Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FtrZT4uKy4mWbnDRmsWR8CD9AE.roa
File:                     9FtrZT4uKy4mWbnDRmsWR8CD9AE.roa (raw, json)
Hash identifier:          TxfEXEF4Opzhs1uD9s0dcpJ5rMbY60MM1qaqq1CxVo4=
Subject key identifier:   F4:5B:6B:65:3E:2E:2B:2E:26:59:B9:C3:46:6B:16:47:C0:83:F4:01
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187D0C718BC1D8462A85AF77008453AD4A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FtrZT4uKy4mWbnDRmsWR8CD9AE.roa
Signing time:             Sun 30 Apr 2023 06:08:41 +0000
ROA not before:           Sun 30 Apr 2023 06:08:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d0:c7:18:bc:1d:84:62:a8:5a:f7:70:08:45:3a:d4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 30 06:08:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f45b6b653e2e2b2e2659b9c3466b1647c083f401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4d:26:ee:cb:dd:02:1c:94:dd:ba:d5:66:c9:
                    97:ab:55:2e:ec:93:88:62:60:84:da:13:0e:ec:37:
                    a5:51:fc:f2:b0:9e:44:fd:1c:01:84:bb:f5:d2:ef:
                    de:63:94:71:a6:a9:f2:fa:0a:2f:8d:58:86:54:f4:
                    06:8a:0d:3f:64:42:7c:bf:51:d6:94:f0:0a:a7:49:
                    ad:7f:3f:c9:21:ba:90:b4:62:12:53:2d:e8:3b:11:
                    ff:5a:30:e2:89:64:72:ab:0f:0e:31:ca:2f:44:2d:
                    46:af:5b:aa:f9:ee:03:f8:15:8a:9d:1d:c7:d8:c6:
                    a0:f0:2e:36:4c:d5:46:9c:f4:66:3a:40:99:1d:d4:
                    ab:08:33:3b:2e:99:72:79:ff:c4:72:50:2e:79:dd:
                    05:31:8c:fc:bc:48:ca:d3:70:cd:f8:43:92:93:12:
                    af:be:f7:02:85:c2:fa:d8:5d:df:37:9e:7c:f0:d8:
                    8a:db:9e:4e:d0:85:61:d1:b0:e1:2f:54:a1:69:2d:
                    6c:93:ea:17:f8:1d:02:2f:49:fb:83:1a:b4:65:3b:
                    14:37:df:11:70:32:31:8d:a0:0b:78:b5:1e:26:57:
                    30:0f:fc:b3:e9:74:67:c3:68:6a:8c:09:87:ec:fa:
                    6f:4a:49:55:20:c1:73:80:cd:0e:aa:30:51:2b:e5:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:6B:65:3E:2E:2B:2E:26:59:B9:C3:46:6B:16:47:C0:83:F4:01
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FtrZT4uKy4mWbnDRmsWR8CD9AE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:86:e0:44:a0:46:bb:5f:d6:41:60:89:05:bc:1f:0e:73:
         37:4e:db:1b:38:63:e6:0b:6e:fd:97:fa:a2:c6:58:4d:57:ea:
         44:c4:fd:88:3c:71:af:a2:74:4c:ec:14:aa:4d:6b:c4:e4:5b:
         ec:57:27:b7:31:39:07:4e:0a:d1:97:ea:e3:d5:c3:0b:7a:18:
         66:40:36:c6:6f:61:b8:8f:5e:ff:9f:09:28:f2:31:09:98:6d:
         56:9b:cc:05:65:a9:d8:3b:fc:2a:d4:5e:25:56:1f:79:0c:49:
         08:91:5c:17:67:30:dc:ac:82:4d:1c:b1:2a:16:68:79:cd:23:
         67:41:80:dc:e8:8a:23:c2:b2:62:0c:7f:fa:2b:fc:ba:69:03:
         fd:5a:09:d4:55:6d:42:71:67:ab:65:85:9f:43:dc:c7:bc:c3:
         f5:02:0f:84:9b:81:65:93:da:d3:bd:3d:76:90:b6:e0:3a:31:
         e7:6d:7e:3c:53:56:0f:42:df:51:ba:0c:8b:11:78:db:e5:62:
         62:d4:17:49:ca:63:6c:2d:ef:c7:ec:e0:ce:8f:49:c1:62:79:
         02:bd:6a:fc:2a:7b:27:d7:e3:6f:dd:15:ca:d7:b0:d8:9e:06:
         5a:a5:91:a6:5b:a8:84:1f:91:50:55:01:e3:6a:e4:d8:3c:73:
         0f:ec:82:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfQxxi8HYRiqFr3cAhFOtSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDMwMDYwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDViNmI2NTNlMmUyYjJlMjY1OWI5YzM0NjZiMTY0N2MwODNmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik0m7svdAhyU3brVZsmXq1Uu7JOI
YmCE2hMO7DelUfzysJ5E/RwBhLv10u/eY5Rxpqny+govjViGVPQGig0/ZEJ8v1HW
lPAKp0mtfz/JIbqQtGISUy3oOxH/WjDiiWRyqw8OMcovRC1Gr1uq+e4D+BWKnR3H
2Mag8C42TNVGnPRmOkCZHdSrCDM7Lplyef/EclAued0FMYz8vEjK03DN+EOSkxKv
vvcChcL62F3fN5588NiK255O0IVh0bDhL1ShaS1sk+oX+B0CL0n7gxq0ZTsUN98R
cDIxjaALeLUeJlcwD/yz6XRnw2hqjAmH7PpvSklVIMFzgM0OqjBRK+ULOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPRba2U+LisuJlm5w0ZrFkfAg/QBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOUZ0clpUNHVLeTRtV2JuRFJtc1dSOENEOUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC3khuBEoEa7X9ZBYIkF
vB8OczdO2xs4Y+YLbv2X+qLGWE1X6kTE/Yg8ca+idEzsFKpNa8TkW+xXJ7cxOQdO
CtGX6uPVwwt6GGZANsZvYbiPXv+fCSjyMQmYbVabzAVlqdg7/CrUXiVWH3kMSQiR
XBdnMNysgk0csSoWaHnNI2dBgNzoiiPCsmIMf/or/LppA/1aCdRVbUJxZ6tlhZ9D
3Me8w/UCD4SbgWWT2tO9PXaQtuA6MedtfjxTVg9C31G6DIsReNvlYmLUF0nKY2wt
78fs4M6PScFieQK9avwqeyfX42/dFcrXsNieBlqlkaZbqIQfkVBVAeNq5Ng8cw/s
gh4=
-----END CERTIFICATE-----