Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8R6CI0Jp-gtInNGzXUIu1nUaAo0.roa
File:                     8R6CI0Jp-gtInNGzXUIu1nUaAo0.roa (raw, json)
Hash identifier:          S3RMqiJXYsoYz0lpWaOKDfWPgyO3cOeKH7Pd7ewzGds=
Subject key identifier:   F1:1E:82:23:42:69:FA:0B:48:9C:D1:B3:5D:42:2E:D6:75:1A:02:8D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187289116CBDB82BE61F81385B1173254E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8R6CI0Jp-gtInNGzXUIu1nUaAo0.roa
Signing time:             Tue 28 Mar 2023 14:13:29 +0000
ROA not before:           Tue 28 Mar 2023 14:13:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:28:91:16:cb:db:82:be:61:f8:13:85:b1:17:32:54:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 28 14:13:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f11e82234269fa0b489cd1b35d422ed6751a028d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:89:73:15:73:f5:35:90:cc:c5:58:af:67:
                    f9:78:8b:db:da:1e:01:e3:c7:80:14:69:b5:54:24:
                    81:32:65:75:ba:ce:c1:07:1b:10:01:7f:b3:4f:fb:
                    f1:e0:76:b8:c6:2d:a5:88:df:49:32:ce:b8:54:da:
                    38:4e:ef:89:f9:55:01:14:0d:42:15:d8:94:6d:12:
                    09:ff:15:d5:6a:44:10:ba:b2:2f:47:99:68:48:39:
                    a2:1a:8e:40:72:62:1c:95:c4:47:76:33:05:e3:5f:
                    9a:e3:bf:98:3f:d8:e8:4b:1b:ba:0b:50:15:32:3d:
                    f6:bd:69:a8:3b:d3:16:b0:c9:dd:f8:64:54:eb:b5:
                    ca:28:18:4f:09:bd:d7:80:87:e9:60:74:f4:85:ab:
                    a2:73:2c:c7:63:a2:b1:9e:c3:33:3f:62:c7:3b:b8:
                    06:ae:1d:5e:37:68:98:f2:1a:02:2d:e8:f7:8f:29:
                    27:b3:97:40:a7:84:47:76:f9:12:1f:f9:84:20:7e:
                    67:a0:39:48:49:a4:16:8e:04:fb:be:2e:f6:22:8f:
                    72:0e:ed:1e:64:d6:7d:20:5e:6f:19:c1:c5:dd:17:
                    8c:b7:64:f6:b8:6a:c0:f4:a4:95:20:92:65:99:ec:
                    89:f7:b5:b2:6f:e1:30:96:45:b5:70:42:95:06:6d:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:82:23:42:69:FA:0B:48:9C:D1:B3:5D:42:2E:D6:75:1A:02:8D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8R6CI0Jp-gtInNGzXUIu1nUaAo0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:12:8c:ff:87:31:24:dc:ba:31:27:22:25:29:68:6e:04:
         15:3b:4a:4d:13:9b:a6:a0:c2:2b:79:cc:17:c6:b8:f0:c1:c9:
         e9:b5:86:dc:6c:0c:9f:04:39:cd:5b:78:37:41:ba:4f:08:2a:
         2d:e0:b4:d7:7c:56:75:61:57:93:6a:6a:19:af:e4:d4:86:0a:
         49:1b:a6:74:12:66:0f:f4:79:9c:69:0b:5b:81:95:18:b8:ab:
         d2:16:9c:6d:98:04:21:56:d2:f9:8f:a4:6a:db:4b:d1:62:16:
         c9:e4:35:b1:81:31:8e:d8:5e:38:28:f4:53:e9:03:4d:86:61:
         1b:12:90:3e:a4:59:5b:fc:ee:b4:4b:90:76:19:00:92:69:a5:
         5c:dd:ce:cd:f3:83:67:27:e3:1b:6c:58:d4:78:bf:56:1e:d0:
         d3:99:64:16:0b:46:f6:88:5d:14:41:35:97:6e:79:4e:ba:7c:
         c7:d9:0c:4e:75:de:e5:ae:fc:c6:9b:c7:59:36:e4:48:b9:36:
         47:dd:45:20:c5:a9:63:c8:05:39:e5:30:4a:f0:c5:39:7d:60:
         11:c5:34:15:fe:f3:0d:51:93:e3:43:9a:87:8d:f0:3a:4a:f0:
         aa:66:bd:e2:5a:78:f7:e8:6e:c5:e5:38:8c:83:c4:ae:3b:24:
         1e:0b:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----