Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbs1L_qV2EpvCWFRxkAo4nLvQdI.roa
File:                     vbs1L_qV2EpvCWFRxkAo4nLvQdI.roa (raw, json)
Hash identifier:          Wn+v1HmVdMhO8RnNE497eBp0VpO28d9GQlVUHBcaJsk=
Subject key identifier:   BD:BB:35:2F:FA:95:D8:4A:6F:09:61:51:C6:40:28:E2:72:EF:41:D2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188D7DA8BD5D85A9DF3C08D3515528D25D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbs1L_qV2EpvCWFRxkAo4nLvQdI.roa
Signing time:             Tue 20 Jun 2023 08:10:04 +0000
ROA not before:           Tue 20 Jun 2023 08:10:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d7:da:8b:d5:d8:5a:9d:f3:c0:8d:35:15:52:8d:25:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 20 08:10:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdbb352ffa95d84a6f096151c64028e272ef41d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:cb:e1:49:eb:5c:7c:b2:78:87:b5:a6:6f:
                    9c:bf:d3:79:b0:42:d8:3e:a6:2f:d0:e3:c1:81:32:
                    34:fd:ed:0f:28:17:3f:0b:71:06:01:c9:c4:20:bd:
                    89:88:7d:bc:19:4c:8c:2e:ac:b2:6f:ac:87:71:8c:
                    91:16:2d:63:8e:d5:71:69:18:16:8a:10:c0:a8:7c:
                    7d:65:76:38:4a:64:fa:f4:65:9e:be:03:1e:1e:af:
                    2b:39:d0:c7:1b:82:61:d3:25:5f:7a:8e:44:a1:8d:
                    f2:0b:3a:f3:a0:82:46:d6:58:3b:ad:48:85:06:27:
                    72:18:db:11:25:ed:2d:3b:b2:40:ac:3b:bb:18:4e:
                    c0:f4:3c:17:0f:1a:bd:d9:3a:e0:1d:51:8b:99:88:
                    81:4c:76:5a:4c:da:75:b8:23:69:f6:e2:de:db:c1:
                    83:09:8f:6a:ef:1e:02:f5:08:45:e4:fe:40:1c:dd:
                    ba:e4:6a:a1:52:27:e3:11:2e:22:a9:6d:09:2a:8f:
                    d8:1e:42:fc:bd:2e:b0:79:99:26:f5:08:de:48:b8:
                    f6:d5:a8:1d:41:fe:56:e1:a2:d5:7d:7f:8c:76:d5:
                    ae:cc:e4:3e:cf:d5:ba:5d:1a:d7:c6:31:ef:29:24:
                    4a:3c:76:73:45:85:0d:0f:16:29:41:fd:66:f5:a8:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:35:2F:FA:95:D8:4A:6F:09:61:51:C6:40:28:E2:72:EF:41:D2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbs1L_qV2EpvCWFRxkAo4nLvQdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:26:ff:15:a8:09:f9:90:1b:0a:33:4e:dc:8c:4d:e5:cc:6d:
         82:59:1f:ec:3a:bd:e6:9b:e2:3b:95:d4:ec:bd:32:81:c8:74:
         d7:fa:a6:f3:f0:a1:7e:f4:9e:29:10:c4:e7:a8:6a:66:37:77:
         2e:e3:b0:81:80:e9:b1:1f:12:f8:2b:35:63:e7:03:1c:7b:71:
         5e:15:a5:0b:97:45:3b:c6:be:11:ac:25:83:57:37:ec:13:b5:
         5d:49:13:db:f6:15:63:97:4d:7c:77:83:c7:ef:fb:b4:15:34:
         9f:78:2d:fd:1a:75:cf:64:e6:af:2e:85:aa:7f:45:f9:d3:a0:
         04:8f:e2:70:12:50:a0:7b:68:e4:65:b9:27:cd:3b:76:e8:65:
         c7:dd:32:fe:77:64:37:b8:06:09:27:79:39:7a:22:f7:38:0d:
         7f:92:7b:04:d9:92:b0:54:2f:58:df:6b:a9:4c:11:52:1d:29:
         18:c2:15:49:21:c1:c9:76:a6:f8:9a:5f:f4:d7:24:04:55:2d:
         80:7c:9e:d1:28:6a:e2:6d:ab:8e:18:44:e2:0c:cf:dd:4b:de:
         fe:52:40:eb:cf:ac:59:18:fc:a6:02:9a:73:fd:47:95:4b:23:
         95:0a:40:d6:6f:1a:a9:ab:2e:3e:bb:de:d1:4c:43:aa:56:80:
         96:42:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----