Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGkm7UQ14JzG53y-kfVmDjSsJW8.roa
File:                     gGkm7UQ14JzG53y-kfVmDjSsJW8.roa (raw, json)
Hash identifier:          gN8xvDaEugIlseZA40RdSsZxrywUyySRY4qAdceMGbQ=
Subject key identifier:   80:69:26:ED:44:35:E0:9C:C6:E7:7C:BE:91:F5:66:0E:34:AC:25:6F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018776E09194D22F04B0E025A3E79F3C3120
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGkm7UQ14JzG53y-kfVmDjSsJW8.roa
Signing time:             Wed 12 Apr 2023 19:10:41 +0000
ROA not before:           Wed 12 Apr 2023 19:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:76:e0:91:94:d2:2f:04:b0:e0:25:a3:e7:9f:3c:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 12 19:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=806926ed4435e09cc6e77cbe91f5660e34ac256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:b7:7a:3d:8a:c1:b7:3c:2a:46:4d:59:00:
                    77:54:06:ef:f4:0a:c3:19:0a:9a:95:70:b0:6d:31:
                    a3:74:06:57:47:6b:7c:a1:44:88:ff:66:de:de:d9:
                    46:40:fd:94:be:34:69:5a:74:4f:c3:0b:d5:94:da:
                    d7:dd:a8:3a:9c:fb:ee:25:d6:e3:e9:c2:30:d7:5b:
                    9e:04:34:2f:68:e5:32:10:73:67:87:78:14:6f:ac:
                    1c:0e:95:cc:78:cb:41:25:39:f4:76:56:90:50:c9:
                    22:cb:d7:dc:c0:9a:63:3d:6c:81:3c:b3:84:7a:c7:
                    91:da:8c:a6:19:de:27:92:77:74:01:d5:c6:c4:e1:
                    02:09:bb:dc:f9:96:1e:f6:1a:90:91:a9:c6:c0:31:
                    9a:52:0e:f4:a5:73:f1:60:ac:70:3c:64:13:f8:7b:
                    4d:ad:48:f0:5a:cf:97:65:f9:88:19:1e:92:3a:42:
                    80:eb:1f:0c:a7:26:05:6c:74:28:32:21:3a:81:2a:
                    b1:88:90:4c:13:0e:51:d9:54:28:51:17:78:e9:30:
                    65:8e:e0:96:09:33:cd:4c:32:39:a9:e6:21:c6:a5:
                    80:e7:7a:b9:a6:48:02:2d:40:d5:aa:08:89:0a:ab:
                    3e:b8:f1:a1:01:d7:60:f7:05:a1:81:e0:59:bd:78:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:69:26:ED:44:35:E0:9C:C6:E7:7C:BE:91:F5:66:0E:34:AC:25:6F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGkm7UQ14JzG53y-kfVmDjSsJW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:90:8c:b5:cb:4c:8a:af:fe:be:0c:70:17:84:f2:c6:b4:93:
         e4:e9:78:43:fa:91:56:60:a6:b5:37:93:3b:5b:d5:73:69:7d:
         f2:c2:ba:d6:56:15:c0:9c:12:f4:da:84:aa:e4:ff:e2:b7:03:
         ce:f2:68:18:4f:c8:d1:d0:16:5e:de:12:45:13:e8:e9:f2:cb:
         aa:b8:22:f4:5e:c0:9d:78:a0:65:94:ef:28:ca:d8:b4:ab:4b:
         8f:81:f2:7d:4c:ee:69:1b:ad:a0:1e:3a:98:d1:8f:46:23:ef:
         53:2c:6e:22:3a:2a:de:2d:be:ba:f6:30:e2:ce:e3:c1:4e:47:
         5b:42:74:06:fd:c1:c1:0d:23:17:48:22:82:c0:75:f2:44:4c:
         05:8e:63:44:94:c9:10:17:6c:44:9b:bf:77:89:dc:fd:6e:da:
         47:76:be:eb:36:ef:d6:2a:e5:49:14:b0:af:11:b6:fd:4b:41:
         0d:b5:23:50:3c:9d:c2:0a:1e:69:7d:e5:66:6d:6b:c3:43:4b:
         7e:3f:2b:dd:21:71:4a:28:19:03:64:8e:34:32:69:c0:26:68:
         55:71:dd:79:2a:ae:a6:b1:d4:c4:dd:73:b2:30:52:50:b2:3f:
         4a:4b:76:92:dd:a4:c2:67:25:3d:f9:c7:e4:ec:b5:31:80:88:
         88:f4:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----