Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09kAa36ROheRkGadEfH1YcAmRxw.roa
File:                     09kAa36ROheRkGadEfH1YcAmRxw.roa (raw, json)
Hash identifier:          EQ0PFmzazOfNEb3lK9yGMbG9QtiZA13o86Aa11YDvnI=
Subject key identifier:   D3:D9:00:6B:7E:91:3A:17:91:90:66:9D:11:F1:F5:61:C0:26:47:1C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187AFEEE3F549300603D06052752730810D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09kAa36ROheRkGadEfH1YcAmRxw.roa
Signing time:             Sun 23 Apr 2023 21:04:41 +0000
ROA not before:           Sun 23 Apr 2023 21:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:afee:c454/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:af:ee:e3:f5:49:30:06:03:d0:60:52:75:27:30:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 23 21:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d3d9006b7e913a179190669d11f1f561c026471c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:c5:68:5c:07:55:13:57:b3:fe:8c:f2:1f:
                    f1:62:73:cf:b5:8c:3b:d4:18:94:eb:95:d7:1f:24:
                    72:12:78:eb:9a:d5:7c:f7:e1:32:6b:35:b1:dc:21:
                    35:06:9b:64:25:2d:5d:83:79:bc:ce:89:57:91:d1:
                    7d:8f:f7:e8:03:61:f3:2c:a7:9b:bc:3e:bd:cd:96:
                    1b:6e:ec:48:6d:28:19:4a:44:d9:1e:37:ce:2a:c6:
                    72:54:f7:73:b7:be:c9:91:1d:a7:d9:51:ff:a0:24:
                    6a:bb:1c:8e:00:f2:97:9d:46:e9:20:fd:4c:3d:cc:
                    dc:a4:3e:44:f2:55:8f:b2:78:27:19:df:ad:4f:b2:
                    6c:f7:de:74:61:86:ff:39:eb:4b:e9:d0:c8:af:34:
                    f9:a9:5c:c5:aa:6a:ed:c8:ee:b5:e6:bf:01:e1:3c:
                    b9:e6:ba:ef:77:35:73:c9:c4:56:0b:28:52:af:cb:
                    6a:bc:d2:c2:36:40:60:4e:63:0f:3e:55:f7:8f:55:
                    8a:ca:6b:ce:d8:b2:60:b6:29:39:ac:95:df:cd:72:
                    d4:43:b1:29:19:29:25:42:65:54:91:23:d2:78:41:
                    05:d4:6b:25:a2:9b:bc:ee:2a:89:24:6a:97:99:ac:
                    28:b4:e9:f2:bc:64:bf:02:a8:ba:d0:e5:db:75:aa:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D9:00:6B:7E:91:3A:17:91:90:66:9D:11:F1:F5:61:C0:26:47:1C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09kAa36ROheRkGadEfH1YcAmRxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:23:a9:fa:b4:0f:54:79:ec:bb:56:50:57:ca:3b:3e:d4:ee:
         25:ca:bd:b1:2f:0b:63:c9:94:98:16:62:ab:3f:d2:d8:74:f7:
         d0:47:68:f4:ad:ca:16:18:35:90:15:68:f2:b0:6a:f8:82:aa:
         e0:ac:ff:61:df:b8:7c:77:89:8c:96:f0:a9:d8:f1:39:fb:30:
         0f:33:dd:ba:ee:c5:8d:e6:65:1a:cd:28:ed:27:86:0f:7d:fa:
         43:c5:fb:e3:25:f0:c5:25:51:06:e8:e5:5e:3a:ba:4a:1f:03:
         21:ab:41:0c:06:14:3c:bd:da:dc:95:6a:e3:6a:e0:88:8a:9c:
         09:ea:b1:36:ad:4f:31:1d:a6:69:b8:e7:c2:c3:bb:52:5a:87:
         ef:63:6d:06:03:40:53:76:92:bd:35:f9:45:8d:4b:be:7e:62:
         43:d0:e6:89:5d:a9:f9:48:c5:7e:90:4f:4a:4b:ef:d1:f1:a8:
         ea:1c:4b:f8:85:38:fb:8e:ac:70:a4:81:3f:01:ce:98:8e:8e:
         27:6a:99:74:5d:c7:c7:a4:74:41:ba:16:d6:e4:05:44:8c:58:
         33:06:f5:2c:cf:d5:e9:86:63:5b:32:f6:0d:76:e5:77:6f:22:
         21:cd:5c:cd:f9:b6:63:6e:7a:98:ed:28:a1:c9:25:7a:88:b2:
         89:25:32:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYev7uP1STAGA9BgUnUnMIENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIzMjEwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2Q5MDA2YjdlOTEzYTE3OTE5MDY2OWQxMWYxZjU2MWMwMjY0NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks7FaFwHVRNXs/6M8h/xYnPPtYw7
1BiU65XXHyRyEnjrmtV89+EyazWx3CE1BptkJS1dg3m8zolXkdF9j/foA2HzLKeb
vD69zZYbbuxIbSgZSkTZHjfOKsZyVPdzt77JkR2n2VH/oCRquxyOAPKXnUbpIP1M
PczcpD5E8lWPsngnGd+tT7Js9950YYb/OetL6dDIrzT5qVzFqmrtyO615r8B4Ty5
5rrvdzVzycRWCyhSr8tqvNLCNkBgTmMPPlX3j1WKymvO2LJgtik5rJXfzXLUQ7Ep
GSklQmVUkSPSeEEF1Gslopu87iqJJGqXmawotOnyvGS/Aqi60OXbdap4RwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNPZAGt+kToXkZBmnRHx9WHAJkccMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMDlrQWEzNlJPaGVSa0dhZEVmSDFZY0FtUnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIojqfq0D1R57LtWUFfK
Oz7U7iXKvbEvC2PJlJgWYqs/0th099BHaPStyhYYNZAVaPKwaviCquCs/2HfuHx3
iYyW8KnY8Tn7MA8z3bruxY3mZRrNKO0nhg99+kPF++Ml8MUlUQbo5V46ukofAyGr
QQwGFDy92tyVauNq4IiKnAnqsTatTzEdpmm458LDu1Jah+9jbQYDQFN2kr01+UWN
S75+YkPQ5oldqflIxX6QT0pL79HxqOocS/iFOPuOrHCkgT8BzpiOjidqmXRdx8ek
dEG6FtbkBUSMWDMG9SzP1emGY1sy9g125XdvIiHNXM35tmNuepjtKKHJJXqIsokl
MnE=
-----END CERTIFICATE-----