Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JDRR0sORDc2Os2lIMM4SolykEXo.roa
File:                     JDRR0sORDc2Os2lIMM4SolykEXo.roa (raw, json)
Hash identifier:          eScgw70ivAcnsOrNF391l//XIwi/q1oQm0okqfQ5yvw=
Subject key identifier:   24:34:51:D2:C3:91:0D:CD:8E:B3:69:48:30:CE:12:A2:5C:A4:11:7A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187187A63B17B2E21B789877E19F3EE6D51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JDRR0sORDc2Os2lIMM4SolykEXo.roa
Signing time:             Sat 25 Mar 2023 11:14:46 +0000
ROA not before:           Sat 25 Mar 2023 11:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:18:7a:63:b1:7b:2e:21:b7:89:87:7e:19:f3:ee:6d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 25 11:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=243451d2c3910dcd8eb3694830ce12a25ca4117a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:13:38:fb:53:a5:2b:7b:fb:d3:c1:78:12:
                    3d:98:5e:d9:d8:81:9c:7f:9d:9d:1d:68:32:2c:a3:
                    33:fd:c7:58:36:e1:ea:e7:35:c7:32:87:10:17:d7:
                    9f:cc:0d:41:78:f3:25:ef:ef:9e:90:bd:b4:06:3b:
                    2c:23:de:b5:d4:87:8a:76:d9:52:9c:a6:66:96:eb:
                    1b:1f:4f:0b:b2:32:5e:b9:78:c3:03:06:99:d6:8e:
                    64:49:74:90:a1:04:d7:41:a4:68:5b:5e:c2:26:f7:
                    9f:70:2a:8d:7e:6b:25:77:d6:0d:1b:41:c4:41:8a:
                    6b:84:77:7c:3c:3f:25:ad:2c:d5:99:87:f8:9f:26:
                    f3:b5:a3:30:8f:fe:6f:4f:63:89:81:d4:00:bf:2f:
                    fb:85:7a:76:4d:e5:34:c8:45:b6:a9:4e:73:75:97:
                    54:d7:c0:97:a3:e7:aa:c4:71:32:77:0a:90:58:0e:
                    e6:e6:2e:7e:6f:76:60:40:3e:53:aa:10:4c:c5:8b:
                    19:8b:79:b4:c2:4f:01:c9:7a:b5:6f:a4:27:19:72:
                    d8:1f:97:70:15:41:8b:9a:b4:7e:18:f0:ba:9d:87:
                    69:dd:e5:12:4d:3d:0f:49:94:29:7e:b3:d6:08:05:
                    df:b0:65:c3:bb:f1:b3:34:63:e8:a9:c7:3e:ee:5e:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:34:51:D2:C3:91:0D:CD:8E:B3:69:48:30:CE:12:A2:5C:A4:11:7A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/JDRR0sORDc2Os2lIMM4SolykEXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:d6:ad:ad:03:d2:29:18:3b:0e:f7:c6:b9:90:43:cd:8f:db:
         5f:b9:21:fe:41:d8:24:70:8d:bb:7e:de:1e:d3:74:1e:33:d4:
         c1:7a:2b:b9:70:2f:bc:36:8c:21:88:02:cb:5d:f1:c6:2b:5b:
         4c:7a:c0:35:1c:a2:1d:31:52:b2:77:05:f3:dd:9d:c2:b1:c5:
         c8:61:47:68:ef:af:96:e3:9a:d2:e5:fa:37:bf:84:c7:6c:f5:
         0d:63:d4:88:11:da:5c:96:18:3f:39:3f:10:a1:1a:e7:f4:e6:
         7b:09:4a:32:cc:ae:81:ee:b6:83:31:ec:06:dd:85:40:92:78:
         68:a7:8d:b1:fa:49:c6:3a:59:22:49:79:ec:a0:e6:46:1e:f5:
         51:f5:97:fa:6f:eb:f6:97:43:0a:8d:6e:a6:1c:78:78:91:17:
         20:f1:d3:a6:97:bc:0f:be:4c:43:81:5e:8d:c2:61:88:ab:7e:
         92:53:50:82:11:4d:6c:63:f0:df:3a:e3:36:8e:3e:49:90:27:
         aa:a9:9d:a3:8c:1d:49:b9:e7:8c:0f:78:f5:ff:15:f7:fa:9e:
         fd:99:6f:f6:b6:85:26:67:76:46:0d:3b:a5:a6:14:ff:b9:2f:
         f3:8d:3f:9b:b8:04:61:39:a1:ee:39:b1:ac:ed:90:d1:53:ce:
         4f:95:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----