Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCcBdAdK-rlGF8AD4kC5i93K-H4.roa
File:                     bCcBdAdK-rlGF8AD4kC5i93K-H4.roa (raw, json)
Hash identifier:          04030eEZeH+6WmU3Fojk3zcnZdOUhWmE+R4wmiquZL0=
Subject key identifier:   6C:27:01:74:07:4A:FA:B9:46:17:C0:03:E2:40:B9:8B:DD:CA:F8:7E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018735038014F3F4D10DE3210DA2E3980150
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCcBdAdK-rlGF8AD4kC5i93K-H4.roa
Signing time:             Fri 31 Mar 2023 00:13:54 +0000
ROA not before:           Fri 31 Mar 2023 00:13:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:35:03:80:14:f3:f4:d1:0d:e3:21:0d:a2:e3:98:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 31 00:13:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6c270174074afab94617c003e240b98bddcaf87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:4f:95:7e:8a:94:31:66:31:5e:2f:0b:3a:
                    d2:50:41:0d:87:a0:29:9a:c5:4e:58:ae:6f:6c:d6:
                    a6:c1:f9:f7:5b:80:dc:d3:21:58:af:5f:00:f4:08:
                    2a:c3:e6:95:9a:e8:7c:c6:c8:fa:96:85:75:c4:bb:
                    c4:a0:96:ee:30:c5:96:5a:bc:a8:56:0e:f5:bf:73:
                    c1:cb:19:3a:6d:7f:b7:38:1e:e1:47:19:10:eb:7d:
                    57:98:cf:9e:be:ba:08:ef:d7:95:a9:8f:d5:16:c5:
                    e3:9f:08:21:23:e3:90:bb:16:82:f2:32:5a:a3:08:
                    e5:66:2c:28:33:8a:49:68:b5:84:7b:a2:c1:a2:a7:
                    9d:22:a4:52:50:55:dd:6a:ee:d0:2c:96:47:5c:d6:
                    74:aa:eb:a7:7d:49:b9:95:40:d2:03:0e:8a:77:f6:
                    cd:44:82:9a:19:c3:f8:5a:09:fc:0c:3f:4d:07:69:
                    29:f6:2f:51:d5:c8:29:2a:06:2a:e3:1f:27:5c:fe:
                    d9:fe:9d:e4:0c:46:29:6a:42:b0:72:a1:28:f5:ce:
                    a8:0f:34:8f:4a:c2:c7:d9:cd:88:9f:cb:9f:19:49:
                    ad:68:5e:e1:14:44:8c:4a:4e:f5:bd:5d:a1:51:f9:
                    3e:da:81:0f:d5:97:2f:4a:4b:c4:0e:db:87:c9:69:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:27:01:74:07:4A:FA:B9:46:17:C0:03:E2:40:B9:8B:DD:CA:F8:7E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bCcBdAdK-rlGF8AD4kC5i93K-H4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:83:60:d7:83:aa:58:a4:08:b2:4f:14:2d:4d:bd:08:0b:7f:
         3a:d1:f8:40:b6:dd:96:57:7c:d3:6f:3a:bd:86:17:00:a1:9e:
         10:e1:3b:99:d4:73:75:ff:33:57:04:f7:26:e5:3a:84:8a:3b:
         68:42:57:a2:b8:96:7b:a3:33:7e:35:b1:32:69:73:62:7c:82:
         47:1d:ad:c2:d9:07:83:0d:9a:72:6c:e4:e4:5a:fb:10:7f:12:
         dd:56:e6:97:fa:1b:d1:d4:46:4a:54:4c:45:68:6c:b5:31:bb:
         33:15:8f:06:7c:64:f7:8c:aa:20:32:ae:74:12:74:9f:5d:2d:
         4e:e4:5e:15:49:f4:3a:ca:46:5d:96:d8:30:64:11:94:ab:ac:
         de:0b:40:2a:4a:c2:3f:a1:da:56:54:76:c2:43:81:6a:70:46:
         a1:54:8b:0f:e2:64:40:ea:0b:fb:83:ea:fa:cb:b3:b9:e2:c5:
         25:3f:54:de:13:16:34:d2:5d:22:ef:4d:a5:e1:e3:df:bf:c9:
         0b:bd:f2:8f:3c:4a:4b:50:f0:17:87:ef:34:75:9e:1c:28:73:
         41:d7:a5:0f:a5:c1:eb:46:16:cd:cb:89:7e:79:80:ba:c0:a9:
         be:69:8e:74:73:2e:13:f3:ea:90:a7:b6:f9:7d:bb:e7:6b:b9:
         ce:19:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----