Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W0mtbPVuhOpx3uHMGxH6hfChYFM.roa
File:                     W0mtbPVuhOpx3uHMGxH6hfChYFM.roa (raw, json)
Hash identifier:          g6dfi3eGW2oA+akH4l2Nj2aGfdLnmmUqHiUsb+4H/xw=
Subject key identifier:   5B:49:AD:6C:F5:6E:84:EA:71:DE:E1:CC:1B:11:FA:85:F0:A1:60:53
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018842B874900D9D2C00FBBDE8C335F68F9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W0mtbPVuhOpx3uHMGxH6hfChYFM.roa
Signing time:             Mon 22 May 2023 09:09:24 +0000
ROA not before:           Mon 22 May 2023 09:09:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:42:b8:74:90:0d:9d:2c:00:fb:bd:e8:c3:35:f6:8f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 22 09:09:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b49ad6cf56e84ea71dee1cc1b11fa85f0a16053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2a:65:70:48:6e:79:16:eb:e3:01:0d:40:ab:
                    be:1f:b8:f8:1e:e3:4e:4d:b1:83:d3:88:aa:ab:8c:
                    74:bf:c2:32:71:f2:9a:42:e4:fe:c4:69:7c:f1:c8:
                    9b:a8:4a:eb:41:68:d1:05:57:96:ab:4b:4c:c0:8e:
                    34:bc:46:be:3e:e4:c0:fa:1f:a1:40:49:e5:70:53:
                    52:87:7d:14:33:71:45:78:1a:ad:92:59:b9:82:16:
                    fd:ba:08:89:91:98:31:fa:6d:66:1a:bc:4e:c8:6f:
                    68:ed:65:0d:6b:4e:52:e2:6e:76:b7:8e:17:b8:fb:
                    f6:aa:15:59:6d:30:ec:c1:65:a6:7f:75:da:13:1c:
                    5e:33:75:0a:1d:2b:c6:45:f6:b8:2d:94:7a:24:56:
                    df:b1:49:56:b5:fb:54:e6:e7:35:36:02:e7:75:51:
                    79:22:7b:36:5b:cb:0e:3d:81:d9:59:6a:d1:7b:4a:
                    42:a4:fb:9e:4f:90:7d:f0:3e:d8:d5:ea:61:e1:2f:
                    15:77:b2:2e:08:bb:0e:b2:68:49:46:36:7c:75:f1:
                    64:9c:1b:8f:cb:3c:27:c3:e2:2a:14:bc:83:93:dd:
                    68:28:d1:20:8e:ef:17:34:c6:ef:8d:06:a7:cd:5a:
                    21:23:b9:62:7d:a2:79:7d:69:0d:51:d8:fe:65:a1:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:AD:6C:F5:6E:84:EA:71:DE:E1:CC:1B:11:FA:85:F0:A1:60:53
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/W0mtbPVuhOpx3uHMGxH6hfChYFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:bd:c5:5b:27:fb:d5:3e:76:80:67:f0:e1:f3:a5:1c:86:56:
         1f:6f:ca:f2:25:07:f1:02:1f:cd:90:35:59:d2:59:2c:7e:bf:
         82:20:0e:1f:df:70:03:41:87:ba:b5:8b:9c:6d:d2:dc:54:6f:
         0f:09:0a:0d:ff:40:2e:0c:ca:b3:27:72:12:04:fc:44:e6:8f:
         c2:c5:66:5e:4b:0a:4a:b3:99:9a:93:3a:8e:95:c3:42:60:a6:
         14:6c:8c:bc:30:96:55:5f:b2:51:d4:50:f8:7e:67:7d:f0:b4:
         19:64:f1:0c:b5:76:8b:41:c2:0f:2e:a0:fd:84:cd:d2:1d:48:
         6c:35:26:a1:75:62:ff:c0:cb:ee:08:3c:50:b7:28:0b:bc:c1:
         e7:71:c0:71:20:2b:62:6a:a7:3b:f2:fb:c9:21:61:a3:03:17:
         e4:ce:95:91:7d:6c:a1:e6:c6:98:0e:a6:1b:e5:e1:3c:05:8e:
         9c:f9:25:66:f8:90:53:6e:3c:92:01:a5:e1:ac:73:f8:20:df:
         fa:38:92:4a:9d:48:4c:47:6b:2d:29:eb:6e:a0:08:35:3e:4c:
         49:1b:b2:4f:a0:11:63:9d:0d:1d:f8:03:c0:2a:cd:b4:68:ab:
         eb:fb:8d:76:52:ba:e6:93:5a:aa:84:4b:f1:9f:9f:ab:b9:d9:
         82:64:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----