Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62d4kM1swHDYKx_TPBpo-PJBXMs.roa
File:                     62d4kM1swHDYKx_TPBpo-PJBXMs.roa (raw, json)
Hash identifier:          1REd5xHs71UwZYs8XXuzO4Lpqk3Ku64aGckbH+W3dKY=
Subject key identifier:   EB:67:78:90:CD:6C:C0:70:D8:2B:1F:D3:3C:1A:68:F8:F2:41:5C:CB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C2660D709F9B279E8A96D7E81BDB24CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62d4kM1swHDYKx_TPBpo-PJBXMs.roa
Signing time:             Wed 08 Mar 2023 18:05:13 +0000
ROA not before:           Wed 08 Mar 2023 18:05:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:186:c265:3ef6/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c2:66:0d:70:9f:9b:27:9e:8a:96:d7:e8:1b:db:24:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  8 18:05:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb677890cd6cc070d82b1fd33c1a68f8f2415ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:8b:c5:9d:35:29:39:db:07:42:f6:be:2d:
                    b5:f3:79:ec:d4:d1:f5:d3:f6:a9:32:b0:be:6a:b7:
                    c7:e1:66:c7:38:5c:3f:b0:63:5a:79:14:af:dd:32:
                    83:46:4a:40:27:5a:5b:2a:4e:d2:9b:90:40:8d:76:
                    95:15:ab:7f:be:52:b4:7f:97:84:e7:d1:a6:c3:c9:
                    9f:cd:c4:e6:c5:21:83:e1:9b:06:f7:e0:ac:6e:f4:
                    91:2a:02:bf:18:24:95:54:8e:db:62:a8:48:49:87:
                    34:7d:b9:ac:f5:8b:39:66:23:a3:56:38:f7:4d:88:
                    22:bd:82:db:90:66:79:e3:15:fe:9d:df:c2:e3:20:
                    b6:8b:4e:16:6f:d7:a3:f4:f0:a5:77:ce:6f:c3:97:
                    dd:43:d1:58:74:82:ae:ec:36:6b:9e:44:30:8d:41:
                    12:f6:88:73:88:7e:e9:68:ea:8f:3c:c7:74:d7:33:
                    71:f3:4f:2e:f3:06:62:ea:f0:65:f2:54:33:a9:2b:
                    be:52:b1:b1:b1:16:b8:54:ac:98:98:b6:21:c4:f9:
                    c6:f4:86:e6:7f:0a:9c:00:1b:50:86:d2:4b:04:45:
                    95:74:c6:b1:29:ce:30:fa:76:e8:20:2b:cf:79:e5:
                    0b:8f:73:4b:9a:81:75:44:a7:64:c8:c7:2d:cb:78:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:78:90:CD:6C:C0:70:D8:2B:1F:D3:3C:1A:68:F8:F2:41:5C:CB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/62d4kM1swHDYKx_TPBpo-PJBXMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:79:35:2b:2b:13:06:c7:a3:38:93:fb:29:a6:47:d4:df:
         46:28:49:40:d5:3e:fa:04:0a:e6:e6:c7:7b:fa:01:de:03:ab:
         af:96:d1:0b:e5:fe:ca:e8:0e:5a:c5:60:db:dd:61:fa:b2:41:
         fa:bd:e8:16:e6:c5:f4:ad:51:a1:69:b2:f6:ae:27:ec:03:62:
         4d:38:a8:fe:55:90:8f:d6:fb:c6:94:ce:e0:2c:8f:05:c9:1a:
         27:4a:be:70:46:f9:45:af:84:1c:7d:d7:9f:ef:49:ad:6d:f5:
         a2:51:2d:8d:1c:06:83:57:4f:0c:bf:de:4b:ae:11:3c:b6:83:
         7e:52:ff:e5:41:3a:39:ff:44:e3:b6:f3:85:54:fe:38:f2:48:
         b4:7c:48:b2:8f:90:90:74:e1:b6:7a:83:dc:83:54:7d:36:9a:
         ae:0e:93:f6:2a:33:e9:a3:87:85:d3:74:d0:16:9f:bc:16:a6:
         c4:e8:9a:af:80:46:13:3e:9e:8b:f9:48:12:49:9a:75:41:48:
         03:19:d5:71:3a:d8:d2:60:42:3d:64:dc:e4:37:06:f4:4e:a8:
         7a:48:fa:46:c2:e6:a5:44:b0:32:e3:00:41:2f:d6:7c:8e:a8:
         fc:21:87:1e:8d:a2:de:a5:8a:f5:75:fe:93:b8:a7:d7:2f:52:
         28:1f:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----