Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XxOmzzZUYIBZSuI4594j4GZSADk.roa
File:                     XxOmzzZUYIBZSuI4594j4GZSADk.roa (raw, json)
Hash identifier:          8YCWLRT7L/p2ICg3AcrM+VBgMNG92lBc17S+lVgbcfw=
Subject key identifier:   5F:13:A6:CF:36:54:60:80:59:4A:E2:38:E7:DE:23:E0:66:52:00:39
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018791E47774908C473F0927CAA9B78CEB33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XxOmzzZUYIBZSuI4594j4GZSADk.roa
Signing time:             Tue 18 Apr 2023 01:04:41 +0000
ROA not before:           Tue 18 Apr 2023 01:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:187:91e4:4ad5/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:91:e4:77:74:90:8c:47:3f:09:27:ca:a9:b7:8c:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 18 01:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5f13a6cf36546080594ae238e7de23e066520039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:0b:8f:fb:f2:cd:62:30:d8:eb:2f:25:a0:
                    42:fd:21:b6:2e:17:0e:f0:14:b2:f9:c1:ae:b5:0c:
                    e6:8f:bc:28:a0:80:fb:1b:cb:df:09:fb:b6:7e:02:
                    ac:c4:26:3b:fa:66:f1:b1:ca:7b:a1:0a:c3:59:88:
                    f7:d7:99:2d:c7:40:66:6b:81:d3:90:78:6d:50:3c:
                    e5:30:eb:0d:1c:22:0e:d7:eb:d6:64:b2:6b:bf:4c:
                    17:6c:e2:a7:f2:90:44:73:4a:9c:aa:fe:59:9d:61:
                    e8:58:58:18:7e:19:2c:f6:ab:a8:8f:99:35:5a:f6:
                    5c:97:9a:30:ce:3f:22:7b:d9:69:b0:bb:8a:28:a6:
                    d1:a2:1a:d6:ac:7a:8b:01:c9:d4:19:fa:0f:96:1d:
                    44:ac:06:93:fe:3d:5b:b7:be:6e:51:1e:03:5b:48:
                    e3:4e:99:7c:49:1c:ef:d9:1b:f9:1c:34:b2:02:9b:
                    80:80:bd:65:49:f8:b6:d8:26:80:6e:48:ee:73:9e:
                    55:d6:66:9e:e0:59:cd:b8:c9:10:d3:b7:0e:bb:26:
                    1a:76:c0:08:3c:ba:63:d8:3f:33:5d:3a:23:6c:63:
                    33:56:44:af:fd:aa:8b:81:2d:28:98:23:1b:22:34:
                    7a:ff:9b:32:86:83:3e:d7:f3:71:f3:0d:5d:5a:6c:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:13:A6:CF:36:54:60:80:59:4A:E2:38:E7:DE:23:E0:66:52:00:39
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/XxOmzzZUYIBZSuI4594j4GZSADk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:88:0d:6a:b8:dd:9e:26:98:5c:ac:be:7e:7f:82:f5:2d:
         0f:d2:f8:c4:f5:b9:88:93:40:c2:b9:35:0a:71:55:c9:83:8c:
         ed:16:78:34:46:cc:ca:40:fb:1b:4e:59:c4:09:74:82:fb:6f:
         c2:9a:0d:21:87:4e:6a:56:f5:94:ba:4c:b8:0b:f0:c1:bc:f7:
         9a:81:62:d8:9c:e8:16:14:9d:28:1e:79:00:41:9d:8b:2d:9c:
         81:1f:c3:fa:25:0e:83:e4:05:1b:8f:ac:a9:23:e7:e5:d2:1a:
         b3:5c:09:85:1d:c0:6b:52:8f:dd:ad:2a:d2:2d:32:d7:e4:c4:
         39:64:ce:d4:36:82:67:36:c4:5b:60:2b:fc:14:b3:98:5f:74:
         43:50:0d:b8:cf:c3:b8:58:cb:b7:61:02:56:3e:63:f9:ae:79:
         c9:d1:65:4e:4c:8e:0b:27:c9:0e:40:71:ee:ff:48:44:00:82:
         3d:b2:a5:e2:f8:07:8b:ab:99:5a:df:64:b6:da:7b:09:98:dc:
         91:f3:43:d4:a0:ca:38:1e:c9:2b:47:0c:7a:3a:ff:fb:23:86:
         ff:e6:b1:b3:83:b9:40:a7:fc:e3:3d:3b:7e:97:79:3a:ff:ca:
         49:fc:ea:17:a7:7d:af:61:44:fd:60:24:5d:e5:d0:7f:e7:3b:
         ec:b3:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----