Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRklypF1DyCGbFerwriuJ3Buu40.roa
File:                     dRklypF1DyCGbFerwriuJ3Buu40.roa (raw, json)
Hash identifier:          TwdHh83ZnUz1gw/g/coAaPhjgZDUHw635c1VXS7/OQ8=
Subject key identifier:   75:19:25:CA:91:75:0F:20:86:6C:57:AB:C2:B8:AE:27:70:6E:BB:8D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186AEEB4746330A0A36E3FF6253D1766143
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRklypF1DyCGbFerwriuJ3Buu40.roa
Signing time:             Sat 04 Mar 2023 23:18:20 +0000
ROA not before:           Sat 04 Mar 2023 23:18:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ae:eb:47:46:33:0a:0a:36:e3:ff:62:53:d1:76:61:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  4 23:18:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=751925ca91750f20866c57abc2b8ae27706ebb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:7c:28:5b:20:5c:e2:78:26:db:9d:d2:9e:
                    22:15:8e:1e:ff:7d:6b:1f:f3:dc:2c:a5:81:65:98:
                    ab:ae:89:b9:24:2f:97:2f:4c:92:ca:8d:60:3e:0c:
                    00:45:c7:52:1f:b2:ec:fe:5b:f5:2b:ac:b4:60:4c:
                    0d:56:8c:c1:a0:99:7f:cf:4b:e7:0b:03:f5:17:1f:
                    91:50:72:6e:b7:d9:64:02:40:6e:eb:c4:9d:df:19:
                    f7:a7:d1:75:13:e9:08:63:fb:05:31:25:2e:39:43:
                    c0:1e:07:8f:85:fe:1a:29:1d:33:3c:d5:a2:75:b7:
                    2d:90:3c:2e:a6:37:24:68:d0:98:4b:3d:eb:ab:73:
                    15:8c:52:7b:54:d2:b9:a1:3f:4a:61:c1:0f:ee:9f:
                    7f:af:05:cf:a3:74:7e:cf:62:e9:7b:7b:94:33:84:
                    7b:a5:c1:0b:00:7d:34:29:0a:42:c6:7a:18:ba:27:
                    46:af:e5:76:84:72:67:20:8c:0c:fb:56:aa:f5:9a:
                    9b:34:56:f8:5d:9d:20:2c:0b:4a:c7:81:ad:ee:01:
                    5b:e2:85:89:76:03:4b:8b:ea:aa:87:b9:dc:2d:3c:
                    4c:a7:9d:9b:e5:b7:fc:0c:8a:da:2a:0d:93:d3:82:
                    29:c1:5d:e2:5d:de:f1:17:14:00:56:3f:e6:b9:7a:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:19:25:CA:91:75:0F:20:86:6C:57:AB:C2:B8:AE:27:70:6E:BB:8D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dRklypF1DyCGbFerwriuJ3Buu40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:b2:ae:51:66:58:b0:5d:c8:f8:73:55:13:5d:75:51:e1:
         e0:a4:c2:36:10:ff:63:93:f2:c5:7e:ef:02:2e:33:2d:bb:24:
         7e:d9:3b:b0:e9:a5:fb:1f:1b:a0:f6:9f:93:a0:ec:9d:07:84:
         75:cc:a8:5b:00:60:32:5a:7f:5c:0e:f7:28:6e:2b:11:a2:7c:
         9e:54:6c:ac:01:58:a7:1b:0d:7c:e3:24:b7:db:e8:90:09:2e:
         f1:e5:73:f0:05:47:35:b8:33:3b:07:20:ac:2a:d3:af:5c:cd:
         36:74:81:07:40:85:d4:1a:8a:00:c2:fd:fd:7a:b8:fc:2a:08:
         a8:17:a2:e2:10:01:d3:a7:36:cb:24:a0:36:01:90:a0:0c:36:
         e5:d3:78:37:7c:64:a1:f7:c4:c9:bd:1a:95:89:6a:6c:95:0a:
         28:6f:1d:f9:42:53:47:87:98:27:9e:da:67:94:42:00:8b:57:
         e5:3f:27:0c:fa:71:fe:a5:63:42:56:3c:9e:44:44:d2:e8:76:
         e6:70:e3:c3:af:40:5c:a0:e5:7d:42:d3:3d:19:7c:5c:ec:44:
         b4:16:37:61:17:19:bb:9c:80:3d:02:0b:c2:c9:a6:27:32:05:
         34:22:15:e3:92:68:10:4c:cb:13:6e:f0:e0:f2:e1:a5:51:e4:
         14:7b:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----