Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1w2GTsSvl0Xsa12yovNRKDsQsc.roa
File:                     X1w2GTsSvl0Xsa12yovNRKDsQsc.roa (raw, json)
Hash identifier:          MXCVpKQwTTSC/Gl3xLpoKWfKtJ7oWFvogOFUlffRRok=
Subject key identifier:   5F:5C:36:19:3B:12:BE:5D:17:B1:AD:76:CA:8B:CD:44:A0:EC:42:C7
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01895E31394EAB570F1218A3E65D26594878
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1w2GTsSvl0Xsa12yovNRKDsQsc.roa
Signing time:             Sun 16 Jul 2023 10:13:51 +0000
ROA not before:           Sun 16 Jul 2023 10:13:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5e:31:39:4e:ab:57:0f:12:18:a3:e6:5d:26:59:48:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 16 10:13:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5f5c36193b12be5d17b1ad76ca8bcd44a0ec42c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:79:6a:f0:77:fe:29:95:00:e1:ef:0f:d4:01:
                    29:a4:c3:e0:8a:75:b5:e0:36:43:2c:89:ce:04:48:
                    4a:61:37:5b:21:54:28:b0:07:83:4b:bf:13:07:ff:
                    86:e5:f4:aa:95:e7:ee:ef:49:eb:69:39:68:7a:fa:
                    7e:b9:23:0e:03:4e:91:14:55:b0:11:7f:4e:9e:60:
                    c2:51:94:23:99:a5:4b:89:88:b3:19:68:42:e5:c1:
                    bb:8d:b5:3b:a7:60:79:55:78:a2:b2:cb:36:b8:16:
                    b3:8e:19:71:32:94:9d:b9:4f:73:c9:1a:0d:53:8b:
                    a9:61:ae:55:f7:7f:44:e0:30:92:4c:7d:86:1a:75:
                    67:67:6c:d4:b3:e5:73:7a:0f:fc:46:95:01:e1:68:
                    c2:7d:41:93:bd:ad:33:fd:04:d1:ec:a2:24:36:85:
                    e0:68:88:8d:95:58:06:53:f3:76:36:15:7a:ce:2f:
                    c1:5a:51:81:e7:f9:b8:b7:8d:0b:ca:c7:a2:a3:7f:
                    40:b5:4f:1a:a7:c3:63:4b:22:4d:5a:c7:a0:83:60:
                    bd:92:6c:50:5c:40:b8:a6:fd:82:51:8c:55:37:d9:
                    5f:5f:d6:25:2f:3d:49:4a:7f:27:86:31:84:15:4b:
                    78:d7:11:2f:68:f3:cd:cd:51:30:72:0b:fb:c8:6b:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5C:36:19:3B:12:BE:5D:17:B1:AD:76:CA:8B:CD:44:A0:EC:42:C7
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X1w2GTsSvl0Xsa12yovNRKDsQsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:f9:20:f9:3a:5c:eb:d1:22:9d:49:47:1f:27:df:ae:83:
         f9:06:d8:d2:b1:3b:63:61:0b:0d:e5:b9:ce:eb:37:a2:6d:0e:
         ef:b8:62:64:11:5b:e8:32:1c:ae:5c:0b:2e:99:3d:53:c4:62:
         03:ec:50:11:37:81:6c:a2:14:e2:b8:8b:c3:6d:19:cf:2d:33:
         b3:66:76:38:fa:16:10:78:7a:84:87:8d:71:95:06:59:1b:89:
         fa:ba:ba:79:fe:07:50:79:d8:ff:5f:b7:81:9c:1f:a2:91:bd:
         25:fb:39:e9:ec:0d:d7:4d:5f:5d:77:b6:6b:b1:f9:46:09:47:
         ac:17:18:ab:7b:f4:d4:be:65:98:9e:24:37:58:72:d6:e3:73:
         08:10:24:86:f6:e9:4a:75:e2:ae:a8:91:05:81:33:e1:54:24:
         7c:ff:88:e1:79:ef:18:77:1c:ae:19:4b:0a:c0:0e:7c:0c:97:
         1f:f7:70:c0:29:5d:e5:5a:9e:84:d3:cf:a6:58:6b:9c:49:c2:
         c0:ef:93:ee:d4:0a:7b:f0:1a:9a:f0:93:de:5c:ac:dc:f3:d8:
         dc:47:84:54:77:74:a1:5d:f8:a5:d8:1b:bf:1b:09:cd:f2:e5:
         14:ba:fd:da:39:45:9d:da:aa:d8:e2:30:e9:30:69:ae:f3:00:
         3c:c6:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----