Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fpuoz32IeXOxNyIG6eTPiraKTE.roa
File:                     5fpuoz32IeXOxNyIG6eTPiraKTE.roa (raw, json)
Hash identifier:          5eoWql1NNL6+oRAOiy6pkFKyUvw2j8JxJLtTA7PJevM=
Subject key identifier:   E5:FA:6E:A3:3D:F6:21:E5:CE:C4:DC:88:1B:A7:93:3E:2A:DA:29:31
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188AF858CD23EE7CD8665214D9972D0E2C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fpuoz32IeXOxNyIG6eTPiraKTE.roa
Signing time:             Mon 12 Jun 2023 12:12:25 +0000
ROA not before:           Mon 12 Jun 2023 12:12:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:af:85:8c:d2:3e:e7:cd:86:65:21:4d:99:72:d0:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 12 12:12:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5fa6ea33df621e5cec4dc881ba7933e2ada2931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:96:3d:6f:77:aa:2a:2f:78:2d:45:27:93:
                    83:ba:13:a9:bc:f1:96:0f:b0:e2:9e:f9:a6:44:f0:
                    c2:94:66:a1:3e:83:ed:0f:54:ee:c6:81:21:18:91:
                    22:25:e5:b5:a7:da:a4:2b:6a:87:87:8f:5c:1d:92:
                    1c:bb:f7:8f:2e:bf:a6:8e:fc:5e:8b:e6:ae:60:d3:
                    77:d8:28:09:21:28:ad:3a:27:43:be:9d:8a:5f:c4:
                    b4:b0:16:36:49:3a:f9:88:ba:8f:3a:dd:a3:f5:65:
                    79:97:96:59:8b:12:10:f0:73:28:02:e6:ab:ef:8d:
                    ec:ef:77:2f:b2:a8:a1:8e:be:93:db:32:f4:92:41:
                    db:68:0e:42:75:47:a5:b1:47:2e:b0:39:93:71:bc:
                    44:b5:05:10:f3:8d:31:ed:b9:5f:7c:97:50:82:8e:
                    f6:9e:f6:53:3a:6a:cb:2a:f3:37:a2:f3:76:d9:24:
                    b2:91:3b:37:eb:b0:0d:6a:30:7a:ea:47:93:5a:36:
                    39:d9:59:7e:5c:87:b3:da:51:79:64:75:15:93:29:
                    21:f0:ad:94:cb:76:c8:45:0f:04:47:ff:3d:35:3e:
                    85:21:c0:f5:56:1d:43:a8:3d:e1:4b:81:f5:25:a3:
                    d1:dc:b0:6a:24:56:76:bb:af:6c:05:d9:8d:d3:fa:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FA:6E:A3:3D:F6:21:E5:CE:C4:DC:88:1B:A7:93:3E:2A:DA:29:31
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5fpuoz32IeXOxNyIG6eTPiraKTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:78:a7:76:35:11:66:0e:1a:ea:fe:db:4a:d2:a5:07:ef:98:
         06:7d:70:97:39:5a:1a:8d:82:3f:50:d8:f3:8c:aa:b3:c6:e9:
         d9:69:50:2e:05:f6:96:fa:d8:2e:72:ca:d1:a6:4c:64:83:46:
         17:c8:29:92:b9:e8:05:5d:8f:59:66:fa:f7:97:bf:ce:9d:1a:
         e3:7b:6f:2e:5e:d6:41:8f:58:86:f8:c2:78:f6:8c:3f:84:b2:
         4a:25:0e:47:72:86:ec:cb:83:5b:23:e6:f8:ad:57:50:ce:36:
         a1:45:d3:32:38:5e:06:04:07:ff:f3:9b:da:81:46:2b:d1:5b:
         03:52:44:a8:22:b1:44:c4:d2:25:e6:6c:79:8f:13:0b:82:29:
         63:a8:44:58:23:98:7a:e5:65:c8:12:f7:35:71:96:bd:14:bb:
         f3:e8:ea:7b:b3:44:f7:61:2a:44:bc:c7:45:e4:70:d5:c4:7d:
         b3:df:c2:ba:41:08:f5:ed:3e:56:e0:7a:ad:29:41:a4:80:27:
         8b:99:7b:75:7b:95:77:9c:43:60:3a:9e:84:56:37:25:64:42:
         b5:0b:a4:d2:e6:94:16:0e:4c:c9:f3:8e:27:63:4f:31:d2:c5:
         c5:4c:73:04:86:d4:d9:70:45:0f:f4:c2:45:cc:a3:00:ab:a9:
         2d:03:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----