Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si8kL-Wjd-IpfApeyrf5Oh9A85g.roa
File:                     si8kL-Wjd-IpfApeyrf5Oh9A85g.roa (raw, json)
Hash identifier:          zFrchWlQFj5moESfX+0SAPQsHJ4qWezpBlKN0HlUJbM=
Subject key identifier:   B2:2F:24:2F:E5:A3:77:E2:29:7C:0A:5E:CA:B7:F9:3A:1F:40:F3:98
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01878729E23BF9CA2966108EE8411ECA04D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si8kL-Wjd-IpfApeyrf5Oh9A85g.roa
Signing time:             Sat 15 Apr 2023 23:04:41 +0000
ROA not before:           Sat 15 Apr 2023 23:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:8729:757c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:87:29:e2:3b:f9:ca:29:66:10:8e:e8:41:1e:ca:04:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 15 23:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b22f242fe5a377e2297c0a5ecab7f93a1f40f398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:5c:78:c4:8d:c8:3c:27:66:7a:b3:84:d2:
                    90:39:19:46:17:d9:46:86:dd:40:00:87:8e:b5:5b:
                    14:ca:e6:d8:7a:bc:be:17:8c:cc:b2:9a:4f:05:42:
                    79:a7:0f:44:18:3c:1b:e0:43:38:93:b9:b1:98:89:
                    60:9e:ca:67:df:54:b8:7c:f8:f2:e2:91:75:23:fd:
                    d3:8c:84:a7:80:29:05:9b:c3:e9:09:fe:b9:cd:8b:
                    9f:2d:b6:c3:09:ea:b3:e1:4a:7c:5a:fb:f8:a1:49:
                    3c:c0:9c:58:7b:64:95:0a:6f:a5:f1:18:3d:92:06:
                    29:74:64:d4:46:51:82:94:fc:0c:11:22:57:cb:ae:
                    82:3f:69:c3:a3:35:2e:a2:61:6c:5e:6e:6f:53:27:
                    44:3a:3b:40:a4:9d:83:f7:18:0e:e6:79:90:7b:ef:
                    ba:38:46:fb:99:88:a4:84:4e:c3:2c:58:65:39:45:
                    89:1f:71:4d:78:90:cc:75:0d:a1:2b:0c:9e:45:aa:
                    fe:b8:07:f9:20:80:2a:6e:a8:06:ed:53:94:58:66:
                    a3:56:38:18:19:b1:1c:1c:75:27:2f:9c:2d:08:8d:
                    d3:82:3d:76:79:2b:67:44:06:ae:35:cb:be:dd:39:
                    86:7c:09:c3:be:de:99:8d:b4:3b:3c:e7:48:1f:fe:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2F:24:2F:E5:A3:77:E2:29:7C:0A:5E:CA:B7:F9:3A:1F:40:F3:98
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/si8kL-Wjd-IpfApeyrf5Oh9A85g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:a0:34:b9:fe:78:63:e6:c1:e2:c2:3a:c4:22:7e:7a:db:
         86:7f:48:e7:87:52:bb:64:07:ea:6b:ec:dd:23:dc:88:de:f4:
         e4:81:aa:e1:05:3e:dc:d5:50:e5:1b:06:c7:80:6d:82:95:71:
         db:d0:b1:3e:ed:25:24:45:fa:79:87:23:b5:8a:6c:ec:da:95:
         77:8c:b5:13:59:86:fd:87:f4:8d:5d:58:12:43:0d:88:5c:9c:
         0e:02:0c:b0:52:59:c6:2f:11:73:f3:a8:b7:d1:47:d3:cb:55:
         b9:ae:cb:5a:d3:e8:9b:09:56:94:9b:a9:ea:13:e1:e2:b1:ff:
         dd:5f:03:f1:2c:3d:b7:4e:fe:b6:11:9d:66:c2:47:72:e2:c4:
         c4:60:de:f7:4e:d2:90:94:75:55:8d:8a:2c:e8:c6:84:56:2b:
         42:d4:7a:48:a2:c8:4c:d0:c7:06:d6:20:b1:f1:54:6d:5d:78:
         ce:2a:6d:e1:59:d4:8d:81:3b:45:6c:35:ea:79:63:1e:8d:e5:
         92:7c:f8:a1:a4:1e:04:8c:44:c5:e1:63:82:0a:23:7d:1c:84:
         27:6e:c6:e7:bb:c1:3f:6e:5d:b2:04:f1:a7:85:58:31:e1:0f:
         1e:68:18:17:15:d2:4c:55:af:e1:27:3c:9e:b8:9e:77:ea:b2:
         29:c0:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----