Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b5NZgRjVEqoqX2Is0OOPJ75lG5A.roa
File:                     b5NZgRjVEqoqX2Is0OOPJ75lG5A.roa (raw, json)
Hash identifier:          KOuYNW1Hf05EFZIejIsuT6rfmmZtxl9zs7NPYVzAZrs=
Subject key identifier:   6F:93:59:81:18:D5:12:AA:2A:5F:62:2C:D0:E3:8F:27:BE:65:1B:90
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186DBEEEDF1219FF8B23B1807360B738BB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b5NZgRjVEqoqX2Is0OOPJ75lG5A.roa
Signing time:             Mon 13 Mar 2023 17:05:14 +0000
ROA not before:           Mon 13 Mar 2023 17:05:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:186:dbee:13d/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:db:ee:ed:f1:21:9f:f8:b2:3b:18:07:36:0b:73:8b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 13 17:05:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f93598118d512aa2a5f622cd0e38f27be651b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:9e:1b:8e:d8:7e:47:9c:27:e7:5e:f7:6c:
                    db:2a:14:91:ce:7c:3b:f4:35:ab:74:02:26:9c:31:
                    fd:65:59:a6:e0:46:28:74:cb:db:f6:93:8e:df:04:
                    89:85:e4:37:c1:d2:60:17:f3:44:46:49:06:c2:aa:
                    a9:4d:12:ea:03:9c:e1:2c:ab:b8:ff:f4:9c:e4:dc:
                    d7:19:57:d4:0f:f9:36:79:05:cd:b1:87:5d:fe:c0:
                    81:0d:9b:dd:64:6e:02:d3:78:c9:0f:63:e0:1d:04:
                    7d:76:3e:0b:4e:51:2b:1e:db:b0:19:69:63:ca:a9:
                    14:80:7d:0d:5b:98:1c:c6:ab:c0:20:af:4f:00:c5:
                    ae:ff:e3:67:4f:fc:99:6a:7e:83:03:63:46:fb:0a:
                    17:4a:5f:be:09:6b:49:23:16:ba:e1:6d:72:d5:3f:
                    84:e5:1d:1f:b8:08:73:4a:4b:9b:06:54:67:51:b4:
                    cd:76:b8:b3:65:23:3a:ef:d2:64:f6:26:1f:8a:cf:
                    07:26:f5:c0:7f:a9:db:75:99:16:d7:86:34:0e:76:
                    41:ee:ec:73:b5:e7:53:bb:70:d1:51:37:7b:50:7e:
                    8b:5b:c4:66:83:0d:46:7a:64:ab:b8:19:9b:74:e2:
                    fb:f2:98:c8:1e:cd:b3:48:2d:95:d3:8f:e2:5a:0f:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:59:81:18:D5:12:AA:2A:5F:62:2C:D0:E3:8F:27:BE:65:1B:90
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b5NZgRjVEqoqX2Is0OOPJ75lG5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:4c:9e:20:dd:e7:ec:62:c2:22:fc:47:46:da:50:c8:b7:98:
         d8:4b:4f:f5:a9:61:87:c8:9d:91:19:4e:c5:2a:06:25:31:17:
         3d:d3:cb:98:0f:e2:2d:e6:df:35:6e:56:0b:eb:1e:8e:f3:7a:
         06:99:e2:3f:fd:b4:ed:75:d8:a2:fa:d6:42:46:bd:f9:c8:90:
         e4:e8:e8:04:65:13:e9:68:bc:1a:ed:5d:0f:1c:bb:0b:1d:c2:
         77:53:c1:1e:6d:3e:e5:ae:26:79:75:26:84:84:43:d3:d4:4b:
         72:30:bb:62:68:b8:f9:7b:cb:49:e8:b3:d3:3d:98:50:d5:a1:
         4a:dc:f2:1f:b6:d5:98:f9:dc:03:f2:a5:bf:28:b8:e2:87:d7:
         8e:da:7b:e1:d2:a4:2b:6e:8e:8d:4e:52:ac:f3:1e:70:b2:0e:
         b9:e7:e8:fd:c8:92:74:93:fe:56:b2:35:86:d6:fa:9f:b7:91:
         37:03:82:3e:f4:1a:b1:10:47:09:13:0e:f9:da:d8:a8:d5:9f:
         da:97:ff:30:88:15:08:2f:44:86:69:2b:dd:dd:e2:f0:37:85:
         b3:62:d7:a0:c0:8d:20:09:33:d2:cf:06:7f:1b:ba:c5:83:13:
         01:f7:49:ba:1e:cf:eb:b7:64:db:00:82:3e:b5:57:2d:ce:da:
         b6:92:a5:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbb7u3xIZ/4sjsYBzYLc4u5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEzMTcwNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjkzNTk4MTE4ZDUxMmFhMmE1ZjYyMmNkMGUzOGYyN2JlNjUxYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd+eG47YfkecJ+de92zbKhSRznw7
9DWrdAImnDH9ZVmm4EYodMvb9pOO3wSJheQ3wdJgF/NERkkGwqqpTRLqA5zhLKu4
//Sc5NzXGVfUD/k2eQXNsYdd/sCBDZvdZG4C03jJD2PgHQR9dj4LTlErHtuwGWlj
yqkUgH0NW5gcxqvAIK9PAMWu/+NnT/yZan6DA2NG+woXSl++CWtJIxa64W1y1T+E
5R0fuAhzSkubBlRnUbTNdrizZSM679Jk9iYfis8HJvXAf6nbdZkW14Y0DnZB7uxz
tedTu3DRUTd7UH6LW8Rmgw1GemSruBmbdOL78pjIHs2zSC2V04/iWg/XkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG+TWYEY1RKqKl9iLNDjjye+ZRuQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvYjVOWmdSalZFcW9xWDJJczBPT1BKNzVsRzVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHNMniDd5+xiwiL8R0ba
UMi3mNhLT/WpYYfInZEZTsUqBiUxFz3Ty5gP4i3m3zVuVgvrHo7zegaZ4j/9tO11
2KL61kJGvfnIkOTo6ARlE+lovBrtXQ8cuwsdwndTwR5tPuWuJnl1JoSEQ9PUS3Iw
u2JouPl7y0nos9M9mFDVoUrc8h+21Zj53APypb8ouOKH147ae+HSpCtujo1OUqzz
HnCyDrnn6P3IknST/layNYbW+p+3kTcDgj70GrEQRwkTDvna2KjVn9qX/zCIFQgv
RIZpK93d4vA3hbNi16DAjSAJM9LPBn8busWDEwH3Sboez+u3ZNsAgj61Vy3O2raS
pS8=
-----END CERTIFICATE-----