Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7dqRdKCem5IMuUgLH3JUGohE2k.roa
File:                     o7dqRdKCem5IMuUgLH3JUGohE2k.roa (raw, json)
Hash identifier:          jfpVKzh+NG7HGVXquiSZZZteVRlofRJnqEeVIiOYpo4=
Subject key identifier:   A3:B7:6A:45:D2:82:7A:6E:48:32:E5:20:2C:7D:C9:50:6A:21:13:69
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187318BF835833307B9C5FDDF124A8732A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7dqRdKCem5IMuUgLH3JUGohE2k.roa
Signing time:             Thu 30 Mar 2023 08:04:29 +0000
ROA not before:           Thu 30 Mar 2023 08:04:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:187:318b:9e08/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:31:8b:f8:35:83:33:07:b9:c5:fd:df:12:4a:87:32:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 30 08:04:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a3b76a45d2827a6e4832e5202c7dc9506a211369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:d3:59:d6:a7:69:fd:f7:e2:5b:db:ff:50:
                    96:73:41:f9:60:da:64:5c:96:00:3a:5e:ad:dd:b2:
                    2e:a8:5d:bb:b6:fd:f7:be:3d:ba:4d:07:75:6c:92:
                    c9:ec:cf:b9:a7:33:db:a7:8a:7a:9c:57:28:7d:a4:
                    0c:14:57:5c:c9:08:d3:83:e5:3f:e3:16:91:09:c3:
                    83:ce:38:64:a6:60:ce:b9:e5:fd:a1:86:7e:e8:56:
                    bc:bc:43:26:ec:1c:98:92:c5:ed:f1:3b:30:f6:e9:
                    2d:a2:3d:af:b9:48:64:8a:e6:67:8a:b8:c5:c2:00:
                    3d:83:43:49:5c:bb:88:0f:2b:11:15:6e:d3:70:e0:
                    de:1c:7e:f4:1e:dc:74:14:19:b5:28:c5:fc:dd:2a:
                    77:13:5c:99:da:77:53:d1:51:b1:07:ad:19:fe:1c:
                    ef:49:e0:a9:89:0e:e5:be:6b:64:2d:78:a4:4b:77:
                    61:3a:51:3a:09:63:29:b1:37:86:b9:1b:0c:bb:da:
                    71:e5:99:ee:f7:3f:4a:08:07:39:85:07:30:24:5e:
                    39:e6:bb:e2:83:a5:9a:10:c3:32:1c:83:f3:e2:eb:
                    cf:fc:ce:97:91:d6:e4:e0:2f:d8:e7:42:37:8e:66:
                    da:7d:f1:7a:8f:22:85:ae:01:60:21:ed:7a:d7:01:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B7:6A:45:D2:82:7A:6E:48:32:E5:20:2C:7D:C9:50:6A:21:13:69
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o7dqRdKCem5IMuUgLH3JUGohE2k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:10:2a:11:09:54:ba:c5:e5:01:d8:41:c4:4c:0d:04:48:e0:
         7d:17:d8:ab:9c:b5:02:87:db:67:24:a6:db:28:82:eb:d2:0e:
         50:28:b1:d7:e7:8d:60:76:a0:9a:d1:94:3a:ba:5f:6b:93:cc:
         04:8c:68:fe:9f:c4:91:00:e8:1d:91:b9:97:fb:92:90:c1:d8:
         ce:1d:a7:d0:b5:8d:0a:56:65:cc:c6:f2:94:80:c6:44:85:47:
         b7:b4:85:a4:eb:1a:47:a0:f8:8a:03:7d:d6:dd:4e:dc:7c:91:
         16:84:0f:31:6d:36:84:b8:15:95:78:27:99:5c:40:17:07:c3:
         e7:26:14:a4:ad:f4:60:42:be:b5:ec:f2:fb:4d:f2:b2:af:d5:
         ea:c8:f4:b4:9a:d6:30:f5:10:09:e3:3c:dc:1f:8e:52:35:50:
         34:40:ea:f2:31:44:b4:ff:71:59:69:db:a6:37:9b:0e:cd:7c:
         0d:c6:3c:59:d7:e0:73:f7:ca:71:00:47:93:04:f9:35:ab:b1:
         29:5d:65:45:65:90:be:38:71:85:46:e3:8d:ad:67:f5:0e:e2:
         38:25:4e:07:9b:99:a1:02:83:57:73:99:8b:b1:1d:eb:6e:2f:
         6c:c1:cc:87:b9:6d:fa:e2:da:8b:83:89:fa:4d:b6:13:b2:56:
         08:b7:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----