Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0OPpoomqmF0tt5lz8JLHTKXknQ.roa
File:                     q0OPpoomqmF0tt5lz8JLHTKXknQ.roa (raw, json)
Hash identifier:          JwRjzDa3rx0ifz6vaXWULCi4wpHtXNPKDLf5t175onk=
Subject key identifier:   AB:43:8F:A6:8A:26:AA:61:74:B6:DE:65:CF:C2:4B:1D:32:97:92:74
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187A1C73C8646FF686834E8BAE41D9DC0E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0OPpoomqmF0tt5lz8JLHTKXknQ.roa
Signing time:             Fri 21 Apr 2023 03:06:41 +0000
ROA not before:           Fri 21 Apr 2023 03:06:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:187:a1c6:7791/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:c7:3c:86:46:ff:68:68:34:e8:ba:e4:1d:9d:c0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 21 03:06:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab438fa68a26aa6174b6de65cfc24b1d32979274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:4f:4a:d8:65:35:67:b7:0c:83:61:d5:f8:
                    35:d4:f3:e5:97:05:9d:56:b7:de:cf:e9:4e:c1:89:
                    1f:ef:73:35:e6:21:45:83:87:01:89:03:6a:94:a8:
                    bc:75:6a:10:4c:f6:73:0a:4a:eb:a5:72:7c:e6:e2:
                    2a:04:c1:4b:2d:71:30:31:c7:fa:81:05:3e:4d:e7:
                    f3:58:b4:36:dd:67:d4:b8:b0:35:74:21:68:c5:1e:
                    11:e1:99:34:e4:10:ad:e0:c6:b4:43:55:78:47:31:
                    73:36:14:a8:4c:49:a2:aa:0b:c8:07:19:88:a3:17:
                    4c:88:e3:e3:74:af:e9:d8:84:7b:ff:34:5b:f7:9d:
                    7b:00:df:8c:e2:49:f7:79:8a:e4:cd:57:9a:fb:6d:
                    99:b2:8e:99:2c:09:64:08:ec:64:bc:5f:a9:ea:4a:
                    a8:5c:10:5b:10:54:73:05:24:59:77:c9:9c:0d:4a:
                    1f:15:e5:9e:12:72:e9:34:9e:f8:61:fe:c7:f1:06:
                    9b:34:ea:d8:b2:ef:2b:3d:2f:47:ee:1d:b7:fe:ad:
                    e1:c9:8d:e4:d2:5e:32:bf:66:29:94:09:e6:a2:6c:
                    36:55:01:09:ca:9f:2b:e0:cd:9b:b6:82:d6:2d:b0:
                    05:92:b9:d0:af:0d:cd:86:14:c0:63:f7:54:ee:a3:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:8F:A6:8A:26:AA:61:74:B6:DE:65:CF:C2:4B:1D:32:97:92:74
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q0OPpoomqmF0tt5lz8JLHTKXknQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:bc:1d:f4:d1:b4:f3:ed:7a:7e:e2:4a:75:3d:ab:18:8b:
         60:11:41:77:66:c2:ca:50:db:9e:93:d3:53:e8:f1:1c:ab:ce:
         22:e4:82:e6:e4:9e:a9:76:97:23:ac:5b:db:00:1d:5d:97:f9:
         fc:b0:b8:b6:e1:be:c9:71:aa:6d:45:e4:8e:52:b3:eb:e9:11:
         7d:22:a3:e6:ff:c9:9c:5a:d1:b1:cf:a3:67:18:5b:77:32:ca:
         49:fc:d9:a5:c0:b1:c9:66:c7:71:65:65:f7:db:c2:d1:b8:cd:
         e7:b8:8b:93:6d:db:27:05:dc:61:83:36:ee:d1:6f:13:99:8e:
         b3:4b:8b:84:cb:bd:c2:e3:2b:f2:7e:c5:81:7b:6d:58:79:00:
         0a:51:84:ab:a4:e9:86:e6:b5:93:2a:08:e2:fb:ac:4b:e6:15:
         5d:96:50:62:24:50:db:ec:65:b9:3b:15:c0:c1:44:e7:e5:c3:
         0c:7b:11:c0:4f:cb:16:df:ba:f1:24:43:c6:e2:e9:2a:a2:f3:
         bd:7f:e6:09:59:0c:28:4a:65:3a:4e:a7:4e:84:8a:86:b4:71:
         7e:6c:5e:59:1b:2d:5b:bf:61:12:f4:43:6f:97:e0:f1:f5:ed:
         3a:4a:32:77:4b:ea:33:c4:78:d5:72:d4:cd:c5:a5:83:10:09:
         08:d1:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----