Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZLTlhiu4c_v1TB9IAaY2wpXZqXY.roa
File:                     ZLTlhiu4c_v1TB9IAaY2wpXZqXY.roa (raw, json)
Hash identifier:          kDl1R1lR3TlLYz/TfaTOZh++C5mQ+Ehxzo9Hvl8sPqY=
Subject key identifier:   64:B4:E5:86:2B:B8:73:FB:F5:4C:1F:48:01:A6:36:C2:95:D9:A9:76
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018749D4CA452FFEE3B74C6B429F44A23A7C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZLTlhiu4c_v1TB9IAaY2wpXZqXY.roa
Signing time:             Tue 04 Apr 2023 01:14:54 +0000
ROA not before:           Tue 04 Apr 2023 01:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:49:d4:ca:45:2f:fe:e3:b7:4c:6b:42:9f:44:a2:3a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  4 01:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64b4e5862bb873fbf54c1f4801a636c295d9a976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:f6:69:07:7b:b5:1a:d5:2c:a6:53:a7:a8:
                    ad:ae:d4:86:9f:5f:f7:b5:ad:64:f6:ff:ac:ef:bc:
                    1d:32:2f:d6:cb:e0:17:7b:f9:a4:46:4f:43:54:ce:
                    bb:99:0f:c0:f6:8b:77:83:7e:a2:5a:ff:06:70:b0:
                    bb:af:dc:fd:3b:50:79:c6:e1:74:ef:8e:d3:db:ea:
                    11:b0:c1:9a:d6:f2:47:1e:2d:99:17:ad:fc:09:86:
                    e8:46:8d:a9:1c:b9:67:00:db:65:67:bc:d9:e9:d7:
                    b0:39:4d:c9:18:22:1a:7c:be:36:b4:d8:17:c4:d2:
                    0b:3c:95:2f:12:ed:76:d5:d7:2b:37:93:ee:5b:b1:
                    e4:0d:3f:95:c4:45:a8:ab:63:3f:29:f4:11:8d:c9:
                    61:7d:1a:99:eb:ea:a7:9d:bd:aa:b1:d1:62:94:6a:
                    fd:87:c1:2b:7a:a6:85:ca:d7:dd:ba:6a:1d:df:1c:
                    da:52:14:65:0e:e3:9f:6b:bb:3b:38:e1:36:37:c1:
                    04:c3:69:ea:5b:b1:f0:fe:fe:91:8c:a1:77:f9:4c:
                    97:4f:d8:55:fe:dd:f9:53:84:b6:a3:17:01:84:a0:
                    31:af:fb:5d:24:77:b3:3b:d7:42:06:37:6a:1d:76:
                    9f:f0:64:c6:fd:cf:3b:e7:1d:24:ba:fe:2c:dd:01:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B4:E5:86:2B:B8:73:FB:F5:4C:1F:48:01:A6:36:C2:95:D9:A9:76
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZLTlhiu4c_v1TB9IAaY2wpXZqXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:fc:ac:2f:78:f6:49:73:22:ae:f6:94:c8:0f:30:19:cb:
         36:d4:c9:5d:a2:d9:1d:bd:ba:df:54:e9:a6:ed:5e:c1:b2:9a:
         f2:5d:15:48:d1:9d:dc:b5:b1:da:cb:92:fe:3e:4c:2b:98:e9:
         cf:80:2b:51:70:39:17:07:46:be:42:db:cb:5d:1b:e1:1c:8b:
         40:0d:f4:d9:ba:04:e8:3f:47:b1:e0:a3:b3:f7:df:a2:5f:89:
         f8:1d:b9:1b:2b:de:ba:0b:33:a3:1f:b7:ef:80:9d:f7:65:9c:
         50:80:e3:96:55:82:48:68:06:13:05:bc:28:5d:4a:91:8c:48:
         a1:a3:3a:f0:8d:d8:86:eb:d2:de:3e:8f:e3:16:10:24:bf:7d:
         28:e9:73:f7:09:5a:d9:a9:09:08:83:4c:2b:8b:3d:cc:10:49:
         c1:bf:f3:15:78:8b:98:5e:16:b7:d7:85:2b:09:8f:dc:ce:6d:
         91:84:31:c8:89:5b:76:e6:f9:24:52:88:de:65:66:d8:e8:8c:
         a8:75:04:c3:f4:e7:4c:05:60:e8:d7:12:77:ed:51:5e:c4:47:
         94:37:3d:b6:55:fa:be:47:50:71:fb:af:d8:d5:99:7b:c2:d9:
         14:fc:e7:5a:39:81:f5:13:c3:ac:e1:12:eb:e6:28:76:f5:96:
         1a:75:cb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----