Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GW_po-Sy6hW85YU8lqZYJ12uiE.roa
File:                     6GW_po-Sy6hW85YU8lqZYJ12uiE.roa (raw, json)
Hash identifier:          gOppxexglrw6MdWJ1Xp/3ID4waVopvXOJAGKx9AD3tg=
Subject key identifier:   E8:65:BF:A6:8F:92:CB:A8:56:F3:96:14:F2:5A:99:60:9D:76:BA:21
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A913ED180B592624BEFF0B65752F77A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GW_po-Sy6hW85YU8lqZYJ12uiE.roa
Signing time:             Fri 03 Mar 2023 20:05:00 +0000
ROA not before:           Fri 03 Mar 2023 20:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a913:2f4e/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a9:13:ed:18:0b:59:26:24:be:ff:0b:65:75:2f:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 20:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e865bfa68f92cba856f39614f25a99609d76ba21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:bd:0b:da:d1:0d:5b:d4:26:63:a8:84:4a:
                    8d:f0:ef:14:a3:3b:01:13:8c:fd:e5:ff:78:01:fb:
                    cf:08:4e:e3:29:a5:b6:a6:65:a2:98:2a:94:bd:72:
                    37:22:61:a6:9e:3e:e4:0f:92:7c:ee:ba:4b:34:39:
                    0a:44:51:71:19:65:31:85:c4:5e:79:81:9a:9e:52:
                    e1:c3:71:48:40:77:a1:5c:37:91:30:dd:5d:ed:2a:
                    a5:63:e7:da:37:55:32:47:1c:39:43:68:39:d0:16:
                    7e:2f:dc:e4:54:3a:85:ec:0e:c4:09:19:a5:ac:f0:
                    14:9c:dd:7b:bf:43:5f:58:70:ca:44:ea:bf:b5:b4:
                    10:ee:a2:81:e7:7b:08:f0:c1:33:4c:09:48:f1:1d:
                    b9:26:71:0d:69:00:55:22:71:16:43:13:8b:ec:07:
                    de:9b:5d:0c:fa:8b:32:8d:e4:1c:d1:02:c1:cd:2b:
                    29:5e:f7:2f:2a:1b:cb:6b:9a:e4:1f:69:f4:bd:ea:
                    ba:74:53:65:1d:60:89:c3:01:9a:80:b3:15:16:c7:
                    62:30:08:d3:f3:c0:0c:08:cf:97:4c:73:ee:d3:a4:
                    a4:16:6c:ff:e4:30:fd:9e:f9:17:18:b3:d3:53:e0:
                    8f:21:12:b4:3f:c8:6c:c6:19:3f:ab:0d:50:9c:8e:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:65:BF:A6:8F:92:CB:A8:56:F3:96:14:F2:5A:99:60:9D:76:BA:21
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6GW_po-Sy6hW85YU8lqZYJ12uiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:14:d1:5e:dd:1e:45:0c:96:61:39:43:35:86:d2:6b:0c:
         5b:88:dc:e0:96:02:ff:ef:69:b7:fd:68:31:14:64:46:81:96:
         1a:61:a0:e5:00:5e:94:c1:13:45:6e:26:0b:56:3e:1d:be:a1:
         9a:d1:90:d6:e6:92:43:e0:a5:60:78:49:5b:1c:c7:9b:3b:ba:
         5b:9d:74:2b:b5:a2:9f:20:66:48:4c:31:d4:87:55:8c:3e:05:
         77:13:99:3d:c2:f4:70:c5:f7:77:b2:0b:de:ed:f2:5c:82:e6:
         e2:c5:87:11:2b:7e:65:82:08:ac:fc:0e:8d:ae:81:c0:2e:11:
         83:86:d4:60:5c:bd:49:26:f5:17:14:77:0b:36:17:8f:31:23:
         7e:b3:52:4b:9c:28:dc:10:c4:de:cf:c6:f2:4e:0d:c5:04:3e:
         84:08:44:34:a8:fb:7b:d6:10:b9:f7:94:69:95:96:a7:3d:a1:
         8b:00:13:e3:4e:68:58:14:8f:8f:d9:1f:dc:ee:f9:2c:24:35:
         d6:b7:62:d1:7c:fe:7b:1f:c4:a8:77:d5:8a:e6:51:e3:81:9c:
         1a:32:04:03:67:7c:a3:11:82:b5:70:37:de:79:e2:b0:cb:f0:
         51:26:fb:6f:4a:86:31:90:dc:71:25:49:dc:c0:c3:06:ae:8c:
         ef:78:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----