Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PQYSOt68qUklhm4npxe2rVc5WxA.roa
File:                     PQYSOt68qUklhm4npxe2rVc5WxA.roa (raw, json)
Hash identifier:          dxf4Bd8ik4j0CFFVHZNxzPwnqEZLjdIN70f/3/97KzQ=
Subject key identifier:   3D:06:12:3A:DE:BC:A9:49:25:86:6E:27:A7:17:B6:AD:57:39:5B:10
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186EA4EA22CDA83FBEE524BE8C9F686C911
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PQYSOt68qUklhm4npxe2rVc5WxA.roa
Signing time:             Thu 16 Mar 2023 12:04:27 +0000
ROA not before:           Thu 16 Mar 2023 12:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:ea4e:7e22/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ea:4e:a2:2c:da:83:fb:ee:52:4b:e8:c9:f6:86:c9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 16 12:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d06123adebca94925866e27a717b6ad57395b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:95:01:20:dc:8f:56:a3:53:69:9f:a9:7d:
                    7c:81:8e:01:f1:a7:d8:ba:de:de:1e:8e:6e:50:5f:
                    80:65:9c:d5:ed:8a:01:75:0c:8d:cc:a8:2a:29:d0:
                    14:ff:ef:6a:03:23:0d:69:b6:77:2f:50:ff:80:b2:
                    d1:c5:75:04:e3:7e:9d:3e:34:53:ba:8f:51:1a:f0:
                    d8:17:3b:d7:36:02:36:55:54:59:f0:0c:96:9d:c8:
                    3c:0c:45:20:9d:c7:68:a6:a8:39:da:aa:6f:6f:fe:
                    42:9f:2d:42:8d:4a:ff:af:f2:7b:74:0c:66:6a:f4:
                    40:2c:d3:6b:c6:f2:0d:aa:39:87:08:6f:1c:c3:b6:
                    7e:3b:cf:15:5e:da:3e:d7:0c:38:71:14:e3:4e:0e:
                    ef:38:62:99:b4:82:15:78:44:73:64:a8:ea:e8:83:
                    5a:e5:0c:d2:c2:b3:43:ee:5e:b8:e9:dc:df:ec:89:
                    63:50:76:07:53:7f:b1:9d:e2:7d:95:c1:bc:8b:94:
                    77:fb:47:ba:6b:64:06:22:3a:7b:83:05:73:5e:c2:
                    51:be:11:79:40:01:3e:a9:71:f1:d7:eb:30:f9:ea:
                    64:c2:c3:5e:7f:f9:1c:d7:0c:ae:97:d4:30:bd:37:
                    f7:c6:39:57:bf:ca:57:ba:1e:90:9d:d9:fd:96:28:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:12:3A:DE:BC:A9:49:25:86:6E:27:A7:17:B6:AD:57:39:5B:10
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/PQYSOt68qUklhm4npxe2rVc5WxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:0c:d2:c1:6f:29:f9:b2:8e:9c:b3:a6:f0:d3:25:73:5b:
         ab:39:d2:d6:8e:27:88:b2:2e:88:5f:98:f1:4c:0e:5b:d2:6c:
         8b:52:45:65:44:f1:01:b0:ec:f3:07:ee:a8:a1:57:50:ea:5d:
         f9:b8:69:f6:e9:3c:e2:2f:15:97:08:7b:a7:ab:c1:99:93:de:
         43:eb:8a:ac:f3:6c:0c:73:50:1d:b7:67:33:5b:b6:a3:3d:e3:
         5f:8d:23:4f:ac:7b:b5:22:32:14:0d:5e:25:4e:63:c8:35:52:
         e5:b6:68:86:12:fd:a9:40:54:bd:b1:42:78:58:84:da:64:1f:
         fc:5f:f9:e0:28:d5:86:5d:0f:e8:04:85:41:0c:95:b4:a3:f0:
         6c:ff:a3:ae:13:e8:0c:90:78:0e:20:76:69:5e:c6:70:c1:27:
         5d:76:5c:c4:21:44:27:e0:b3:a7:c3:45:c8:c0:2c:31:1c:10:
         b3:ae:61:58:ab:2d:cd:a2:cd:ef:16:d7:84:34:98:dd:89:63:
         a6:23:24:b9:92:0a:38:23:52:c7:77:ee:32:7b:ba:89:07:c8:
         83:5f:b3:cb:9e:34:c5:7a:a8:c6:5a:00:8a:45:c3:9f:ea:62:
         22:ac:ac:53:c9:a0:72:e7:a7:7a:ea:69:a8:d6:a7:9c:eb:86:
         80:68:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----