Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VQ2JSNCBB8tIj8BicGAS4ikk-n4.roa
File:                     VQ2JSNCBB8tIj8BicGAS4ikk-n4.roa (raw, json)
Hash identifier:          QflJIakywAqwoMxEJ64I7zR5AK9jtSC9hmiSehhMFV8=
Subject key identifier:   55:0D:89:48:D0:81:07:CB:48:8F:C0:62:70:60:12:E2:29:24:FA:7E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01874F60C45C86F0BF0A3B292273071911F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VQ2JSNCBB8tIj8BicGAS4ikk-n4.roa
Signing time:             Wed 05 Apr 2023 03:05:54 +0000
ROA not before:           Wed 05 Apr 2023 03:05:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4f60:58bf/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4f:60:c4:5c:86:f0:bf:0a:3b:29:22:73:07:19:11:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  5 03:05:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=550d8948d08107cb488fc062706012e22924fa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c6:b2:04:de:64:67:ce:f1:f2:d5:87:67:7c:
                    15:90:75:0c:85:34:82:f8:fa:2b:11:4a:0d:a3:93:
                    2b:98:98:95:17:2a:f5:68:7d:02:69:7d:ee:1f:61:
                    31:72:bf:c3:95:c7:2f:47:20:f8:61:94:79:02:cf:
                    89:71:a9:44:49:49:0f:ff:60:3c:2f:d8:a9:a7:33:
                    14:c4:83:77:e9:a0:6a:8f:b6:68:4a:ce:8f:23:65:
                    82:af:3d:20:45:f1:f5:cc:5f:d9:3a:19:7d:e4:7f:
                    e0:55:e9:39:d2:90:32:33:2a:e6:58:fb:bd:ff:4d:
                    02:9a:83:93:ad:4a:72:36:16:f0:ca:25:e7:4e:81:
                    bd:88:25:9a:be:09:44:f8:b1:94:a4:2c:79:ce:85:
                    b1:44:9b:9c:d5:6a:25:b1:43:45:08:3f:eb:af:56:
                    6d:d4:dd:04:4d:b1:1d:e1:80:89:a0:0c:6d:79:c0:
                    e8:54:24:0e:48:d0:7b:02:7d:61:1b:0f:d7:08:bd:
                    da:2c:8e:6b:50:14:bc:b9:93:36:47:e6:02:d9:a8:
                    f4:22:30:0d:cc:ba:39:91:8d:b1:25:c9:0b:79:ad:
                    f6:d2:71:63:81:aa:b5:2e:ad:1a:9f:71:07:ae:6a:
                    0b:a4:7e:82:29:75:28:fa:8f:76:76:81:8a:1d:7c:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:89:48:D0:81:07:CB:48:8F:C0:62:70:60:12:E2:29:24:FA:7E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VQ2JSNCBB8tIj8BicGAS4ikk-n4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:44:9c:64:17:61:ab:2b:a5:69:64:98:70:1a:9d:22:be:eb:
         b6:bb:92:47:81:d5:ed:e3:e3:d8:3d:08:38:d6:c0:55:76:19:
         8d:68:6b:b8:c4:4b:36:02:8b:6e:ba:54:26:af:a1:ef:17:99:
         96:c8:79:22:6b:fb:7d:0f:fd:8e:09:df:23:52:1f:18:e8:1b:
         ee:41:ec:2a:c2:f9:db:8a:04:d1:6b:29:f3:17:0a:24:d6:99:
         43:70:54:c8:ea:67:76:ff:48:92:71:4b:77:15:62:73:d4:c7:
         a1:f1:eb:c6:d4:0a:81:6f:9e:69:da:6e:19:6e:cb:2e:e6:7f:
         fe:30:da:79:ce:ee:c8:c9:c2:96:00:46:03:75:e8:95:40:7a:
         d4:41:79:ee:af:f8:63:63:b8:a5:1e:1b:fe:1a:39:0a:12:f4:
         db:57:78:53:7f:b1:18:c9:a8:58:bf:39:ad:95:90:61:f1:fc:
         76:e3:d4:e8:b1:c0:eb:b6:0e:25:6e:8e:f8:a5:85:2d:ea:87:
         ea:9c:97:5a:9f:ef:34:20:8f:4c:91:21:06:96:a1:23:06:e8:
         9b:8c:5b:9e:49:a6:a5:fa:1f:af:00:6b:e5:ca:a8:92:48:6d:
         ff:99:99:5a:9a:bb:1b:ce:d0:9f:1d:f7:e8:33:ed:b8:03:1d:
         47:cd:ce:5e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdPYMRchvC/CjspInMHGRH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA1MDMwNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTBkODk0OGQwODEwN2NiNDg4ZmMwNjI3MDYwMTJlMjI5MjRmYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ayBN5kZ87x8tWHZ3wVkHUMhTSC
+PorEUoNo5MrmJiVFyr1aH0CaX3uH2Excr/DlccvRyD4YZR5As+JcalESUkP/2A8
L9ippzMUxIN36aBqj7ZoSs6PI2WCrz0gRfH1zF/ZOhl95H/gVek50pAyMyrmWPu9
/00CmoOTrUpyNhbwyiXnToG9iCWavglE+LGUpCx5zoWxRJuc1WolsUNFCD/rr1Zt
1N0ETbEd4YCJoAxtecDoVCQOSNB7An1hGw/XCL3aLI5rUBS8uZM2R+YC2aj0IjAN
zLo5kY2xJckLea320nFjgaq1Lq0an3EHrmoLpH6CKXUo+o92doGKHXynbwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFUNiUjQgQfLSI/AYnBgEuIpJPp+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlEySlNOQ0JCOHRJajhCaWNHQVM0aWtrLW40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADdEnGQXYasrpWlkmHAa
nSK+67a7kkeB1e3j49g9CDjWwFV2GY1oa7jESzYCi266VCavoe8XmZbIeSJr+30P
/Y4J3yNSHxjoG+5B7CrC+duKBNFrKfMXCiTWmUNwVMjqZ3b/SJJxS3cVYnPUx6Hx
68bUCoFvnmnabhluyy7mf/4w2nnO7sjJwpYARgN16JVAetRBee6v+GNjuKUeG/4a
OQoS9NtXeFN/sRjJqFi/Oa2VkGHx/Hbj1OixwOu2DiVujvilhS3qh+qcl1qf7zQg
j0yRIQaWoSMG6JuMW55JpqX6H68Aa+XKqJJIbf+ZmVqauxvO0J8d9+gz7bgDHUfN
zl4=
-----END CERTIFICATE-----