Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hEn_WFJE-aPQAUC2-nuG821faI.roa
File:                     1-hEn_WFJE-aPQAUC2-nuG821faI.roa (raw, json)
Hash identifier:          xv6zUYryDJ6iuCAi+kXoEvhMKZb5iCmqVlPy7yEgAV4=
Subject key identifier:   FA:11:27:FD:61:49:13:E6:8F:40:05:02:DB:E9:EE:1B:CD:B5:7D:A2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018769240AB02140FE5480BD2F616184CE55
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hEn_WFJE-aPQAUC2-nuG821faI.roa
Signing time:             Mon 10 Apr 2023 03:09:42 +0000
ROA not before:           Mon 10 Apr 2023 03:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:69:24:0a:b0:21:40:fe:54:80:bd:2f:61:61:84:ce:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 10 03:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa1127fd614913e68f400502dbe9ee1bcdb57da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:5e:af:36:a9:fb:03:5e:08:12:9a:b4:08:
                    36:ba:af:72:91:ce:77:37:0c:20:30:e6:8a:9f:8e:
                    e4:e0:34:28:85:60:e6:dd:0e:f8:f3:57:ad:04:10:
                    fd:23:11:43:9b:8c:ed:d7:d0:de:8d:b3:66:da:c1:
                    15:da:40:80:5e:6a:45:d4:a3:0b:a8:c0:16:c2:c3:
                    9b:f6:bc:fe:da:26:82:0b:24:32:c3:9b:df:e5:cb:
                    f4:b9:7d:33:ff:da:91:a2:db:5f:e4:c9:32:96:fd:
                    99:ce:f5:73:49:5d:96:0b:01:9c:1c:e9:f1:06:34:
                    ed:26:74:c7:b4:88:77:44:61:90:4c:6f:ab:68:8a:
                    5b:0d:20:04:dc:58:61:6b:e2:d1:0e:cb:ae:3d:e9:
                    09:1b:0b:fc:d7:a1:3a:7a:9b:31:2a:38:91:c5:89:
                    e7:06:8c:d4:c8:80:ae:30:47:02:b4:f9:40:45:ba:
                    aa:42:a9:fb:96:4e:d4:dc:d9:96:30:3f:76:09:b5:
                    69:54:13:a2:db:a7:ae:63:ac:89:07:9c:b3:f6:82:
                    75:9c:27:02:3a:87:32:93:a9:38:30:3f:8f:72:f2:
                    a1:cd:45:c5:f1:d5:30:cb:1f:59:48:98:47:75:1e:
                    6d:e1:60:fc:56:37:7d:87:48:14:55:b1:94:58:ce:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:11:27:FD:61:49:13:E6:8F:40:05:02:DB:E9:EE:1B:CD:B5:7D:A2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hEn_WFJE-aPQAUC2-nuG821faI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:7e:4b:6c:e1:1d:d0:f5:b1:ac:bc:3e:2b:d8:60:01:a1:
         a1:39:e3:8a:ef:72:9f:05:e0:03:73:8e:05:0f:5e:23:a5:ba:
         a4:b2:07:4a:3c:a7:7e:92:55:ab:99:b3:79:89:1e:b7:9f:c9:
         2c:04:a0:ec:7f:2f:9e:a2:02:f3:cc:b9:10:33:55:f5:a9:01:
         f5:c2:18:c3:80:85:d9:c2:e7:a8:12:19:38:ad:46:ca:9e:06:
         82:d1:82:a1:1f:04:72:e7:69:f0:98:e5:be:43:86:4e:51:79:
         3e:e5:1e:8c:8c:c6:18:74:40:63:b0:be:e1:2e:fc:81:d3:45:
         51:55:50:55:07:c3:e5:0b:41:66:ad:2c:bb:47:0f:4f:b1:8e:
         f6:54:51:ca:80:85:81:28:66:7f:44:11:0d:1e:71:9c:d5:4a:
         07:00:0d:2f:c4:c9:c9:b4:66:a0:7a:c6:f9:2b:8e:4e:a8:72:
         a8:10:ed:1b:37:2f:5d:62:d1:1f:00:e6:f2:c0:94:5a:cb:be:
         ae:d3:64:c6:76:50:b3:6d:83:0c:3a:b9:94:51:96:52:94:3d:
         84:d6:bd:a4:67:92:39:4a:67:63:f8:e6:00:f5:c5:88:70:9a:
         f8:89:f4:37:6e:1a:c4:78:5f:25:f7:c9:40:fd:1e:85:72:8f:
         56:11:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----