Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-Z4MuWRMF_yM6GSw8LZpnlLPZY.roa
File:                     t-Z4MuWRMF_yM6GSw8LZpnlLPZY.roa (raw, json)
Hash identifier:          yYQ1Pjcf1yznN/Bmx4M5Uus5eEv/DygsHJ/LuCp+O1Q=
Subject key identifier:   B7:E6:78:32:E5:91:30:5F:F2:33:A1:92:C3:C2:D9:A6:79:4B:3D:96
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018783889EF06C88D35A87EBA744568C2DE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-Z4MuWRMF_yM6GSw8LZpnlLPZY.roa
Signing time:             Sat 15 Apr 2023 06:09:41 +0000
ROA not before:           Sat 15 Apr 2023 06:09:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:83:88:9e:f0:6c:88:d3:5a:87:eb:a7:44:56:8c:2d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 15 06:09:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7e67832e591305ff233a192c3c2d9a6794b3d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:c3:c3:34:1f:b7:10:e9:15:a7:86:65:5d:
                    a9:89:74:eb:4f:bb:02:4f:a2:b2:1c:7d:e1:ef:36:
                    ae:0c:8b:dc:b8:46:50:fa:c4:10:11:07:a0:e2:c6:
                    ce:7d:c7:25:5f:cc:82:93:6c:3c:d9:38:37:9d:f7:
                    d0:83:0a:29:f0:b7:74:fb:62:ab:23:d6:3b:c3:9f:
                    fa:71:57:a3:df:ce:f6:bd:84:fe:ef:d6:d4:5f:e8:
                    1d:91:fb:00:a9:1a:56:f3:a0:31:a6:ae:e7:4e:04:
                    c8:fa:56:f2:57:ac:af:8c:68:63:4e:75:04:52:1b:
                    e8:66:82:fe:7a:55:be:56:65:ae:99:06:15:21:b1:
                    55:f3:5f:bc:b0:c4:dc:33:1e:42:92:d7:e2:29:68:
                    a6:f9:12:40:a6:fa:4b:05:70:02:35:5a:a8:be:b2:
                    20:57:ee:54:e5:55:de:2a:19:a5:f2:d1:09:84:70:
                    c3:5a:8a:40:2f:1f:0b:81:15:61:49:27:39:6a:34:
                    a0:4a:23:65:0a:e9:50:a4:fb:b9:2e:15:c8:55:30:
                    42:a2:28:f6:0f:b6:fe:e1:00:63:79:fe:b5:26:d9:
                    67:59:a1:ad:95:1b:e5:2e:ca:a2:cf:0b:4a:32:e1:
                    a3:38:02:de:e9:e5:a4:07:23:16:22:34:3d:4a:a7:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E6:78:32:E5:91:30:5F:F2:33:A1:92:C3:C2:D9:A6:79:4B:3D:96
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-Z4MuWRMF_yM6GSw8LZpnlLPZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:ff:7b:df:39:93:49:8c:69:9f:f1:b8:09:20:5d:37:92:
         1f:1c:49:6d:cc:3d:09:4b:63:e8:9c:0d:a9:27:9c:a9:37:bf:
         73:63:23:4a:82:3a:91:d2:65:e7:30:aa:d4:15:3c:bc:94:86:
         e7:23:cc:99:db:e4:b4:f0:41:56:4c:b4:19:6e:86:5b:65:42:
         2b:70:7a:70:cf:1c:e4:3b:1a:9b:a9:b2:36:0c:49:e7:18:3a:
         24:37:17:81:b0:4d:f3:7c:d1:ef:f3:4c:5d:d7:a5:25:0e:ee:
         62:12:bc:6a:a7:b0:90:d2:54:d4:0d:f2:0a:65:c0:f8:9f:5d:
         6e:b8:d3:ed:d2:a8:14:a4:44:72:55:f4:c8:e1:43:ed:94:68:
         92:7c:e5:a0:06:c6:44:1b:0f:b3:7a:b3:40:61:37:c9:e5:53:
         9d:e6:6f:d4:49:60:5f:8e:b0:4d:66:b9:23:30:97:5e:1e:bf:
         55:f5:ab:e9:db:7a:9e:68:98:50:f0:87:96:9e:01:24:a9:4c:
         ec:ef:85:00:a2:32:e9:43:1e:7e:3f:ef:39:3c:f1:bf:a0:ec:
         5a:68:93:58:d1:33:b5:9d:fc:96:83:36:17:e1:38:a9:c6:a8:
         51:e9:4c:bc:3e:cd:12:e6:81:fc:5c:68:69:66:2b:55:87:d3:
         b9:94:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----