Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uky2f0HsdDUwYFrKC1s1YmnIV-E.roa
File:                     Uky2f0HsdDUwYFrKC1s1YmnIV-E.roa (raw, json)
Hash identifier:          kjS1vhMGJbFmSEWDjGgK3Vj+TVjkW5k0zhObpuxVaS0=
Subject key identifier:   52:4C:B6:7F:41:EC:74:35:30:60:5A:CA:0B:5B:35:62:69:C8:57:E1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0189827361A926021172740E4BD6477987C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uky2f0HsdDUwYFrKC1s1YmnIV-E.roa
Signing time:             Sun 23 Jul 2023 11:12:26 +0000
ROA not before:           Sun 23 Jul 2023 11:12:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:82:73:61:a9:26:02:11:72:74:0e:4b:d6:47:79:87:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 23 11:12:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=524cb67f41ec743530605aca0b5b356269c857e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:19:a0:c6:17:5d:dd:8d:a1:d7:14:2c:b6:
                    bc:76:52:3c:5b:a5:6a:ee:a8:b4:3d:90:eb:8e:69:
                    6b:d6:17:84:00:21:f9:b7:b0:14:2e:31:67:3f:be:
                    cc:6c:d1:bd:4e:e3:25:5c:71:89:2e:ca:f1:94:9a:
                    a5:c9:72:94:ce:64:a5:c5:c7:ab:f4:f9:0c:e8:c1:
                    96:cf:37:3f:ac:a8:fb:52:9a:a7:68:a3:00:d3:f2:
                    2d:95:ac:3b:44:07:86:f3:ec:1a:15:b3:f2:6f:0d:
                    48:2e:04:23:46:5c:6e:04:4e:b9:83:fd:e0:c4:af:
                    98:43:4b:4c:a7:a3:b5:59:df:0d:04:4e:99:ed:72:
                    50:c7:80:2a:11:bc:d9:04:68:4b:da:0c:f0:72:30:
                    d2:ca:83:22:8f:b1:e8:81:f3:ee:3f:ae:45:f3:83:
                    dd:63:0e:66:05:98:68:ca:a3:2e:ee:8a:88:32:ff:
                    81:50:95:ea:ab:47:48:39:18:69:5b:4e:e6:83:5f:
                    c1:b1:88:75:2d:50:5c:02:02:74:27:03:b3:74:e5:
                    19:00:a4:68:be:7f:dd:91:23:73:f9:4d:a0:3e:40:
                    59:ce:b7:e4:2d:53:ed:6b:f3:b8:74:73:b8:92:1c:
                    48:3f:55:d1:c3:9e:e4:2f:eb:dd:49:28:bf:50:f8:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:B6:7F:41:EC:74:35:30:60:5A:CA:0B:5B:35:62:69:C8:57:E1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Uky2f0HsdDUwYFrKC1s1YmnIV-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:9a:23:75:b6:53:8f:1b:e7:13:93:68:f1:3d:32:72:26:
         14:cb:00:df:17:0c:95:8d:75:b2:95:0d:28:8c:fd:12:49:0a:
         8d:bb:f0:d2:5f:93:20:58:c6:05:16:9c:30:48:1f:90:ce:80:
         44:e1:70:97:33:74:0d:80:1a:bf:98:14:67:62:7e:4f:eb:00:
         e4:e5:3e:4c:4f:eb:23:3f:c1:f9:e7:3c:e6:f6:a3:c3:26:6b:
         03:00:be:a5:b2:a4:61:bb:ce:7c:63:8a:7a:88:cc:7e:53:17:
         26:f5:51:99:0e:82:7c:a0:9a:78:5e:28:01:c9:48:e9:e2:42:
         bc:59:a2:a3:ca:7b:8e:e6:17:51:82:86:99:cd:46:f2:bb:41:
         3a:23:45:6c:f4:0f:c6:00:51:34:16:a3:69:eb:ba:20:b4:9b:
         7f:35:a7:db:2d:8c:c4:2d:b7:56:d7:b3:38:a7:91:4a:ad:54:
         80:6e:ac:72:d9:52:83:69:9e:11:9a:2f:9e:12:e6:e0:cc:4d:
         86:8c:25:bf:d9:71:1e:cb:45:7d:8c:f2:f5:6a:33:d2:63:2e:
         4a:73:0c:a2:2d:af:c3:ad:bd:b2:b4:ba:b1:4d:6a:e5:2d:fd:
         bd:70:51:44:65:2d:31:1b:d2:ee:f0:b0:2f:b8:6f:54:4a:d5:
         cb:27:fb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----