Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtHc1jHfJTvIKvCygQKQnbO4Trs.roa
File:                     QtHc1jHfJTvIKvCygQKQnbO4Trs.roa (raw, json)
Hash identifier:          MMovPpWC2si5FpEcGKntSEteKUWsTiwkdLvdpbrAUkY=
Subject key identifier:   42:D1:DC:D6:31:DF:25:3B:C8:2A:F0:B2:81:02:90:9D:B3:B8:4E:BB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A57A6DB5AE311052A0D40291C423C69D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtHc1jHfJTvIKvCygQKQnbO4Trs.roa
Signing time:             Fri 03 Mar 2023 03:18:29 +0000
ROA not before:           Fri 03 Mar 2023 03:18:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a5:7a:6d:b5:ae:31:10:52:a0:d4:02:91:c4:23:c6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 03:18:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42d1dcd631df253bc82af0b28102909db3b84ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:f3:30:0e:61:f1:7c:f1:5f:7f:96:37:35:
                    1d:d2:42:c4:ea:68:0e:15:1b:a4:ba:ec:5a:fb:a5:
                    fd:a6:e5:d2:48:85:ec:a0:55:a0:48:57:7f:5f:99:
                    1c:3e:3e:a6:e0:8e:cd:95:17:23:79:f9:55:63:74:
                    c6:29:dc:92:68:ba:1c:38:03:6b:65:d8:de:fb:d3:
                    33:fe:d9:dd:02:5d:d3:8e:40:fa:1b:d8:e6:47:81:
                    0f:90:4c:7f:b4:29:fa:e6:5b:b6:68:59:73:40:a9:
                    a7:20:9b:40:c1:da:2f:e4:49:c2:0f:ea:6d:0c:82:
                    70:72:83:35:96:89:ce:cb:30:ac:61:63:2e:f1:28:
                    f4:77:63:13:89:4f:c0:7d:55:fb:f4:41:0f:3b:3a:
                    d6:4c:83:35:e7:14:2c:24:e6:6b:2f:60:78:f9:b9:
                    3c:df:2c:f2:9b:01:2a:98:02:90:52:9c:dd:c4:ad:
                    b9:be:2f:f7:19:60:af:d8:32:e7:f2:97:46:97:db:
                    91:b8:f9:05:1d:75:36:87:50:df:6a:98:28:e1:9e:
                    59:7d:68:c7:02:d2:5f:c5:5d:17:06:8b:04:47:77:
                    13:d1:93:28:e4:7a:78:00:26:2a:bc:bd:96:0e:d0:
                    1b:9d:d1:9b:fb:07:18:21:dd:d1:69:71:67:0a:89:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D1:DC:D6:31:DF:25:3B:C8:2A:F0:B2:81:02:90:9D:B3:B8:4E:BB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/QtHc1jHfJTvIKvCygQKQnbO4Trs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:0d:d3:ac:f3:52:14:8c:6b:11:17:29:5f:9b:45:19:08:e6:
         f5:c6:07:66:7f:55:10:e3:74:91:2d:82:2c:26:ec:77:06:90:
         4e:17:c3:f0:17:3c:4d:cb:81:4d:5b:81:73:89:2b:81:20:57:
         db:8c:93:70:36:bf:db:6a:90:79:59:f5:a6:ca:d6:a1:eb:d5:
         d3:4f:2e:9f:ab:ee:99:b9:d3:f7:77:34:86:ff:6b:3b:92:93:
         9d:e7:96:45:c4:22:c7:cb:65:10:81:9b:2d:0d:c8:dc:d5:3f:
         de:e8:39:be:82:be:83:23:94:fd:60:32:1c:da:a6:81:36:f3:
         6c:08:1f:e5:f3:1e:08:24:23:c3:3a:83:a3:21:31:01:c8:a5:
         9c:36:e1:9f:43:d1:68:9b:ce:ad:a6:a4:a7:fa:68:e7:09:69:
         2f:a0:cb:4b:6d:09:77:33:d7:dc:6a:1b:39:19:11:a7:c7:72:
         9c:bc:83:b6:b7:4c:b8:1f:2e:91:f2:86:98:aa:cf:c5:8e:28:
         01:f4:82:97:47:8d:1d:73:ed:79:2f:a9:06:f2:a6:49:9c:d9:
         65:01:51:38:3a:5f:cf:ad:50:e4:e0:de:ec:ab:d2:1a:0b:23:
         a3:36:40:f7:23:a8:21:82:c0:ac:ab:90:8a:94:ad:40:fb:cd:
         03:0f:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----