Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAlxp3E7LSuaifvSSCmyF0D96do.roa
File:                     qAlxp3E7LSuaifvSSCmyF0D96do.roa (raw, json)
Hash identifier:          /Ii+78A6nCGnOG/fL3L0Oajj4yyoo5pT/LROTKjh6Mk=
Subject key identifier:   A8:09:71:A7:71:3B:2D:2B:9A:89:FB:D2:48:29:B2:17:40:FD:E9:DA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188A980AA0EEAAF2E855141E7BAD3A73106
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAlxp3E7LSuaifvSSCmyF0D96do.roa
Signing time:             Sun 11 Jun 2023 08:09:21 +0000
ROA not before:           Sun 11 Jun 2023 08:09:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a9:80:aa:0e:ea:af:2e:85:51:41:e7:ba:d3:a7:31:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 11 08:09:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a80971a7713b2d2b9a89fbd24829b21740fde9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:78:b4:bf:c5:f4:d0:f5:73:24:22:f2:1b:da:
                    1c:fb:c8:d5:bd:3a:58:ed:ee:3e:f5:48:c8:9f:2a:
                    f5:b1:5e:b6:07:84:3a:ac:4f:c6:62:ff:7f:f6:98:
                    0a:37:a6:6f:8b:40:3e:58:1e:f4:33:3f:35:58:c0:
                    8c:6d:75:12:98:1a:55:00:a7:21:3a:74:1e:a2:23:
                    74:02:b3:ad:52:fb:32:f6:a5:fd:94:fc:0a:c7:0b:
                    e7:d5:c8:8e:d6:23:7f:07:ed:0b:c4:9a:94:6e:da:
                    aa:6b:67:d2:ba:41:6c:d1:cb:24:81:2d:8c:71:46:
                    82:61:6f:c8:06:11:7c:64:6c:87:bd:f4:6b:2b:01:
                    b8:0b:6a:7d:2f:6d:d8:c0:c4:40:dc:16:58:17:66:
                    be:0b:b8:50:58:ab:b3:de:f9:8e:f3:b7:a9:fd:4a:
                    61:4d:b5:9f:c5:3b:63:7d:d4:cb:ab:1a:bb:b3:da:
                    d0:a5:13:fa:47:2a:a2:db:d9:73:ed:8a:e6:1c:bb:
                    d2:70:69:38:3b:2c:cd:68:73:d7:c1:38:37:02:29:
                    eb:af:08:b8:b4:23:2a:2d:9e:09:be:6e:47:c5:1c:
                    00:35:ad:5c:ee:a6:b8:e1:53:36:43:52:3c:a4:2a:
                    61:9f:50:6c:01:78:66:f4:4f:1d:e6:a3:3d:51:16:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:71:A7:71:3B:2D:2B:9A:89:FB:D2:48:29:B2:17:40:FD:E9:DA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qAlxp3E7LSuaifvSSCmyF0D96do.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:22:df:6d:18:aa:24:33:72:bb:9e:b8:28:5c:ec:e2:b5:b3:
         ca:d9:ce:c4:95:ad:36:60:c3:c4:59:bc:25:76:56:ab:74:27:
         d7:b5:d0:25:36:de:6d:ad:1b:f4:95:26:c6:7c:c0:7b:bf:9a:
         a1:56:0f:af:f0:5d:16:de:4f:72:15:c4:a6:b2:40:44:71:b0:
         94:a3:45:b2:41:99:70:5c:b6:60:ef:37:a8:9b:39:9f:a1:c2:
         6c:25:71:df:d8:ac:ad:e4:56:e3:4d:9a:2b:54:09:bd:bf:dc:
         3f:4f:4d:4e:fa:4d:f6:e7:d0:98:c5:9c:fa:32:4f:ac:6a:28:
         00:97:f4:b4:f5:8e:df:55:36:b6:df:70:1c:28:5e:17:f6:b7:
         1d:20:2f:1a:64:b2:bb:75:c6:82:4e:f4:60:fa:86:06:3a:b1:
         bd:cf:eb:3f:e6:37:51:ad:cc:2b:7b:a6:d9:55:c7:e2:82:c2:
         70:22:75:f4:35:a5:81:08:16:66:d8:18:a3:06:de:b3:b3:c0:
         74:32:43:91:48:42:97:06:6b:f3:7c:94:87:41:2f:f1:f2:25:
         46:f0:9f:fa:90:35:02:aa:7f:47:c8:38:63:8e:68:e8:0c:79:
         7e:c1:d6:8c:6f:33:88:77:fb:d9:20:86:f2:0c:89:10:90:04:
         2a:39:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----