Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fLN76Zc1qWsU3cRdNqi56-8JMs.roa
File:                     8fLN76Zc1qWsU3cRdNqi56-8JMs.roa (raw, json)
Hash identifier:          xisOTwnPbFyrVdcCevC1NB6+pW7GBbvDdWMZkY4Ayd0=
Subject key identifier:   F1:F2:CD:EF:A6:5C:D6:A5:AC:53:77:11:74:DA:A2:E7:AF:BC:24:CB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187B69B44239E7FD998D95DF43460D73DA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fLN76Zc1qWsU3cRdNqi56-8JMs.roa
Signing time:             Tue 25 Apr 2023 04:10:41 +0000
ROA not before:           Tue 25 Apr 2023 04:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b6:9b:44:23:9e:7f:d9:98:d9:5d:f4:34:60:d7:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 25 04:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1f2cdefa65cd6a5ac53771174daa2e7afbc24cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:64:87:cd:74:eb:c3:f9:c2:fb:02:d8:43:85:
                    1e:3a:47:04:3f:fe:d3:09:f8:1d:1f:d8:aa:23:68:
                    47:36:72:c2:16:eb:02:49:f8:da:11:16:e8:0a:4f:
                    9c:27:c1:60:f2:4b:04:b3:41:19:86:0b:06:d1:ba:
                    46:03:9d:b4:56:18:9c:77:fa:7c:e7:f6:d0:58:4a:
                    da:b0:10:d0:bb:d7:dd:5b:62:86:b1:c3:d4:e7:2e:
                    07:e2:eb:09:41:b4:be:ac:ae:d7:1d:fb:4a:5f:43:
                    06:2d:ec:2e:78:fd:4d:7d:78:1f:23:99:f2:db:c9:
                    25:5c:24:1c:f9:f4:ac:e6:e7:a6:b3:28:15:b8:78:
                    1d:d6:d3:14:20:e6:a9:0b:8c:ec:83:c6:ee:11:b7:
                    90:3a:9b:f1:e0:ef:c1:b1:68:9a:9c:59:ec:ed:03:
                    b1:86:c5:c8:bc:1b:ce:b6:c1:8c:c1:dc:24:4d:2d:
                    0d:87:81:df:f0:51:33:1d:a4:81:d4:d0:3c:a4:fe:
                    ea:a6:cd:d6:61:9b:d9:0e:6d:ab:79:c2:e4:ad:91:
                    a4:ef:74:6e:12:af:f5:82:0f:d1:de:8b:a8:ab:c3:
                    93:df:6b:49:24:7a:75:e2:00:ed:18:8c:00:51:2b:
                    13:50:b0:b8:ae:c6:d5:be:c6:e9:56:bb:5d:3b:75:
                    6e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:CD:EF:A6:5C:D6:A5:AC:53:77:11:74:DA:A2:E7:AF:BC:24:CB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8fLN76Zc1qWsU3cRdNqi56-8JMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:a2:00:ea:20:36:20:57:56:22:7b:dc:b1:72:3c:2f:96:
         8c:f0:28:8d:cf:0e:69:d2:dd:68:f3:b5:95:e3:2c:6a:df:78:
         c0:ae:97:37:05:ba:25:a3:08:01:a2:37:95:c1:76:cf:74:b1:
         e7:23:a2:75:99:d7:4a:db:ea:67:e7:ba:e4:55:f2:75:9c:f0:
         13:a9:c5:08:c0:1a:f5:c9:a1:b0:e7:16:87:a0:f7:9c:d2:b3:
         1b:e5:43:64:57:7b:a3:c6:59:d2:e6:a0:9f:ad:fd:c6:0f:92:
         93:ca:40:c6:92:39:7c:0e:11:b5:7e:50:23:9a:d9:6e:67:de:
         eb:8a:5b:aa:d9:b5:71:c3:7c:64:f8:ee:ae:94:4b:ba:c7:72:
         86:14:27:b2:e8:d2:df:53:68:1c:ab:0f:cd:96:3f:b4:fc:14:
         67:74:36:c6:0d:2e:f3:94:a4:eb:0f:bb:ef:f5:95:e3:39:04:
         f4:d1:cd:4f:19:d2:6b:1d:08:54:42:14:2a:51:62:6c:d2:9f:
         e4:cc:91:bc:a6:6c:c0:cc:6c:18:ca:4d:26:e3:93:d3:c5:09:
         4b:4e:c6:b6:eb:5e:86:82:8a:97:0b:a6:24:4b:e5:68:35:04:
         1a:62:9c:a7:f1:33:0d:f5:85:05:bc:aa:1a:df:90:17:7c:56:
         4c:f0:fa:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----