Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J4yPRfObGAt5UI3cysFtbf-mtU.roa
File:                     7J4yPRfObGAt5UI3cysFtbf-mtU.roa (raw, json)
Hash identifier:          QJN0ulSg1vBSui9tuP4lq4o792jyy+sW9QGXwRoBrSg=
Subject key identifier:   EC:9E:32:3D:17:CE:6C:60:2D:E5:42:37:73:2B:05:B5:B7:FE:9A:D5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01885E66A3A47C41F7F1E7739666F45CE4EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J4yPRfObGAt5UI3cysFtbf-mtU.roa
Signing time:             Sat 27 May 2023 18:09:24 +0000
ROA not before:           Sat 27 May 2023 18:09:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:5e:66:a3:a4:7c:41:f7:f1:e7:73:96:66:f4:5c:e4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 27 18:09:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec9e323d17ce6c602de54237732b05b5b7fe9ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:f5:c7:9b:df:db:a6:11:0e:a9:a5:8a:06:
                    b4:a6:9d:c7:31:3d:70:3a:a5:d3:f3:50:65:39:8e:
                    51:df:6a:38:7c:5d:cc:0c:eb:a0:9a:ba:59:50:e3:
                    c7:bd:95:64:dd:6d:4e:35:34:45:9e:ae:7c:43:55:
                    31:1c:4f:99:e7:a3:3f:bf:b6:f3:a4:5d:07:05:4a:
                    98:ca:01:fa:b7:f6:89:34:de:6c:62:5d:5b:96:48:
                    b2:5c:9e:28:07:c8:aa:ad:38:bf:34:99:b5:f2:78:
                    ee:0c:0a:db:74:00:25:37:2d:1a:6c:45:ba:61:80:
                    50:7c:1a:30:39:2d:6c:1b:30:7b:20:28:e6:83:ec:
                    40:a4:1c:3d:1a:da:5c:58:64:4b:26:b7:54:19:09:
                    64:b6:78:00:57:65:49:5e:36:93:f9:be:84:f2:61:
                    8e:4e:79:e0:7a:82:2f:a5:80:4c:af:2f:e0:3c:ba:
                    9c:79:f8:d1:24:9a:e5:f9:36:d8:24:40:82:69:4f:
                    3d:dd:b2:01:37:42:13:f0:7e:04:04:2e:31:d4:33:
                    39:cd:15:e1:84:2b:8c:29:9a:60:09:0f:fc:93:85:
                    3b:b0:18:88:ef:e8:8e:b8:d2:15:13:d4:2a:e7:f9:
                    dc:53:4f:b4:b7:4c:37:04:61:f3:3c:80:fb:52:c0:
                    19:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:32:3D:17:CE:6C:60:2D:E5:42:37:73:2B:05:B5:B7:FE:9A:D5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7J4yPRfObGAt5UI3cysFtbf-mtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:26:c0:f5:53:c3:32:fe:7e:b3:f2:c8:55:a1:6e:99:09:28:
         62:77:04:7e:ae:c6:29:19:97:f2:2a:07:13:4e:e3:bd:7e:71:
         34:dd:14:6e:16:c5:5a:83:ba:fe:af:2c:fc:a9:b4:2b:f3:be:
         76:94:fd:3b:1c:7c:12:14:f8:68:f8:b9:6c:b8:df:3c:77:e3:
         97:9c:24:c0:a3:63:bf:82:ee:de:bd:09:1d:8a:b8:a9:0c:2a:
         d1:59:42:a4:d7:2c:18:aa:2c:d4:d5:27:10:da:3b:78:bc:a8:
         e9:61:08:7f:d0:ff:48:99:63:4a:69:cd:ef:5b:7a:32:59:50:
         ae:a7:76:26:37:14:95:0a:3f:6f:52:84:a2:a6:03:dc:a8:f3:
         40:01:8b:a7:a1:33:e1:e8:7c:4a:50:16:23:1d:50:e3:32:15:
         74:ee:64:28:ef:d5:77:ca:4b:17:58:8e:35:2c:c5:f8:f5:3f:
         2c:18:84:e7:7e:80:45:39:af:3c:5c:01:94:16:28:a1:d2:e6:
         16:8a:9a:3d:9a:63:23:73:f2:da:8f:d9:ad:e1:d9:e5:25:ba:
         a4:91:31:83:82:ab:36:f8:87:01:a5:17:34:98:50:04:48:93:
         70:6b:f5:ed:9a:65:16:72:f4:e6:3a:2b:86:b7:f1:36:2a:fe:
         5a:13:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----