Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcUFaJ8ngsObqT3ng6LH4yCcCGE.roa
File:                     OcUFaJ8ngsObqT3ng6LH4yCcCGE.roa (raw, json)
Hash identifier:          d9dYifF9cxCaoWEd+bPiZXQECw0BsZkvs4zHW6tUaqg=
Subject key identifier:   39:C5:05:68:9F:27:82:C3:9B:A9:3D:E7:83:A2:C7:E3:20:9C:08:61
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186CEE13E804007B611138309FA8D23F630
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcUFaJ8ngsObqT3ng6LH4yCcCGE.roa
Signing time:             Sat 11 Mar 2023 04:15:13 +0000
ROA not before:           Sat 11 Mar 2023 04:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ce:e1:3e:80:40:07:b6:11:13:83:09:fa:8d:23:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 11 04:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39c505689f2782c39ba93de783a2c7e3209c0861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:49:42:60:ad:33:bf:71:ee:43:22:fd:7a:
                    b9:9f:58:4a:d3:3d:e6:4a:3d:7a:53:bf:57:61:69:
                    62:42:f5:f6:a6:57:18:00:c7:7d:2d:43:3f:39:dd:
                    fd:ec:db:44:8b:23:04:82:4f:9d:9d:3f:e6:d2:9f:
                    86:77:e5:d9:6d:90:1a:a5:09:41:d3:ef:98:72:b2:
                    73:50:13:fa:55:80:99:6b:ad:7d:42:9f:34:7d:01:
                    e9:17:ec:3f:2b:f0:68:99:58:08:61:fa:c8:e3:c9:
                    0a:67:56:f0:79:82:2b:d8:fd:80:6d:4a:e9:6c:52:
                    1b:35:85:ed:05:6a:83:f3:41:c0:74:c9:10:0f:f6:
                    de:e8:09:fb:1d:3a:49:a4:b9:30:f1:13:e8:93:a1:
                    e1:25:ff:f8:fe:34:f6:46:35:b9:76:58:32:ef:71:
                    be:bb:cb:b7:23:9d:bd:b5:e9:31:25:24:9e:40:09:
                    7b:60:79:78:16:47:69:50:36:ba:96:c6:a6:3b:00:
                    83:2b:72:24:ef:cf:9d:ea:0a:7b:c9:c1:45:7e:65:
                    af:86:8a:ed:92:04:65:ae:3b:f5:75:df:23:df:71:
                    53:82:d5:12:c3:79:ea:ad:41:93:69:d9:2c:87:27:
                    32:9f:fc:b0:3f:11:50:17:a6:96:0d:b8:2a:79:6b:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C5:05:68:9F:27:82:C3:9B:A9:3D:E7:83:A2:C7:E3:20:9C:08:61
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/OcUFaJ8ngsObqT3ng6LH4yCcCGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:e3:f9:de:52:80:b1:52:a4:b2:5d:df:50:b7:bd:36:8b:
         e2:d4:2f:ed:e9:1c:e2:3d:1a:df:86:08:22:bf:59:cc:db:17:
         f9:75:d2:d8:f9:1f:e5:49:5b:1e:fc:28:ad:28:fc:85:19:55:
         23:36:e0:e3:9b:cd:85:7f:34:8f:8c:aa:25:17:e7:22:36:40:
         dd:33:66:92:09:5d:d2:01:dd:71:18:66:6f:80:0e:7a:e7:ae:
         f3:1b:a2:3d:73:f3:85:0e:ca:86:d4:9d:d3:43:63:8d:52:f5:
         76:72:41:8e:f3:7d:c9:2c:20:6a:e8:dc:9c:51:73:0b:9e:7e:
         80:4b:e1:d3:d5:23:90:c0:a0:7b:e7:d7:2e:43:a4:33:57:dd:
         33:ac:67:94:d3:9a:4d:4a:48:1c:0d:df:60:23:0b:16:e1:48:
         ff:fe:d8:ba:8c:59:0e:a5:7a:f7:3f:b8:c5:0b:a9:df:eb:4f:
         a1:cd:c5:a0:6f:43:eb:18:87:f8:bb:2e:e2:81:c7:b4:25:82:
         e6:4b:ca:fa:b2:23:1b:6f:bc:e2:fe:a9:6a:af:f5:bd:f9:16:
         f2:e9:ba:f8:33:a5:72:86:f8:53:57:a6:47:5d:e7:d2:ad:4c:
         a3:28:b5:a4:82:7d:66:9c:b9:1a:9a:8c:33:0f:80:30:42:a4:
         fa:74:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----