Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cVDt-rkbx5rUolJ6gnotcSTp3K8.roa
File:                     cVDt-rkbx5rUolJ6gnotcSTp3K8.roa (raw, json)
Hash identifier:          /e+NZ1mOBdSYzQ0a+A6NNHgtUfHGLYDCQHqDTRhQf08=
Subject key identifier:   71:50:ED:FA:B9:1B:C7:9A:D4:A2:52:7A:82:7A:2D:71:24:E9:DC:AF
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01895AFA2CA7F07E6F6D9A87FA83E8091351
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cVDt-rkbx5rUolJ6gnotcSTp3K8.roa
Signing time:             Sat 15 Jul 2023 19:14:52 +0000
ROA not before:           Sat 15 Jul 2023 19:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5a:fa:2c:a7:f0:7e:6f:6d:9a:87:fa:83:e8:09:13:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 15 19:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7150edfab91bc79ad4a2527a827a2d7124e9dcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:ed:01:cf:21:5b:39:6a:5d:40:10:8d:01:
                    cd:23:3b:d3:3f:3f:1f:df:42:f4:96:a7:47:de:e2:
                    84:64:3e:bd:17:77:2b:85:98:77:61:18:94:1b:90:
                    e4:fe:19:00:78:6a:58:59:8e:95:40:6d:e4:49:6b:
                    1c:9c:c2:17:8e:79:9b:22:2b:c0:b6:d9:8f:95:19:
                    1b:21:1a:00:ad:fc:cc:c3:fb:21:07:6b:e2:05:a3:
                    e4:db:3f:0e:a5:66:94:7c:d4:c2:3f:fe:03:62:bc:
                    7d:4e:a2:63:d9:6c:ce:aa:60:05:1d:fe:49:51:ec:
                    be:93:53:28:da:86:5b:c5:5c:c0:75:8f:41:00:94:
                    ec:4d:f2:33:02:5c:28:71:a9:54:f9:44:b9:75:aa:
                    fa:cd:1b:e1:51:c4:35:7b:d6:f6:85:bc:9f:9e:28:
                    71:3e:1b:48:5e:07:e9:cc:41:43:4a:da:d5:c8:2c:
                    46:7e:da:2e:e5:c2:65:37:19:54:d9:86:e9:cf:14:
                    d5:be:09:3a:48:c2:81:18:ee:a6:ca:b4:bb:48:04:
                    f9:b5:f7:f7:ec:97:24:8d:4e:dd:2a:7d:5d:ba:94:
                    bf:3a:b2:ca:cf:25:0a:ea:ae:e1:ef:58:cf:58:66:
                    40:47:17:93:03:60:92:e8:42:12:8f:0a:61:f9:32:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:50:ED:FA:B9:1B:C7:9A:D4:A2:52:7A:82:7A:2D:71:24:E9:DC:AF
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cVDt-rkbx5rUolJ6gnotcSTp3K8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:2e:8f:93:3b:13:15:14:1d:c4:5c:26:9e:c5:a1:8e:b7:
         b6:da:74:6a:9b:23:4a:1c:a3:69:77:88:12:a3:a3:9a:d2:5c:
         a7:f4:b1:2a:c3:b9:52:12:b1:82:d0:2e:a1:47:0a:b7:f5:17:
         ba:79:d2:af:5b:c7:15:89:0b:40:78:e0:d5:06:14:39:72:43:
         9d:b9:c9:6a:da:a9:ce:99:e1:26:f9:32:8d:b9:95:27:22:87:
         2f:9b:95:6a:36:31:07:ee:46:63:7a:97:1b:9f:d3:69:af:72:
         f2:76:a1:95:1f:b1:96:96:be:5c:24:73:f5:57:4b:20:c2:ba:
         5e:c8:31:6c:2f:d7:14:a6:25:b3:fb:09:f6:2c:83:9e:6e:88:
         d7:0e:3c:7a:ec:41:c3:b5:72:87:fb:e6:62:6c:c2:9b:6d:f8:
         2e:aa:a1:86:a0:71:5b:9b:1c:1f:d6:de:e4:b8:43:19:53:cd:
         11:09:f5:41:c5:ef:77:83:27:02:93:17:40:3e:f3:f1:9d:86:
         cb:a3:78:5a:6a:10:98:60:cd:60:b5:41:12:2f:8c:1e:6d:76:
         2d:e3:86:82:9a:f5:23:e7:2a:ff:55:bb:b1:70:60:16:0f:3e:
         04:0b:b0:95:e5:dd:6f:c0:81:71:b4:af:36:1d:76:d2:f5:a0:
         d7:b4:ba:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----