Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSc7C0GtYAypyGMguIXoYHIyEPE.roa
File:                     DSc7C0GtYAypyGMguIXoYHIyEPE.roa (raw, json)
Hash identifier:          xauQPHrfZHzFAiH30qAIwTXlJUSvW3szneHq0Q1QpKU=
Subject key identifier:   0D:27:3B:0B:41:AD:60:0C:A9:C8:63:20:B8:85:E8:60:72:32:10:F1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01870A1115AD2E841E7AE3466A3AF59C4F2B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSc7C0GtYAypyGMguIXoYHIyEPE.roa
Signing time:             Wed 22 Mar 2023 16:05:04 +0000
ROA not before:           Wed 22 Mar 2023 16:05:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:187:a10:50e7/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0a:11:15:ad:2e:84:1e:7a:e3:46:6a:3a:f5:9c:4f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 22 16:05:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d273b0b41ad600ca9c86320b885e860723210f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:37:49:72:a2:5d:9b:91:f2:e9:ed:e3:7d:
                    09:1c:b7:cc:34:c0:a1:84:fd:b9:6b:1f:7c:04:6f:
                    4e:81:7a:c9:82:18:14:fe:4b:47:da:15:38:4f:a8:
                    76:da:0e:30:f5:07:91:8c:00:08:3a:e8:a7:25:e5:
                    13:88:28:4f:7f:b7:ec:c3:bd:f6:1e:45:5c:4d:68:
                    86:81:d0:74:56:35:06:e5:dc:93:c2:5f:f7:8a:79:
                    e3:05:26:cd:39:b5:b3:1e:43:0a:04:5e:ad:26:3b:
                    d9:e6:06:57:b3:8d:39:3c:06:3a:81:db:c0:95:3e:
                    eb:7f:e8:ee:25:e0:c9:70:f3:1d:36:56:a6:30:e9:
                    3e:fc:76:8c:6e:4f:e1:c8:e5:be:36:ed:92:b3:7f:
                    81:e2:c5:81:de:7a:5a:47:d3:93:9e:3c:41:77:57:
                    a6:36:05:26:4a:10:95:d9:3e:26:2f:2d:fc:b1:b4:
                    71:8c:dc:6a:2f:5c:86:9f:13:2a:0f:97:06:7a:cf:
                    0b:48:71:bf:c9:47:ac:f2:1b:da:97:4b:51:63:92:
                    c7:e3:73:2f:50:7e:16:69:aa:40:4f:c8:6a:dd:6e:
                    e5:78:db:0f:bb:4c:08:69:a6:eb:29:92:86:cb:22:
                    80:aa:07:ba:d2:1d:64:7f:eb:03:46:c0:f8:ee:b7:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:27:3B:0B:41:AD:60:0C:A9:C8:63:20:B8:85:E8:60:72:32:10:F1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/DSc7C0GtYAypyGMguIXoYHIyEPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:94:4f:bb:d5:66:88:11:be:4c:6d:67:6f:0e:b9:92:c8:
         33:f0:73:df:01:20:5d:e7:04:dd:01:d8:28:20:bf:30:3a:88:
         b0:63:e9:2f:0b:b7:00:98:5c:b7:5f:df:7d:8b:55:68:d4:1a:
         d9:9b:2a:ca:b0:76:35:f8:87:15:cf:fb:5f:5d:3b:28:2c:8c:
         e5:5b:9a:1b:99:89:b4:b8:34:5c:0a:5b:b1:37:41:5f:ea:b7:
         7c:39:27:24:c2:ab:56:c2:c6:0f:dc:d2:8c:a4:12:5e:b0:a8:
         aa:b7:c0:9e:40:28:16:5b:ab:6c:aa:b1:77:1f:d2:7d:d7:b1:
         94:dd:83:17:ba:d9:28:7c:51:48:c4:08:de:35:4f:ca:c2:7d:
         b4:f0:ec:10:53:df:d6:aa:34:8f:97:c9:63:17:a9:49:11:ed:
         30:36:fc:09:3e:ac:36:79:83:75:66:2f:ff:b5:24:74:69:69:
         ab:5f:c2:9b:0b:e7:69:eb:27:36:b9:8c:94:f0:83:f2:35:81:
         3f:ec:79:1e:b7:4e:ea:50:76:3d:da:8e:c8:ed:02:d6:73:ce:
         4b:f2:0c:23:6c:ed:19:50:ed:6f:71:9c:f0:c7:3f:ed:c4:a5:
         92:a4:de:62:23:77:87:b0:8e:2d:91:27:a6:4f:b6:a6:14:2b:
         a7:0d:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----