Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8OFAxEY0-ffaoRDmxCql0eHrT4.roa
File:                     e8OFAxEY0-ffaoRDmxCql0eHrT4.roa (raw, json)
Hash identifier:          i1+qjTcimrmcLki1buVVzOXVm2uQNhdn+iHJSVy8pYY=
Subject key identifier:   7B:C3:85:03:11:18:D3:E7:DF:6A:84:43:9B:10:AA:97:47:87:AD:3E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187F131CC64AB1F618BC9D796F9A3C6A08D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8OFAxEY0-ffaoRDmxCql0eHrT4.roa
Signing time:             Sat 06 May 2023 13:13:05 +0000
ROA not before:           Sat 06 May 2023 13:13:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f1:31:cc:64:ab:1f:61:8b:c9:d7:96:f9:a3:c6:a0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  6 13:13:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bc385031118d3e7df6a84439b10aa974787ad3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:42:4b:55:fc:98:87:c1:b4:94:26:44:d6:
                    eb:5b:05:c3:4f:f1:e6:ab:5a:53:d6:26:4f:57:4a:
                    6f:db:10:c2:6a:9e:11:4c:b3:b5:14:8e:62:07:b4:
                    64:2e:74:d0:ba:7e:fc:9e:62:53:59:63:e1:08:dc:
                    4e:2f:20:79:ba:7a:40:c1:96:f2:27:9b:bf:a3:01:
                    21:72:1e:b6:fe:c0:d4:bc:b4:38:9a:59:ac:85:22:
                    53:c9:2c:c2:8a:c2:4b:98:f3:01:0e:9b:05:1d:cc:
                    92:dd:9f:f6:d8:09:dd:b8:f0:b1:7b:3a:72:f4:91:
                    82:0d:1c:1e:be:44:4a:57:b0:76:51:67:ed:27:d6:
                    3f:4e:a4:5f:e4:61:07:98:dd:09:d3:cd:5a:aa:f8:
                    c6:02:eb:5c:0b:fb:d2:5a:b8:cf:7b:84:21:74:ad:
                    94:b9:41:ae:72:a5:8b:2c:4b:16:fc:81:4d:f0:8a:
                    1e:d5:1c:40:1b:0a:c4:e8:7d:43:46:3c:01:46:6f:
                    0d:03:a2:96:40:48:bd:65:92:04:0d:eb:e1:99:cb:
                    94:aa:6e:68:22:6f:1a:d0:b2:11:72:41:6e:34:fb:
                    2d:52:25:4b:47:4f:df:66:e1:1e:43:39:a2:6d:8b:
                    e1:b7:4b:09:be:8c:55:d6:14:f9:db:1f:00:92:48:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:85:03:11:18:D3:E7:DF:6A:84:43:9B:10:AA:97:47:87:AD:3E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8OFAxEY0-ffaoRDmxCql0eHrT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:bf:2c:6a:17:7e:56:10:14:4c:7a:2a:ee:77:01:26:41:9d:
         1d:36:30:10:8e:d0:c3:ae:55:4c:9f:d4:87:5e:41:2c:02:fc:
         fa:81:04:ad:17:7f:e8:5c:7b:b1:11:6b:98:7b:4a:05:80:9c:
         f1:ae:9e:65:85:f8:17:40:10:b9:07:15:54:f7:48:af:05:03:
         b9:ab:c0:0d:c8:c8:70:0d:e7:9a:df:8d:99:84:bf:71:c5:6b:
         9e:0a:62:71:0c:0e:31:b9:50:ab:dc:d5:e2:54:19:bc:fe:77:
         a9:d4:42:fa:09:73:55:94:2d:91:80:bd:02:4d:ea:2d:8e:66:
         30:ab:77:5f:09:78:db:65:a9:4d:19:8b:8e:da:67:4f:8e:c9:
         65:0e:01:fb:a6:41:98:df:7d:76:a2:91:b2:37:f0:99:64:43:
         00:23:ec:d2:b5:9f:34:39:5c:25:13:ac:f8:0a:c6:23:af:db:
         1f:ea:f7:e1:3f:04:2e:b6:44:97:3f:64:e7:1b:e8:22:58:d6:
         ee:1a:2b:d1:eb:9c:4b:af:11:54:c3:4a:07:ba:7a:d2:61:a3:
         e5:10:ff:19:c1:24:f2:ac:87:d4:3a:e4:d8:a4:27:c9:a5:3f:
         06:37:28:1a:d3:56:f3:da:4b:32:06:cd:8f:e1:a4:62:a8:c5:
         d0:cf:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----