Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhKWg_QjzI43eModRGEuuwR0F8.roa
File:                     xZhKWg_QjzI43eModRGEuuwR0F8.roa (raw, json)
Hash identifier:          PTU2QmgcOoCk4jCAGa+EBdDCJJf4SwIWJ6ekAie15dc=
Subject key identifier:   C5:98:4A:5A:0F:D0:8F:32:38:DD:E3:28:75:11:84:BA:EC:11:D0:5F
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186AC22B40073FDD408EBF167F1474D6C90
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhKWg_QjzI43eModRGEuuwR0F8.roa
Signing time:             Sat 04 Mar 2023 10:20:00 +0000
ROA not before:           Sat 04 Mar 2023 10:20:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ac:22:b4:00:73:fd:d4:08:eb:f1:67:f1:47:4d:6c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  4 10:20:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c5984a5a0fd08f3238dde328751184baec11d05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:19:4d:9f:71:98:fb:7f:f8:09:17:d0:31:
                    69:81:2a:55:6e:1f:6a:a4:b4:a7:7d:93:d0:87:ea:
                    83:43:bb:03:f0:66:bd:82:67:cb:63:2e:e8:f6:12:
                    fd:68:ad:4b:c8:4d:80:e9:b4:2a:05:9a:71:08:83:
                    30:31:c8:d7:72:1e:38:53:7c:5a:fc:de:16:7e:ce:
                    3f:f5:66:3a:82:0c:68:fa:17:08:a1:01:93:8c:2d:
                    02:7e:a7:1b:c4:e2:69:0d:fb:27:90:57:fd:8c:d9:
                    25:e0:4f:fb:c9:18:7c:63:4a:20:84:7f:08:d1:6d:
                    a4:26:cc:32:43:ba:62:23:4f:0c:be:15:a9:e3:74:
                    e3:2c:0a:48:e7:56:4d:3e:de:ec:b3:0d:bf:08:23:
                    d4:e8:c7:ec:ff:8f:1d:5e:e9:f0:c4:17:7d:fb:2c:
                    cb:dd:75:75:42:b3:1e:54:5f:3a:2e:d5:4a:3a:0e:
                    1a:9b:72:b4:81:88:a2:d7:ea:0b:4d:37:aa:89:e8:
                    43:31:43:70:0f:0e:ff:f1:d1:58:6e:f9:48:28:bb:
                    a5:c7:86:72:ac:5e:88:84:bc:7c:37:54:d8:32:24:
                    27:35:0c:49:b5:89:73:df:98:be:59:15:c3:9a:aa:
                    5a:54:6a:51:cc:41:1f:25:b3:9d:bd:91:8c:f0:73:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:4A:5A:0F:D0:8F:32:38:DD:E3:28:75:11:84:BA:EC:11:D0:5F
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xZhKWg_QjzI43eModRGEuuwR0F8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:96:ae:88:3c:cf:cf:55:01:d0:3d:17:e8:e7:cb:15:8b:2a:
         24:d5:56:63:79:7a:af:57:88:a7:d1:fb:4e:ee:28:cf:9c:28:
         a2:13:8e:2c:fe:c7:4c:49:99:cc:45:a7:2f:9f:af:9b:cf:20:
         f8:4c:d6:30:0e:6b:57:72:cb:8b:60:b6:56:4f:45:5b:49:73:
         d4:a1:9b:1c:a7:24:51:be:bc:51:c1:06:76:3e:c8:08:23:8b:
         fd:17:06:f7:97:1f:7c:4c:38:20:35:d1:e9:0b:d4:15:a7:87:
         9b:07:a6:59:1c:c3:5d:17:97:91:d4:e6:2a:d0:22:76:72:74:
         e8:bc:d7:0c:6d:84:b6:7c:1e:6a:bb:02:62:b5:0b:5f:7d:c0:
         a7:d7:ef:13:64:f1:e9:c1:d4:34:ce:61:61:0a:d1:52:3b:e3:
         55:01:19:a9:ca:b6:42:f2:22:28:ef:f7:a1:38:23:82:a5:c9:
         d2:a2:03:72:6e:c9:bd:3a:31:d9:50:a9:10:a8:34:04:b6:1c:
         ac:69:64:0c:81:f9:eb:b8:5a:68:a4:6d:99:35:c0:6d:7a:be:
         eb:b6:06:71:43:d4:56:f3:0e:82:b7:ec:e7:90:fd:d0:99:9c:
         9d:f9:a6:45:03:1f:8f:1b:cf:82:7b:b8:97:c6:f3:0d:a0:25:
         8b:4d:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----