Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ATUMW3EWjBtN8nMWHfLdKokgP3A.roa
File:                     ATUMW3EWjBtN8nMWHfLdKokgP3A.roa (raw, json)
Hash identifier:          YLjjHxA+LCB6SPIZBua/3GTf5vLdt1Jrq7osCNtNl74=
Subject key identifier:   01:35:0C:5B:71:16:8C:1B:4D:F2:73:16:1D:F2:DD:2A:89:20:3F:70
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01887F3CD0D430D27D44F9529137CED54E12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ATUMW3EWjBtN8nMWHfLdKokgP3A.roa
Signing time:             Sat 03 Jun 2023 03:11:11 +0000
ROA not before:           Sat 03 Jun 2023 03:11:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7f:3c:d0:d4:30:d2:7d:44:f9:52:91:37:ce:d5:4e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun  3 03:11:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=01350c5b71168c1b4df273161df2dd2a89203f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:c9:bd:d2:a0:29:44:84:63:01:46:28:99:
                    0f:ad:96:4f:5c:ac:6a:05:e9:2f:bc:8f:31:da:18:
                    66:b1:54:6d:e4:34:83:7e:be:aa:71:25:c7:24:15:
                    b1:85:8c:45:d7:37:7b:15:0d:43:43:29:0e:d2:85:
                    f3:6f:c7:7e:33:5c:ee:83:6e:4a:e0:01:c9:46:f8:
                    d3:bb:48:3a:a3:03:b8:c4:18:ba:fe:47:ce:76:36:
                    55:bf:67:af:eb:cd:7d:13:25:2b:4f:67:ff:6b:7a:
                    8c:cf:40:e0:1f:d4:0d:1e:d6:f7:48:16:8f:60:58:
                    b0:08:e1:8d:0e:07:a0:11:17:38:e0:d9:db:c2:8a:
                    ff:85:69:fc:23:f7:ae:d5:95:6e:d6:9b:dc:87:c1:
                    da:5b:11:3e:25:0c:16:29:b8:34:82:33:8c:f9:ac:
                    62:4d:47:ea:be:7d:9e:ba:29:9b:cb:76:2c:0e:bc:
                    97:97:8b:6e:35:d0:16:01:94:81:1e:e5:ed:69:51:
                    5a:44:7e:c7:07:3b:5b:52:bf:f3:ff:54:53:c8:ef:
                    0b:42:11:5c:47:26:7a:30:5a:01:5e:c3:78:91:99:
                    84:a5:78:47:5e:6b:15:81:22:bc:9b:c0:db:41:8d:
                    ca:d0:69:50:d2:f4:72:e6:06:f2:a8:e8:5e:77:5a:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:0C:5B:71:16:8C:1B:4D:F2:73:16:1D:F2:DD:2A:89:20:3F:70
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ATUMW3EWjBtN8nMWHfLdKokgP3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:68:e7:03:72:0c:dd:be:d2:39:34:09:90:02:b8:cf:2f:37:
         41:c1:98:57:ba:17:7a:09:ea:74:90:81:5b:b6:d9:04:05:7f:
         7d:8a:34:01:a5:44:57:90:77:d0:13:72:a9:e3:88:e5:94:da:
         b8:e5:c4:5b:37:6b:a5:39:96:71:bd:1d:fd:ea:3e:4b:64:12:
         79:11:b0:53:46:52:b2:d4:50:f9:47:30:f7:1c:bc:16:f2:30:
         37:a6:80:c1:01:46:1c:dc:7c:2d:a2:0b:a4:fd:b0:1c:a2:58:
         4c:75:6f:0c:91:b7:fc:4f:45:8d:3d:80:2d:f6:27:02:c5:20:
         7d:8b:51:29:2c:26:b0:d8:ab:48:0c:f2:fc:82:b2:85:d3:5b:
         d7:37:f0:98:48:29:f1:d8:ab:0c:b6:73:83:ca:08:da:b8:29:
         37:19:01:27:08:be:91:b3:05:88:61:c7:de:e3:54:92:1d:76:
         af:a7:9f:c8:3e:7c:81:db:b9:bf:b9:e8:e1:53:65:ec:0b:e8:
         a7:83:b9:69:98:e1:e2:6b:35:74:0e:58:98:39:fb:79:9d:8d:
         bf:9c:9d:36:3a:3c:3b:da:23:5f:88:93:7f:a8:86:1a:d2:b1:
         01:e8:b3:37:11:3e:4f:e8:d7:f0:45:ce:e7:57:3e:b5:8c:99:
         27:13:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----