Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orm_LS-uJby_tVGiWGSv9w0ZbjA.roa
File:                     orm_LS-uJby_tVGiWGSv9w0ZbjA.roa (raw, json)
Hash identifier:          3MBNNFKrgdppfCCCvWZ91kzlxxwp7V5YndIofh/wQi4=
Subject key identifier:   A2:B9:BF:2D:2F:AE:25:BC:BF:B5:51:A2:58:64:AF:F7:0D:19:6E:30
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189386E26F7AB7816A0BC3FCADD8DFBD26B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orm_LS-uJby_tVGiWGSv9w0ZbjA.roa
Signing time:             Sun 09 Jul 2023 02:14:50 +0000
ROA not before:           Sun 09 Jul 2023 02:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:38:6e:26:f7:ab:78:16:a0:bc:3f:ca:dd:8d:fb:d2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  9 02:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2b9bf2d2fae25bcbfb551a25864aff70d196e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:d6:c8:d0:8f:44:7c:dc:a6:7e:a2:dc:1f:
                    36:ee:2f:13:70:b7:85:c7:18:dd:59:76:b1:15:07:
                    1d:4d:95:51:0d:c1:d0:2f:1f:a6:19:05:82:0a:b5:
                    16:ea:b1:cd:7a:a9:50:bf:17:f8:7c:ba:22:dd:68:
                    f3:d7:6a:d2:f6:c4:7a:e6:ea:e7:99:0d:0e:d6:1b:
                    e4:ca:f9:cc:fc:b3:95:8f:60:f5:6a:6d:20:f3:6d:
                    9a:10:cc:86:e9:e7:79:8b:e2:f0:11:2c:97:c5:d2:
                    0c:bd:52:58:87:bc:1e:e3:f8:f8:13:2b:48:a8:0c:
                    6f:21:2b:48:a8:7d:c1:ce:86:8e:de:30:6f:ec:f1:
                    ed:ed:12:47:de:9d:e7:b5:4c:da:6d:e3:d3:6d:94:
                    35:4b:d5:fd:57:94:d5:95:a2:a3:41:09:fd:9f:82:
                    bf:f8:a1:25:50:83:6d:89:38:06:cb:d9:9c:a9:5b:
                    40:92:84:66:6d:20:fa:b6:71:22:04:7a:04:99:47:
                    78:98:79:07:b5:a5:9b:c7:dd:89:ed:65:0c:86:d0:
                    22:cf:43:1a:f0:09:60:4f:52:f4:29:1b:d9:f3:cc:
                    2f:aa:ab:4d:c7:d7:67:28:03:51:34:f0:41:54:d8:
                    bb:35:dc:59:24:e8:0e:9a:0f:7b:3f:38:e5:8a:99:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B9:BF:2D:2F:AE:25:BC:BF:B5:51:A2:58:64:AF:F7:0D:19:6E:30
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/orm_LS-uJby_tVGiWGSv9w0ZbjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:95:0c:65:5e:64:ad:0c:f2:9b:4e:cc:12:f1:0f:a6:9a:1f:
         7e:72:10:24:2a:12:02:b9:3f:de:41:1f:29:ca:4a:8e:15:a7:
         f5:cd:05:6f:8c:18:cb:20:5e:99:d6:19:b2:aa:8a:8d:66:97:
         35:2b:d8:5e:77:83:54:73:07:07:63:ad:61:29:ca:b5:b4:1a:
         d1:e2:3d:c8:43:16:ad:d2:04:0b:ad:74:a8:e8:53:4c:e1:76:
         e7:ac:b2:4c:8f:8c:fb:c3:90:7c:dd:29:58:3e:5c:ca:76:2d:
         36:89:ca:e0:2a:26:d8:f1:0e:39:92:9a:c8:75:84:1f:b2:74:
         0b:21:de:46:ca:01:58:c5:43:37:39:07:2a:59:a2:e1:d9:81:
         9f:72:82:c4:39:5f:07:1e:d8:97:2c:90:9b:2d:7b:18:6b:43:
         41:a7:3a:2d:49:a5:6e:d9:fb:67:fb:ba:9c:b8:93:e4:f8:df:
         81:1d:0a:fb:f2:c1:17:8d:49:5d:e1:a0:88:e2:8d:9a:31:29:
         b4:4b:98:ea:f3:33:47:a4:19:af:d9:56:6d:cb:3d:7c:f0:b7:
         3a:02:9a:4f:d1:4a:7a:d5:87:1a:94:1c:d5:5d:ad:36:ba:81:
         66:31:a1:c5:ca:cc:cb:91:14:f1:f0:21:2a:44:de:b7:ae:c3:
         90:77:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----