Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vXle7dQhQUI6u3ZyckIZcb5SkD0.roa
File:                     vXle7dQhQUI6u3ZyckIZcb5SkD0.roa (raw, json)
Hash identifier:          7MboBDuvmxeigoSi7Zr8/VRu20FKwunOMpvkg8iHp0M=
Subject key identifier:   BD:79:5E:ED:D4:21:41:42:3A:BB:76:72:72:42:19:71:BE:52:90:3D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01873A219E3F329A00E95E53A54FBDC5C562
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vXle7dQhQUI6u3ZyckIZcb5SkD0.roa
Signing time:             Sat 01 Apr 2023 00:04:54 +0000
ROA not before:           Sat 01 Apr 2023 00:04:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:187:3a21:5400/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:3a:21:9e:3f:32:9a:00:e9:5e:53:a5:4f:bd:c5:c5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  1 00:04:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd795eedd42141423abb767272421971be52903d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:dd:95:c4:3a:97:4d:cb:81:bb:87:3d:8c:
                    d2:e7:d8:2f:56:28:05:60:09:d7:c1:5d:a4:5a:fb:
                    4b:b5:dd:b8:09:73:ed:6e:b8:d5:6d:e2:0a:87:92:
                    9a:92:8d:31:2b:f5:f9:d5:1c:f9:bf:80:d1:28:42:
                    46:c6:d8:57:84:81:86:60:d4:51:b8:a1:25:dd:43:
                    e6:c8:58:62:76:a2:38:3c:e9:fc:48:eb:67:bc:c8:
                    d5:23:a8:fc:e7:91:7f:cc:1e:c3:8c:2a:24:1c:6a:
                    c1:f8:27:20:b8:e9:91:db:f2:17:09:f3:3f:83:59:
                    56:78:ee:7e:d2:ad:eb:b5:2a:00:43:ec:0e:76:a6:
                    34:f0:c9:bd:06:2a:c0:c2:21:86:6e:c7:40:00:04:
                    a0:5f:66:67:dc:25:86:62:ca:c3:f1:90:ee:ce:4a:
                    04:01:8d:87:72:3b:29:47:68:6d:6a:3c:47:cc:c2:
                    b9:e0:0b:ba:32:be:aa:f0:92:ce:15:d3:2a:88:39:
                    3a:71:e1:f5:14:82:ed:1f:c3:f6:9e:ae:38:11:c5:
                    34:2b:f0:de:82:b4:d0:b0:45:ed:96:de:ae:1e:c3:
                    ab:4e:83:e2:67:2f:6f:56:63:b9:3c:8b:65:c2:1d:
                    ba:fc:3d:e7:52:70:79:c5:a1:02:62:7c:ba:ed:40:
                    ff:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:79:5E:ED:D4:21:41:42:3A:BB:76:72:72:42:19:71:BE:52:90:3D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vXle7dQhQUI6u3ZyckIZcb5SkD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:37:13:1f:a7:83:c5:1c:a7:21:93:1e:e6:1d:af:8e:d1:45:
         37:90:b1:50:18:a1:7e:4e:0b:9d:d9:e5:6a:36:b5:a9:7c:69:
         b4:01:90:89:fd:ab:2c:14:ad:83:32:bd:26:4e:d4:fe:b5:c2:
         f1:69:f8:70:71:0b:c9:ad:e1:33:a1:27:d1:44:53:7b:47:3d:
         57:ff:46:65:ba:94:e1:c1:d1:ca:65:c3:32:f2:5b:f9:83:02:
         10:e7:ca:4a:83:a0:43:35:c5:77:ac:e7:c8:d3:d9:e5:02:03:
         ad:ba:56:7b:bd:46:b5:a0:5b:bb:93:ea:13:b0:78:11:7b:69:
         89:d0:9d:e3:d0:ca:c5:71:a9:50:0c:9b:2b:df:e1:77:ab:c3:
         39:b3:ba:75:14:1c:14:97:2f:a7:ab:14:50:af:e6:25:55:46:
         b0:57:dd:d9:f9:52:c7:69:9d:b3:83:90:73:b1:30:fc:46:6b:
         c6:bc:79:1a:b4:ab:d6:94:c7:a4:1d:35:9b:fa:8a:bf:e0:df:
         d7:c4:2d:5f:90:f0:ce:12:4a:8c:21:6c:40:2c:2d:d0:79:7d:
         ca:d6:64:b9:b9:48:46:7f:66:1f:63:31:92:bc:cd:47:77:a7:
         23:07:3f:23:6f:55:9e:e0:02:71:98:8f:05:cf:d6:1e:39:ff:
         7c:69:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----