA:61:7E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr7Y6WJJr4wE8U8y6plHHsvqYX4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:21:ed:86:50:1a:2a:ab:d9:43:4a:46:60:09:cc:77:74:bc:
         9c:5a:a2:7a:ee:5b:28:f4:a1:63:17:bd:cf:7c:b4:34:9a:68:
         5e:7f:a3:8b:3e:c5:1f:95:3f:fd:9f:9b:c8:0d:fd:cd:3a:3e:
         32:b7:67:9e:e9:08:66:75:9b:a6:ea:da:40:95:61:3b:6b:19:
         fa:af:6e:f4:ab:e9:6e:db:3b:d8:17:f6:d5:c9:60:75:07:d0:
         6b:51:19:ed:9a:93:a7:b5:60:f8:9e:79:49:85:0b:aa:c6:13:
         b4:e8:b9:13:4c:10:9c:2d:01:2f:56:13:6a:29:8a:79:72:69:
         e2:e4:c2:b6:64:27:22:9a:f2:7e:90:b7:e5:c3:b0:af:e1:d8:
         8e:2d:f5:9f:ed:cf:ed:12:93:20:db:87:2e:25:b0:8d:5a:f7:
         ec:98:4b:43:cd:cc:35:d2:fe:c6:b4:93:42:f3:fa:4e:6b:47:
         e7:96:ec:b1:f9:22:67:52:11:2b:60:eb:4e:a2:f9:0a:bd:9e:
         93:85:85:2a:45:48:e9:ec:83:b8:c4:c1:82:94:35:f3:57:9b:
         f7:5a:40:0a:8e:e7:55:a7:3f:92:1a:e1:db:fd:26:6a:57:d9:
         81:ac:ee:d4:c0:2f:de:8c:9e:6a:e7:dd:aa:4e:14:96:06:5a:
         c2:d4:41:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----