Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7es2Qc1g2kS-ZuS8Ol7M9a_e0Yc.roa
File:                     7es2Qc1g2kS-ZuS8Ol7M9a_e0Yc.roa (raw, json)
Hash identifier:          P8wOPrZ2PqSbkUbeR/DKrwnQ3jLmpWp6xvkChL9PpK8=
Subject key identifier:   ED:EB:36:41:CD:60:DA:44:BE:66:E4:BC:3A:5E:CC:F5:AF:DE:D1:87
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186EBCF283D45F65389F41731FACC38838E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7es2Qc1g2kS-ZuS8Ol7M9a_e0Yc.roa
Signing time:             Thu 16 Mar 2023 19:04:27 +0000
ROA not before:           Thu 16 Mar 2023 19:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:186:ebce:e55b/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:eb:cf:28:3d:45:f6:53:89:f4:17:31:fa:cc:38:83:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 16 19:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edeb3641cd60da44be66e4bc3a5eccf5afded187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:fc:0b:ac:45:dc:7f:f4:7d:b9:07:19:b3:
                    c6:eb:31:a4:4b:1b:d8:22:59:49:ee:e3:bb:c6:b3:
                    03:37:18:71:6c:68:c2:8e:ab:d8:5c:00:6b:49:80:
                    10:c4:3f:08:28:c1:54:a2:37:a8:88:9f:28:be:be:
                    d1:43:62:73:db:a7:bf:78:fa:b2:0b:49:77:f1:2d:
                    b9:95:62:85:ca:f2:0b:e7:98:35:cf:0d:b8:79:bf:
                    e3:d8:17:62:a6:36:86:46:d6:5f:77:da:cc:d8:8a:
                    00:e2:4f:fa:b2:dd:c9:a4:50:f0:2f:db:18:e2:a2:
                    76:c3:67:ca:51:26:a3:3c:c9:73:75:57:2d:35:91:
                    f0:e1:69:a5:2b:de:46:a1:7c:0c:c1:6b:cf:82:76:
                    28:a7:ff:e1:86:70:06:b9:8c:03:83:37:e0:85:1a:
                    3e:d4:ac:1d:55:7e:8c:4e:a3:59:d4:03:2e:ab:42:
                    3b:c9:c0:35:77:88:ab:1c:95:06:dd:b0:48:ab:bb:
                    40:4a:0c:4f:cd:37:63:34:64:89:09:04:2a:c1:45:
                    48:cb:a5:b6:56:3d:26:85:30:ba:32:56:dd:d3:16:
                    4e:c8:c0:da:0d:e0:07:5d:1b:bf:96:d1:47:98:c6:
                    da:33:90:28:ad:9b:7d:ec:cd:4f:dc:73:68:ce:ae:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EB:36:41:CD:60:DA:44:BE:66:E4:BC:3A:5E:CC:F5:AF:DE:D1:87
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7es2Qc1g2kS-ZuS8Ol7M9a_e0Yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:c0:d9:f9:9f:26:46:63:66:bc:af:4f:ea:04:01:8f:47:
         98:92:21:d5:05:0f:01:64:eb:cf:0f:4b:f6:c1:83:c6:92:2e:
         11:57:30:b0:14:e1:1b:ea:eb:42:94:36:c8:86:53:9f:22:f0:
         f9:82:4c:08:fc:bc:75:52:8a:cb:51:9b:e1:1f:8a:57:77:c4:
         a4:2b:3b:92:8f:b1:70:88:50:b7:9a:94:70:c7:49:09:70:ff:
         9a:ff:7c:8d:43:24:91:c9:ba:62:59:6d:3a:21:19:40:be:df:
         78:8e:5e:9d:f1:36:c6:36:b9:d5:9f:ac:e2:74:7b:91:22:48:
         07:3d:91:b5:f4:d1:9f:f9:d3:46:28:c0:a7:91:ab:8f:39:7b:
         8a:05:d7:e4:7f:e5:88:41:16:18:89:50:af:33:7e:b1:fa:4b:
         fe:f0:fc:0b:5c:28:78:76:40:04:cc:85:c5:87:a3:74:3f:72:
         de:a2:38:c1:8a:eb:e1:87:a7:3f:fd:07:1d:b4:07:ab:3b:29:
         96:dc:6c:59:38:5c:1a:fd:f5:32:f8:e8:87:11:db:d2:2b:b9:
         fb:f0:71:b4:eb:a5:35:fe:88:81:44:ec:a9:44:ca:ac:67:b8:
         f3:5d:db:ea:67:ab:af:ab:b8:62:03:6f:36:87:02:4c:9f:3e:
         69:bb:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----