Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5MmAL3GEnXosYSUJRx-38cKY0Y.roa
File:                     c5MmAL3GEnXosYSUJRx-38cKY0Y.roa (raw, json)
Hash identifier:          ormY6rJfHXp5OQF6wFQwMtj57JjdqmNR+W7CCbuBS6k=
Subject key identifier:   73:93:26:00:BD:C6:12:75:E8:B1:84:94:25:1C:7E:DF:C7:0A:63:46
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A79E65D556019764E43863BBE14A576D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5MmAL3GEnXosYSUJRx-38cKY0Y.roa
Signing time:             Fri 03 Mar 2023 13:17:01 +0000
ROA not before:           Fri 03 Mar 2023 13:17:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a7:9e:65:d5:56:01:97:64:e4:38:63:bb:e1:4a:57:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 13:17:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73932600bdc61275e8b18494251c7edfc70a6346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c4:03:0c:53:cf:0a:7a:17:48:82:4c:5a:62:
                    37:d8:15:af:ad:fe:69:c2:4e:14:e3:60:72:a8:bc:
                    b1:63:b3:b9:d1:17:4c:41:54:34:a0:64:e6:b9:a2:
                    e3:ca:52:a8:f5:b2:e3:e6:f9:9e:c7:22:9b:9c:ed:
                    43:c6:35:f6:0f:7a:d0:da:85:ac:57:7e:5a:50:58:
                    80:cc:54:bb:15:9b:99:eb:9c:60:b8:89:5a:1f:25:
                    29:2d:16:21:34:a2:9c:f8:cd:4d:ae:1c:44:8e:1e:
                    21:3b:d9:8b:dd:fb:12:8b:3f:c7:92:6f:55:f1:33:
                    10:76:cc:df:e6:21:b7:0a:02:da:6f:11:99:c5:fa:
                    e8:fa:ce:30:79:13:b8:e5:dd:1f:ec:33:3e:81:99:
                    6b:33:33:92:7e:13:30:90:c8:76:27:13:6e:59:4f:
                    13:3d:3b:48:40:a3:21:12:f9:27:cb:4e:bf:f2:29:
                    f0:1f:b8:8b:48:38:42:bb:22:35:33:1c:e3:7b:d9:
                    aa:df:ab:5f:fb:af:cb:f7:5a:57:fb:9b:6b:7f:85:
                    5d:be:f5:7e:86:0a:6c:a3:81:8c:8b:80:ef:65:7d:
                    03:09:28:ae:f2:5c:50:e1:92:ca:40:7e:28:b3:d8:
                    0c:67:84:95:93:0d:84:fb:5c:ba:9c:b2:3c:fe:e5:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:93:26:00:BD:C6:12:75:E8:B1:84:94:25:1C:7E:DF:C7:0A:63:46
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c5MmAL3GEnXosYSUJRx-38cKY0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:39:a3:a4:aa:47:c3:b6:25:dc:8e:c6:40:6f:19:f1:0f:7a:
         04:a9:aa:aa:be:77:66:f5:f6:bd:dc:77:0c:11:02:dc:24:95:
         bc:a5:dc:57:0d:fd:b2:90:76:77:18:7f:b7:02:7e:9c:ee:2f:
         6e:fe:1b:01:af:36:44:8e:d4:b7:7c:d8:12:64:30:ef:8b:79:
         b6:5f:97:0d:bb:9a:08:c0:e5:27:b0:b4:95:cf:9e:a7:70:06:
         34:13:32:bd:d2:2d:ec:e2:72:52:1f:88:9c:c6:c5:6c:82:78:
         c6:b0:4d:98:81:29:c6:90:d6:f6:3d:47:c4:07:00:cb:29:3b:
         cb:9d:c9:d0:d0:52:ba:bc:86:69:94:44:4e:65:25:2c:ae:a4:
         f7:29:78:ff:6b:35:7d:9f:bd:fd:ea:46:0f:7d:c5:19:4c:37:
         93:6a:b5:12:c5:86:fb:94:94:d9:f8:60:af:ff:4f:0e:ef:2b:
         37:40:e3:06:32:01:ce:3d:17:35:eb:e9:81:f0:a6:4b:69:ff:
         33:c7:50:5b:af:78:b3:d9:2f:93:43:c4:42:78:b1:38:b5:98:
         d9:28:48:a3:70:9d:e0:ad:aa:01:64:ad:95:34:7a:1a:02:5d:
         86:df:db:91:0e:98:62:98:21:35:b9:7b:a6:12:29:cd:2c:35:
         32:31:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----