Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yY_Ery85MdVDB7CAMlHwhVWSV2w.roa
File:                     yY_Ery85MdVDB7CAMlHwhVWSV2w.roa (raw, json)
Hash identifier:          tKvv7EitVwqCdkvXgo1T/a+OhHl31KT0uCwjRaGF1Pw=
Subject key identifier:   C9:8F:C4:AF:2F:39:31:D5:43:07:B0:80:32:51:F0:85:55:92:57:6C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018866C5E30EF8588C9FB73B5733C7D1B0A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yY_Ery85MdVDB7CAMlHwhVWSV2w.roa
Signing time:             Mon 29 May 2023 09:10:24 +0000
ROA not before:           Mon 29 May 2023 09:10:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:66:c5:e3:0e:f8:58:8c:9f:b7:3b:57:33:c7:d1:b0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 29 09:10:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c98fc4af2f3931d54307b0803251f0855592576c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:95:07:90:7a:43:46:03:12:61:71:ae:82:
                    5a:97:bc:65:f0:00:ce:ff:c0:0a:ca:cf:d6:da:98:
                    12:40:84:db:f9:8e:48:cc:8c:c1:9e:15:69:71:35:
                    34:bf:00:1c:34:73:a9:b4:19:e8:b1:bb:2a:98:fa:
                    3d:7e:c9:bb:a0:dd:1c:00:7b:78:ea:17:a3:3c:55:
                    e5:45:26:93:0f:32:ec:f6:4a:07:3a:58:4b:1a:eb:
                    d9:b3:70:d7:74:91:8e:3f:80:da:aa:51:01:be:d1:
                    1d:dd:be:eb:09:df:ce:c8:b5:71:79:ed:01:07:77:
                    3b:4f:48:09:c9:7a:b5:53:34:c1:c3:f9:8d:e8:1b:
                    91:50:fc:ce:b4:2b:e4:aa:d6:13:94:20:17:50:03:
                    cd:15:3b:bf:26:45:66:20:45:2a:66:65:14:42:0c:
                    99:17:69:26:f9:a3:76:9e:7a:d7:c0:6a:10:a7:fb:
                    ff:ea:b2:d8:19:09:88:e0:32:6a:6b:ec:46:31:c7:
                    aa:78:81:d5:cf:88:bc:20:b8:f5:63:ea:2e:01:7b:
                    81:59:7a:fd:e3:60:64:e9:40:8c:ef:ff:f4:64:0b:
                    f5:c8:41:c3:f8:77:42:cc:d4:df:37:86:5b:44:22:
                    4d:53:7d:65:9f:09:7f:43:ba:bf:8d:a3:0c:bb:9f:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8F:C4:AF:2F:39:31:D5:43:07:B0:80:32:51:F0:85:55:92:57:6C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/yY_Ery85MdVDB7CAMlHwhVWSV2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:a4:f7:b1:35:e7:36:7d:89:29:88:98:c7:fe:39:19:42:
         09:23:9b:99:ca:b2:b2:07:37:f3:f3:6d:63:da:eb:e8:f0:b5:
         13:75:e8:8c:51:13:30:43:2e:af:65:e6:c1:bf:1b:5e:3f:d8:
         74:3c:5d:b9:97:5b:d8:ca:73:d2:d4:f1:69:31:fc:e6:7a:0a:
         5e:61:fd:1a:f9:b3:6b:ba:89:71:ac:6d:75:36:88:85:8e:28:
         75:b9:16:13:5b:17:b6:68:db:e5:1d:b4:74:6d:f1:4f:06:3f:
         1b:1b:67:c6:27:29:f4:11:1e:19:a0:1f:7b:72:a8:09:ed:f7:
         b6:b8:d1:0f:2d:72:e4:ea:b3:8f:4f:9d:52:9e:3e:cf:f9:64:
         5e:ce:6b:89:c4:5a:45:55:e2:a6:58:46:ba:4f:88:64:2f:d1:
         eb:a6:6f:5d:94:60:c8:78:1a:ad:88:1f:a4:d6:78:9b:a1:ee:
         8e:30:60:c2:44:df:d0:ab:5b:60:01:c5:fc:7d:6c:70:89:97:
         77:29:c0:d7:7e:85:f4:6c:a3:59:be:4a:78:86:58:ab:36:fc:
         4b:fd:64:2e:07:c5:6a:ad:ca:6c:2b:6f:ed:7f:b3:0e:d8:ff:
         e8:1d:06:a0:45:52:2a:8f:a7:d0:3b:9e:79:84:a9:c8:57:a3:
         fc:2a:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----