Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwcUbXdwaPmVbQasRhb7KbDyL9o.roa
File:                     RwcUbXdwaPmVbQasRhb7KbDyL9o.roa (raw, json)
Hash identifier:          MnxYN/fFOPv00gCReHuOxQWm/eBw6EuTcDW6ULz038A=
Subject key identifier:   47:07:14:6D:77:70:68:F9:95:6D:06:AC:46:16:FB:29:B0:F2:2F:DA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186E11CCFEBED6B38D237268D7B0CC28C01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwcUbXdwaPmVbQasRhb7KbDyL9o.roa
Signing time:             Tue 14 Mar 2023 17:13:27 +0000
ROA not before:           Tue 14 Mar 2023 17:13:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e1:1c:cf:eb:ed:6b:38:d2:37:26:8d:7b:0c:c2:8c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 14 17:13:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4707146d777068f9956d06ac4616fb29b0f22fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c6:d2:32:83:80:45:d5:38:8f:95:19:a7:5d:
                    e0:ec:fa:8a:4b:65:fd:ab:a5:43:1b:ea:c3:bf:23:
                    f2:25:32:bb:1b:5f:56:5b:04:a9:a7:0a:4f:5a:b6:
                    f2:65:df:d6:4d:06:0e:0b:ec:97:fc:2f:ce:ca:12:
                    9f:3d:92:f9:ea:ec:3c:67:bf:e8:74:f9:d2:ed:5c:
                    2d:88:53:4e:33:3b:16:50:8c:fa:b4:39:b2:ba:b8:
                    9c:5e:6a:a2:78:3d:3f:89:84:f1:30:12:16:5b:2b:
                    41:10:e2:ff:5b:ff:b2:f6:e5:e2:76:8c:2f:f8:ce:
                    26:d6:11:d5:16:41:e8:52:f1:bd:a6:34:1e:e5:6b:
                    aa:18:dc:a6:31:68:bf:4a:8e:88:21:c3:85:94:42:
                    35:da:d1:06:e1:85:17:1f:3f:83:89:97:4c:6d:88:
                    a5:1d:63:c2:48:3e:aa:98:07:25:05:b8:1b:a9:99:
                    82:11:96:6f:ac:7d:3e:e8:d3:5a:c4:f6:fb:48:52:
                    47:6b:3f:4f:fa:cb:39:1e:f6:c8:8c:a2:11:d7:66:
                    b9:f3:da:71:ce:8d:34:ba:db:43:fc:8a:e3:31:45:
                    16:d5:4c:34:ac:d0:23:59:c3:1b:69:ac:b9:f8:4e:
                    72:72:bb:19:4a:06:ec:03:0f:d2:e4:58:04:72:9a:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:07:14:6D:77:70:68:F9:95:6D:06:AC:46:16:FB:29:B0:F2:2F:DA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwcUbXdwaPmVbQasRhb7KbDyL9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:85:fd:a3:d1:f2:75:f6:0a:26:de:1e:46:ce:68:44:63:
         e3:5b:4f:20:d5:e1:07:65:b9:2d:b8:43:11:25:b4:77:a6:7e:
         2b:2b:9e:89:86:b3:e3:0c:34:fd:ad:e6:9e:b4:9b:e0:63:ac:
         51:5a:18:e6:17:e9:a1:2d:e4:ad:1b:83:b7:db:df:f1:60:99:
         87:e9:07:90:58:5e:67:0d:47:c3:36:55:dc:c2:be:fe:b1:01:
         de:90:79:1e:a5:b3:33:3d:b1:87:c1:dc:91:77:1f:26:e6:9e:
         2c:75:59:2a:d4:87:0e:e0:32:fa:2d:52:f9:f9:55:52:66:4c:
         ae:c0:d7:45:f9:94:64:c9:9b:bf:f2:a4:ed:ca:18:05:d7:5e:
         68:d5:e1:4c:d2:72:96:df:e5:69:7f:f7:55:e2:cc:3c:ab:78:
         a8:d4:1f:53:d3:16:97:70:52:de:a6:ec:4c:12:18:40:97:36:
         c8:da:b9:c7:fa:a8:2b:b3:de:6e:e2:92:9e:d2:55:77:46:2e:
         4b:71:b8:4a:fd:e7:ed:86:6f:3c:ed:76:44:d4:37:da:04:1f:
         a3:c2:92:4e:0e:91:89:f9:ad:8e:04:4b:04:71:5b:25:69:3f:
         03:15:78:8a:4e:6d:1f:11:5e:f5:a8:3d:de:34:e3:8f:6a:c0:
         b6:7d:40:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----