Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HFC3oh_no4C-zAPOnPU0pUDMTHU.roa
File:                     HFC3oh_no4C-zAPOnPU0pUDMTHU.roa (raw, json)
Hash identifier:          P5argESP1vKeQwuFrrXHUUzdfg6h7ItZ6sXfJRGgiMI=
Subject key identifier:   1C:50:B7:A2:1F:E7:A3:80:BE:CC:03:CE:9C:F5:34:A5:40:CC:4C:75
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018706D88A23A8866E4792C4AA7595A31C86
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HFC3oh_no4C-zAPOnPU0pUDMTHU.roa
Signing time:             Wed 22 Mar 2023 01:04:27 +0000
ROA not before:           Wed 22 Mar 2023 01:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:187:6d8:5551/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:06:d8:8a:23:a8:86:6e:47:92:c4:aa:75:95:a3:1c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 22 01:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1c50b7a21fe7a380becc03ce9cf534a540cc4c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:cd:5c:ff:ba:4e:77:a1:b9:02:a9:44:15:
                    9b:d9:bb:44:ca:03:60:74:9b:03:54:1c:e5:b4:b7:
                    2a:16:b3:57:57:7d:fa:88:eb:95:6a:23:f1:14:fa:
                    7c:a3:88:a1:f8:49:41:b8:1e:eb:83:a8:4d:1c:fe:
                    69:3e:f9:35:4b:88:b6:31:92:ed:ad:82:ff:33:fb:
                    f6:c4:11:9e:36:15:b0:77:fc:7f:fc:ba:05:0e:66:
                    99:9e:88:0c:8d:10:1f:71:56:b2:2d:be:3e:0c:dc:
                    c9:9c:f6:6e:fe:d2:0b:82:e9:80:3f:4b:e3:7e:61:
                    33:27:71:7b:db:5c:41:ce:c3:e6:a9:96:77:42:9a:
                    6b:ee:f5:32:af:a0:4e:56:5f:60:a4:c0:fa:55:c9:
                    bb:2f:b4:f0:c5:99:f0:a0:21:eb:3c:05:ff:f1:0e:
                    37:9a:e3:69:e7:9f:1f:ae:d4:5d:fc:1a:dc:26:c6:
                    93:1d:c4:d7:69:d0:2d:bc:86:ef:fd:97:bf:15:cf:
                    c9:46:f3:ad:a3:e3:24:8d:6b:30:09:e1:73:7d:01:
                    a8:ba:16:7e:35:83:29:11:14:a8:38:89:81:55:1c:
                    c2:25:0d:06:8f:72:c2:0b:fa:8f:ce:c9:ab:1a:c5:
                    18:6d:a7:44:15:b1:c1:cc:11:5d:c1:84:c2:c5:94:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:50:B7:A2:1F:E7:A3:80:BE:CC:03:CE:9C:F5:34:A5:40:CC:4C:75
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HFC3oh_no4C-zAPOnPU0pUDMTHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:07:08:fc:24:a8:cd:7b:71:29:3f:bd:78:8f:d7:35:4c:
         f4:bf:36:32:c4:74:0f:8c:a6:5e:0a:18:e3:9a:20:44:ac:22:
         06:82:fb:bf:6d:14:82:58:df:ad:a4:26:f3:8b:b1:d0:8d:59:
         68:52:a2:b5:79:b5:04:d4:2c:e3:09:5c:56:6f:ba:dd:96:de:
         16:d6:a7:94:49:e5:de:a0:1d:f0:8a:1f:a1:f1:ce:92:d2:12:
         4f:50:26:f8:0d:93:28:2c:3c:01:34:99:14:11:8e:65:ba:c1:
         2f:3f:76:ed:18:2b:79:80:1e:85:5e:cd:6e:b4:de:91:11:13:
         5a:ec:9d:1a:b2:27:52:90:d2:ea:7a:b0:6a:34:84:96:50:1b:
         d4:7c:f6:c5:f1:61:f3:61:9b:8f:a1:72:0a:52:38:18:ff:b2:
         52:79:73:7f:b6:a7:b9:4e:e0:34:ae:8f:e1:94:7a:84:aa:10:
         53:27:cb:3e:e0:9f:4f:18:c7:11:b1:52:fc:03:90:4f:40:6f:
         ad:8e:4b:5f:3d:8f:29:81:ab:cb:2e:de:8b:56:e4:2a:3b:cf:
         aa:b8:bf:7d:0a:36:98:f4:40:ec:97:cc:95:82:fa:0f:fb:83:
         eb:58:65:3b:06:52:67:39:09:51:c1:e4:f5:02:c3:e3:f6:3d:
         c5:6d:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----