Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dA5V5EPtsrBZg0v8rmQxVMp-fU4.roa
File:                     dA5V5EPtsrBZg0v8rmQxVMp-fU4.roa (raw, json)
Hash identifier:          5DgA0dEh45wYpu6h6XuGUb4HaX67cSi6qu9RATEBm88=
Subject key identifier:   74:0E:55:E4:43:ED:B2:B0:59:83:4B:FC:AE:64:31:54:CA:7E:7D:4E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186ECAAE17EB6928DE3D1235E93AE254AA4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dA5V5EPtsrBZg0v8rmQxVMp-fU4.roa
Signing time:             Thu 16 Mar 2023 23:04:27 +0000
ROA not before:           Thu 16 Mar 2023 23:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:ecaa:ceaa/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ec:aa:e1:7e:b6:92:8d:e3:d1:23:5e:93:ae:25:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 16 23:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=740e55e443edb2b059834bfcae643154ca7e7d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:aa:b2:80:00:88:f1:95:07:cc:ed:97:16:
                    1f:68:22:ef:ae:16:5e:eb:b6:1e:fe:6a:d0:1d:e1:
                    f6:35:4a:22:ab:3d:84:02:64:da:7c:04:bc:76:f6:
                    5d:26:2f:e5:be:22:e9:81:76:ed:1a:0f:4f:88:bc:
                    86:5b:37:39:0c:d9:19:8e:87:ea:3e:55:fe:37:cf:
                    6b:5f:79:45:ab:08:64:d2:72:30:f6:5c:a2:df:6d:
                    a7:5b:99:e2:55:63:0b:b6:2d:50:6f:13:1b:79:72:
                    ee:35:c4:f5:d7:17:f4:5a:de:f4:9e:bb:7d:05:42:
                    08:bc:e8:e4:8e:35:19:b7:43:8c:5b:98:8b:c5:91:
                    a9:4f:9c:11:92:71:5a:69:7d:1c:ed:de:b7:71:90:
                    54:03:3f:12:be:1b:5c:33:ab:13:85:c7:fe:a2:ce:
                    70:32:1e:21:9c:67:60:20:fb:7a:b2:53:1a:1c:1a:
                    39:97:73:78:f6:b2:fa:4f:fd:c9:7e:ea:f0:df:a4:
                    ac:ed:1f:5e:34:09:b1:c8:14:e6:80:47:29:5e:ff:
                    29:48:4a:bc:c1:9f:fa:6e:b5:dd:34:f9:13:9c:74:
                    8f:5a:3a:38:af:e9:da:fc:b1:fa:1a:e9:34:ea:d4:
                    74:ff:5a:00:5a:06:0c:c2:0e:dd:42:07:c9:af:52:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:55:E4:43:ED:B2:B0:59:83:4B:FC:AE:64:31:54:CA:7E:7D:4E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dA5V5EPtsrBZg0v8rmQxVMp-fU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:4c:82:e6:57:55:34:00:17:96:92:fb:e8:58:e8:11:15:
         44:4a:37:94:45:2e:7c:d0:d3:c6:92:42:1d:f4:fb:ba:1b:8c:
         19:45:f1:16:f0:6d:06:89:25:0b:94:b6:dd:d0:a9:9e:8e:b3:
         1d:45:42:27:fb:97:09:d7:0c:d4:14:f4:44:99:09:93:a1:8c:
         2c:33:1d:7a:ed:d0:17:ff:b5:db:15:8e:be:d6:1c:2b:a6:97:
         8a:68:3f:56:5f:8f:04:af:76:1a:5e:7d:27:b6:66:2c:28:96:
         2d:95:bf:99:48:9c:26:ca:87:7f:01:77:4e:54:7a:e7:ae:c5:
         e3:fc:af:37:9f:be:01:38:09:1e:e0:84:48:43:1a:55:58:e5:
         00:b9:5f:f0:9f:49:ac:6a:f5:8c:8f:be:9a:b7:2b:1f:16:63:
         1b:97:b5:aa:47:9e:d4:ed:b7:ff:87:b5:3b:25:2e:85:83:7e:
         3a:1c:5a:06:d2:ad:f0:0e:f7:9e:29:8a:ca:e0:28:e0:71:c9:
         6f:30:b0:69:88:04:4e:64:1b:05:f9:4a:98:3b:c0:67:2c:16:
         90:99:9c:15:6e:54:73:45:8b:59:b3:f5:20:bf:8f:fb:40:2e:
         1e:12:61:08:9d:6f:75:06:77:45:04:7c:85:7c:0a:12:63:dc:
         4f:10:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----