Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik3nod0Du6PHqeeSFE3P_nmNzsg.roa
File:                     Ik3nod0Du6PHqeeSFE3P_nmNzsg.roa (raw, json)
Hash identifier:          3tLv5eNqbUlEIlsV2anlheQ2+2gmzBDPSDNI8D4lpEU=
Subject key identifier:   22:4D:E7:A1:DD:03:BB:A3:C7:A9:E7:92:14:4D:CF:FE:79:8D:CE:C8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C75F8E34B5F33C709F70E6FF2CEEF497
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik3nod0Du6PHqeeSFE3P_nmNzsg.roa
Signing time:             Thu 09 Mar 2023 17:16:13 +0000
ROA not before:           Thu 09 Mar 2023 17:16:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c7:5f:8e:34:b5:f3:3c:70:9f:70:e6:ff:2c:ee:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  9 17:16:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=224de7a1dd03bba3c7a9e792144dcffe798dcec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:d3:b7:02:c8:df:00:fb:87:35:90:c9:6e:
                    7c:3b:99:2d:77:fe:ee:d9:58:d4:71:be:7b:e7:c2:
                    e1:5d:93:1d:1e:be:a7:fc:1b:29:25:56:3d:5b:a8:
                    2a:ef:3e:4e:66:5c:ce:20:f9:29:94:6e:7b:c1:46:
                    31:01:a0:14:c8:87:3a:13:af:4f:04:70:37:3b:ce:
                    f4:bf:3b:68:00:8b:16:09:a1:26:4c:8d:80:b1:3d:
                    e5:1d:91:c9:fa:e9:9b:23:3f:34:48:b1:97:2a:ec:
                    bf:ed:5f:38:b7:cd:c6:0e:d4:29:49:a6:23:b0:cc:
                    5a:0a:54:7c:94:23:05:d5:a8:4b:60:a3:2d:5d:b7:
                    2e:63:2b:de:b8:bf:97:6c:18:8d:7d:ae:43:f4:bf:
                    09:69:70:5e:a2:df:a6:44:e2:11:c3:ef:5a:17:19:
                    a9:f2:d6:76:97:23:eb:70:59:b9:25:c1:41:b4:4b:
                    cf:a0:19:50:76:88:a1:1f:b0:e0:cd:27:ee:f6:77:
                    0e:ad:36:ea:5e:0b:79:fe:54:a0:f6:dd:4e:a4:06:
                    8f:0a:c0:96:8e:32:2f:67:84:7a:67:94:f1:a2:fa:
                    bf:b3:9c:39:1f:1c:0f:70:c6:00:50:ac:5b:9f:a9:
                    cc:1f:f1:e1:58:66:b9:0f:03:1d:04:38:d0:5b:da:
                    b4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4D:E7:A1:DD:03:BB:A3:C7:A9:E7:92:14:4D:CF:FE:79:8D:CE:C8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ik3nod0Du6PHqeeSFE3P_nmNzsg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:d9:9f:7b:c3:35:2b:f6:0f:fb:e7:1a:e9:e2:7b:d4:e8:af:
         77:8b:56:8c:13:74:eb:c9:d7:1c:26:97:0f:c3:a3:89:78:60:
         db:08:e5:b1:73:ef:a2:42:9f:46:7d:de:f6:94:14:49:fd:bb:
         b9:cf:cb:f9:cd:09:2f:51:cd:0b:d0:8e:bd:7d:f1:07:d7:1b:
         bf:23:8f:75:70:5e:ea:0e:30:70:52:a9:46:1d:37:2f:3e:dd:
         bf:27:ff:56:10:59:95:40:42:cf:9d:1d:04:5a:b3:84:22:f1:
         8e:c8:f7:14:c4:7b:25:d6:f8:5a:61:24:b6:c6:b1:22:ce:0c:
         70:52:52:87:15:ec:b1:80:08:3e:3b:ef:b1:d9:e5:29:a3:07:
         b0:8e:61:ae:6b:8f:3c:03:6d:cf:6c:90:68:34:98:20:b3:93:
         e0:f1:ed:51:9d:ab:49:e6:b3:ce:6b:e4:ff:7f:e6:70:a2:6b:
         ad:19:c3:89:5d:50:88:76:55:74:1a:43:2f:f5:1f:da:e8:54:
         2c:7f:85:94:e1:0d:b6:68:f0:79:a5:31:2c:ae:e0:49:ff:5e:
         a1:02:50:84:fd:1d:7d:6a:c7:11:b7:14:a5:c6:0a:53:5d:4c:
         ea:69:e7:ac:52:49:ed:41:dd:2a:b3:5b:4c:16:40:c8:da:af:
         d5:d3:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----