Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/novuabHMnd6vMvqMEQp-epVPXVw.roa
File:                     novuabHMnd6vMvqMEQp-epVPXVw.roa (raw, json)
Hash identifier:          15BjTgDT9s0JnKiw2c7mZNT64knnQPhs7jwMWMp/cVQ=
Subject key identifier:   9E:8B:EE:69:B1:CC:9D:DE:AF:32:FA:8C:11:0A:7E:7A:95:4F:5D:5C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01878C5B398D580CB67C682F7F66F0B48EB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/novuabHMnd6vMvqMEQp-epVPXVw.roa
Signing time:             Sun 16 Apr 2023 23:16:41 +0000
ROA not before:           Sun 16 Apr 2023 23:16:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:8c:5b:39:8d:58:0c:b6:7c:68:2f:7f:66:f0:b4:8e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 16 23:16:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e8bee69b1cc9ddeaf32fa8c110a7e7a954f5d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f9:81:a5:75:9d:03:16:89:5f:15:11:80:90:
                    3f:1e:b4:2f:49:a6:f5:bf:0a:c6:be:94:3b:c0:35:
                    a4:b6:4b:43:cf:30:d0:b7:a6:55:46:0e:d9:fa:6f:
                    40:38:be:26:78:cc:cf:9f:35:e9:7d:e4:bf:ce:54:
                    e5:f2:82:65:e7:4a:11:d2:41:53:b9:aa:fa:6e:54:
                    1c:b0:5f:2c:73:43:03:dd:1e:89:0a:2b:69:71:22:
                    2e:0a:96:67:3f:c6:58:05:56:94:0d:3f:94:e1:48:
                    66:50:9a:97:c4:ec:3a:89:de:e8:3e:0a:5d:26:06:
                    17:26:db:b3:63:bf:11:98:69:f5:04:78:85:fa:25:
                    05:65:24:ba:f2:f4:bf:2a:aa:4c:70:2b:25:fb:9b:
                    4e:9f:50:65:18:24:7e:b2:91:7a:4d:0c:84:cb:78:
                    6f:77:dd:13:41:7f:8b:0b:bb:c1:37:24:f3:4a:66:
                    fb:c7:fa:07:77:61:18:96:b1:d0:6c:99:c0:b5:24:
                    43:6e:8e:d3:14:31:5c:ec:50:c4:1f:d8:0a:93:93:
                    2e:13:00:b7:fe:33:f3:9a:6e:b6:ea:84:bc:de:5b:
                    3f:d3:4d:6d:6d:92:c7:8c:67:b8:da:70:59:8e:cb:
                    3d:56:9f:ef:19:5d:70:db:83:f0:d7:42:66:fe:45:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8B:EE:69:B1:CC:9D:DE:AF:32:FA:8C:11:0A:7E:7A:95:4F:5D:5C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/novuabHMnd6vMvqMEQp-epVPXVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:65:c9:9b:2c:ae:03:91:3d:9f:10:9e:96:76:23:7a:dc:
         3f:a7:8f:da:a2:3a:03:db:17:ec:f4:78:32:2b:28:0d:55:5f:
         0c:f2:9c:0d:82:e7:10:fa:a9:4c:48:77:d8:4b:45:6f:cd:1b:
         6e:2a:7b:b8:dd:eb:75:b5:57:24:38:bc:5c:ed:0a:a4:49:2c:
         78:ac:27:e3:b3:a0:b1:60:66:c1:65:32:84:b7:bc:e7:4b:dc:
         85:f7:e1:bd:fc:e2:15:47:f7:ea:79:e3:33:73:5f:c8:e2:4a:
         a5:0e:78:8d:7a:7b:ae:6e:d3:c7:41:fc:72:28:95:93:9e:21:
         9f:bc:61:d3:3b:e8:0c:8b:65:2f:4f:59:25:f3:7c:b1:27:8f:
         e0:92:94:bb:e8:16:06:f8:71:86:c0:72:9d:8a:ec:10:d0:78:
         e9:94:db:a7:cd:8b:c7:9c:fe:a5:01:5d:4b:75:fe:48:34:7f:
         a0:8b:31:0e:9b:cb:52:dd:15:3f:03:b0:27:75:8e:35:31:02:
         2b:19:30:ae:0d:de:c5:8e:8a:fc:3c:22:7c:c4:4d:4a:16:ae:
         eb:1c:fe:c3:a2:b3:a4:cc:10:52:bb:5f:4f:9f:ab:26:9c:66:
         fd:db:d0:07:e5:a9:1a:8d:d8:19:86:6b:c9:b4:28:1f:7e:5f:
         c1:e7:fd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----