Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sWTriHDeCVajDDgTONBwj3U88Eo.roa
File:                     sWTriHDeCVajDDgTONBwj3U88Eo.roa (raw, json)
Hash identifier:          alGeRJ6nR7IjP7Mg85nJ+xees8OCFYalqYXwS34/hFQ=
Subject key identifier:   B1:64:EB:88:70:DE:09:56:A3:0C:38:13:38:D0:70:8F:75:3C:F0:4A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018935A061A45B8F9D728F5182CC30338D6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sWTriHDeCVajDDgTONBwj3U88Eo.roa
Signing time:             Sat 08 Jul 2023 13:10:50 +0000
ROA not before:           Sat 08 Jul 2023 13:10:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:35:a0:61:a4:5b:8f:9d:72:8f:51:82:cc:30:33:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  8 13:10:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b164eb8870de0956a30c381338d0708f753cf04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6c:97:0e:42:ef:9e:d2:2d:20:06:59:c7:3f:
                    22:ea:e3:61:cf:77:19:15:2c:7f:cd:d0:63:8b:24:
                    8e:7f:85:cd:d1:88:bf:be:a5:df:36:92:01:8a:23:
                    8b:3b:52:fd:67:95:c6:b2:d9:30:70:94:7c:6f:96:
                    be:78:57:3e:16:b2:be:0c:7e:88:32:47:03:d1:be:
                    3a:0d:56:0c:d9:09:b2:b9:d2:af:d5:eb:13:22:83:
                    b0:39:c6:ac:cf:3a:45:61:7e:31:59:91:ed:9e:03:
                    97:4f:ac:91:18:6b:b8:e7:d3:5e:01:5e:20:49:18:
                    23:26:4a:3c:1e:0b:5d:ba:3a:75:4c:34:3b:cb:12:
                    60:21:03:ca:57:dd:b8:93:2d:0b:18:22:1b:67:6e:
                    0a:41:dc:3a:65:d7:74:c8:c6:b0:13:1e:50:60:56:
                    7e:35:c9:4a:76:37:a5:cd:c0:75:1e:b7:e1:8b:16:
                    96:95:06:64:a1:44:65:e7:36:ee:a4:12:bb:b4:f3:
                    ab:82:dc:0e:90:21:30:e5:a5:1d:c3:9d:18:0e:b2:
                    fc:9d:9f:fb:fc:61:92:57:3d:b1:cb:e7:cd:47:59:
                    af:20:60:a8:e8:ff:e3:ad:3e:53:ef:3a:f4:2a:4f:
                    ed:ef:31:32:61:72:9a:d6:95:13:23:6d:00:b7:ae:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:64:EB:88:70:DE:09:56:A3:0C:38:13:38:D0:70:8F:75:3C:F0:4A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sWTriHDeCVajDDgTONBwj3U88Eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:8d:8b:58:5f:d2:09:d0:3f:48:b5:15:96:f4:f1:35:93:bb:
         c2:93:74:bd:18:fd:b6:dd:af:52:8b:59:8d:c9:7c:5c:bd:b8:
         e6:3e:1e:a0:83:13:3e:8e:fb:07:70:9b:ba:5a:4c:e6:97:31:
         a8:5b:8d:a5:bf:17:ef:4e:c1:89:c2:e8:e4:92:b5:6f:c6:5c:
         9e:03:17:75:f4:5d:ae:ad:cf:b1:18:d4:d0:f1:d3:76:1b:7e:
         06:67:09:1b:54:c8:d1:21:3d:33:a4:db:2f:ba:2b:9d:62:db:
         fe:f0:60:2b:44:3d:7d:08:f2:33:55:5f:4c:23:8d:d9:5b:92:
         ae:cd:79:f0:98:27:82:26:5c:9b:9e:43:9d:ca:ea:b2:85:20:
         e0:da:5f:aa:10:ba:b4:09:2d:cb:03:a3:14:a4:0e:e8:e2:e8:
         7a:ea:80:94:e3:7f:a2:59:72:d8:75:d2:27:9f:19:84:c5:8f:
         4f:e4:04:ec:aa:25:8d:2c:31:fb:df:59:f5:78:e4:29:a1:1b:
         54:09:ad:f5:b7:34:73:34:25:8f:66:c8:a9:a7:30:00:2d:7c:
         30:47:35:c5:5c:16:8b:1b:aa:50:49:79:cf:d4:89:3c:3d:0d:
         2f:72:33:37:60:93:9d:08:bb:38:11:02:b5:36:9f:b2:90:19:
         f6:99:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----