Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmxMnBAReWZodixa6aMvquH-A_A.roa
File:                     GmxMnBAReWZodixa6aMvquH-A_A.roa (raw, json)
Hash identifier:          b35pDu8voGgV+7o9hwp0FfX65yJ/jF+6IJk7LFgyoGY=
Subject key identifier:   1A:6C:4C:9C:10:11:79:66:68:76:2C:5A:E9:A3:2F:AA:E1:FE:03:F0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186CACACBD1B859DEEADF71BB5A0E4FC41C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmxMnBAReWZodixa6aMvquH-A_A.roa
Signing time:             Fri 10 Mar 2023 09:12:13 +0000
ROA not before:           Fri 10 Mar 2023 09:12:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ca:ca:cb:d1:b8:59:de:ea:df:71:bb:5a:0e:4f:c4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 10 09:12:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a6c4c9c1011796668762c5ae9a32faae1fe03f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4d:a4:14:b1:df:b7:83:83:8c:06:32:a6:e9:
                    c9:bf:b3:ad:39:1a:6a:f2:dd:17:c1:61:c5:d7:04:
                    e3:df:e5:7a:65:78:2c:86:dc:27:92:e1:fe:6c:55:
                    60:cc:ca:54:00:cc:db:86:b9:b7:bc:71:27:fc:c2:
                    b4:87:62:b7:78:13:df:bf:fe:78:47:6f:8c:b8:1a:
                    80:c6:59:5a:d8:cc:51:8c:0c:2d:37:f3:d6:8b:ba:
                    06:e1:b7:fd:14:c1:3a:9c:66:8d:fd:78:b3:5a:d9:
                    97:73:64:64:30:24:b1:62:09:00:3d:59:de:96:30:
                    73:07:ac:b3:34:0b:49:ce:68:70:59:24:fb:37:d1:
                    cb:45:fd:8c:d3:a8:80:90:34:db:41:a4:54:ae:3b:
                    2e:9d:9b:cb:be:90:54:03:79:31:0a:5b:aa:19:c4:
                    b2:7f:9d:d5:ae:8e:39:0a:57:75:9f:35:7c:3b:5b:
                    54:34:4e:1a:13:df:b4:b9:7a:3b:10:0d:5d:56:cc:
                    9e:d3:28:4c:63:85:bd:a8:89:eb:2d:a1:86:03:31:
                    79:26:3d:0b:1d:56:47:7f:b7:f7:e0:85:4b:4f:de:
                    ef:49:b3:ec:b3:b5:46:65:b8:99:0b:e5:64:28:6e:
                    2b:63:21:90:bf:20:39:10:d9:af:a5:c3:7d:00:aa:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:4C:9C:10:11:79:66:68:76:2C:5A:E9:A3:2F:AA:E1:FE:03:F0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmxMnBAReWZodixa6aMvquH-A_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:f1:94:07:58:15:9f:5f:fa:c3:5c:48:be:90:a6:fa:5e:27:
         30:81:c8:11:6c:fd:96:6a:84:b3:d6:76:66:fd:ec:5a:fc:ab:
         00:c5:87:d4:9d:df:dc:3c:76:e8:55:13:b3:f6:a9:da:5f:7a:
         c4:65:32:a5:b4:66:99:9e:21:58:e3:63:18:13:1f:5d:eb:03:
         da:14:8a:4e:12:c1:6d:37:5b:b9:1c:70:c7:ac:93:69:94:cd:
         20:2e:4f:cd:9a:97:c9:bf:81:9d:43:a1:61:83:f6:03:68:54:
         d4:2e:e1:e6:5f:37:74:dc:b5:d6:af:57:62:76:bd:fe:f7:a9:
         4e:b8:10:05:21:1b:e0:75:99:23:dd:69:82:c5:6f:95:dd:38:
         61:99:f4:46:b4:52:43:96:d3:3d:ee:89:91:3a:68:87:4c:b6:
         e0:e8:76:74:93:ec:17:5e:7b:ba:68:5c:ae:63:d9:c7:e7:b8:
         90:41:85:ba:57:de:71:be:b4:93:f8:8c:25:d7:28:4b:57:32:
         16:50:0a:f1:58:01:19:a4:df:5f:0b:fa:2b:bd:4d:3c:65:b4:
         f0:bb:17:37:09:ff:6d:d0:7b:32:71:d4:1f:e1:fe:95:4f:69:
         bf:cb:4b:0a:3c:f1:be:34:5a:20:ed:4b:0a:8d:f9:8f:07:02:
         1a:ff:90:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbKysvRuFne6t9xu1oOT8QcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEwMDkxMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTZjNGM5YzEwMTE3OTY2Njg3NjJjNWFlOWEzMmZhYWUxZmUwM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj02kFLHft4ODjAYypunJv7OtORpq
8t0XwWHF1wTj3+V6ZXgshtwnkuH+bFVgzMpUAMzbhrm3vHEn/MK0h2K3eBPfv/54
R2+MuBqAxlla2MxRjAwtN/PWi7oG4bf9FME6nGaN/XizWtmXc2RkMCSxYgkAPVne
ljBzB6yzNAtJzmhwWST7N9HLRf2M06iAkDTbQaRUrjsunZvLvpBUA3kxCluqGcSy
f53Vro45Cld1nzV8O1tUNE4aE9+0uXo7EA1dVsye0yhMY4W9qInrLaGGAzF5Jj0L
HVZHf7f34IVLT97vSbPss7VGZbiZC+VkKG4rYyGQvyA5ENmvpcN9AKrLiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBpsTJwQEXlmaHYsWumjL6rh/gPwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR214TW5CQVJlV1pvZGl4YTZhTXZxdUgtQV9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADvxlAdYFZ9f+sNcSL6Q
pvpeJzCByBFs/ZZqhLPWdmb97Fr8qwDFh9Sd39w8duhVE7P2qdpfesRlMqW0Zpme
IVjjYxgTH13rA9oUik4SwW03W7kccMesk2mUzSAuT82al8m/gZ1DoWGD9gNoVNQu
4eZfN3TctdavV2J2vf73qU64EAUhG+B1mSPdaYLFb5XdOGGZ9Ea0UkOW0z3uiZE6
aIdMtuDodnST7Bdee7poXK5j2cfnuJBBhbpX3nG+tJP4jCXXKEtXMhZQCvFYARmk
318L+iu9TTxltPC7FzcJ/23QezJx1B/h/pVPab/LSwo88b40WiDtSwqN+Y8HAhr/
kJM=
-----END CERTIFICATE-----