Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhuC6pPPj1nxwltxvOxj0BB8e4g.roa
File:                     HhuC6pPPj1nxwltxvOxj0BB8e4g.roa (raw, json)
Hash identifier:          9k71vDDWR3R0qdl1XCflyr/BI5nwQrffpPUv1vWxUxM=
Subject key identifier:   1E:1B:82:EA:93:CF:8F:59:F1:C2:5B:71:BC:EC:63:D0:10:7C:7B:88
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186BDB76F6E7118A66C2CBBD14B31B52EA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhuC6pPPj1nxwltxvOxj0BB8e4g.roa
Signing time:             Tue 07 Mar 2023 20:16:00 +0000
ROA not before:           Tue 07 Mar 2023 20:16:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bd:b7:6f:6e:71:18:a6:6c:2c:bb:d1:4b:31:b5:2e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  7 20:16:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e1b82ea93cf8f59f1c25b71bcec63d0107c7b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:d0:1e:05:e0:eb:d9:e2:66:88:85:f4:13:
                    37:3c:08:b7:63:7b:ca:bb:24:9d:6f:e7:21:82:71:
                    34:16:4f:06:51:89:2e:a6:1d:b5:39:35:f1:cf:bb:
                    d3:e8:45:e2:1c:da:bb:20:be:cd:64:3d:76:a6:e8:
                    fc:65:97:07:c9:13:39:2f:cf:51:5f:f5:58:82:dc:
                    4d:45:b3:1a:76:d8:8b:59:74:03:5a:9e:ab:86:7a:
                    5a:ca:5f:da:f9:d2:32:3b:e1:41:d1:56:cb:c6:c3:
                    c7:37:73:5a:83:6f:60:e1:b5:29:d8:84:61:8a:5e:
                    a2:a2:a0:5a:a3:47:66:e9:01:71:2a:ee:c1:8e:4f:
                    68:e0:40:d9:cc:a6:68:f7:98:f7:07:cb:e7:d7:e4:
                    fb:f2:6e:2a:a2:60:4b:3c:cc:b6:07:4b:df:41:d6:
                    75:90:b8:24:20:a5:ba:d6:1c:e0:3a:78:42:ff:09:
                    5c:de:7b:38:a0:a6:d9:53:43:34:f2:83:e9:43:34:
                    a0:e8:c5:0a:5e:26:ed:84:eb:18:4e:e1:1f:bb:eb:
                    d9:ef:1c:4c:2e:60:c6:dc:29:c6:69:b5:26:4d:6a:
                    07:64:69:d9:c7:d2:72:f8:dd:33:e0:48:a1:a1:36:
                    86:41:53:71:2d:32:cb:fe:7f:71:36:d7:a9:22:e7:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1B:82:EA:93:CF:8F:59:F1:C2:5B:71:BC:EC:63:D0:10:7C:7B:88
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HhuC6pPPj1nxwltxvOxj0BB8e4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:29:bc:ba:29:aa:56:52:2f:e6:1f:4f:ba:ec:40:7d:b0:4b:
         70:9f:b0:52:67:9e:0a:33:33:a5:4b:46:8f:34:ae:19:e3:29:
         f9:4d:6c:b8:5a:ea:c4:3a:e5:51:5e:c7:82:21:0b:04:66:6f:
         12:43:32:f0:bb:04:5d:7b:a7:6b:1c:87:88:c2:24:e8:c0:2c:
         21:11:ce:59:3c:bf:b5:87:50:6a:66:cd:9f:1d:00:9a:85:2b:
         60:ee:b0:9e:de:9b:b7:2f:9d:4a:33:8c:f1:eb:e2:9a:61:ec:
         a6:ad:09:cb:42:3c:b6:f5:65:f9:b7:7d:e8:a1:27:ac:88:d0:
         90:c9:44:b8:39:c7:99:53:c9:de:e5:cd:41:dd:41:54:39:0d:
         ec:54:5f:59:01:46:a6:3b:de:42:7a:2a:4f:3e:9d:ae:67:39:
         16:00:3e:9d:01:79:19:62:c8:02:b5:6c:41:24:d1:c7:d2:75:
         7f:0a:05:9d:bd:1b:93:fd:f4:7c:d0:57:62:d5:59:44:7f:21:
         60:f1:87:e2:ab:1f:58:bc:de:52:0d:ea:b3:ed:33:a7:d6:d4:
         6a:62:88:31:fc:a9:4f:98:df:12:0b:b9:0d:57:33:46:4c:9f:
         7d:22:6e:f0:68:8f:04:a3:1e:36:ba:8c:87:86:07:02:9f:4b:
         f2:ed:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----