Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRcxn9G5jW7bYVCDX0gQGs3CSLU.roa
File:                     cRcxn9G5jW7bYVCDX0gQGs3CSLU.roa (raw, json)
Hash identifier:          fc9s1jIPjWmW05A/hhVi8Q2zgSeFAmJ4MclWF+1M64k=
Subject key identifier:   71:17:31:9F:D1:B9:8D:6E:DB:61:50:83:5F:48:10:1A:CD:C2:48:B5
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A536A6DC92610AB2C8DB931A0BEFE03A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRcxn9G5jW7bYVCDX0gQGs3CSLU.roa
Signing time:             Fri 03 Mar 2023 02:04:27 +0000
ROA not before:           Fri 03 Mar 2023 02:04:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:a536:8710/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a5:36:a6:dc:92:61:0a:b2:c8:db:93:1a:0b:ef:e0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 02:04:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7117319fd1b98d6edb6150835f48101acdc248b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:aa:3f:a6:92:f9:1d:1b:f3:37:9b:59:70:
                    2b:98:40:96:43:6b:00:b8:59:95:49:56:40:9b:68:
                    48:6f:7d:0e:1b:e0:33:ff:37:d8:f6:46:c5:76:0b:
                    c6:87:f7:df:55:87:f9:91:7b:bd:49:86:e5:7f:e1:
                    83:df:0c:b3:75:d1:e2:17:72:c5:2d:47:36:34:fc:
                    a9:b9:8e:63:f9:b0:49:11:8c:70:6c:d3:cc:df:43:
                    ae:99:2c:f3:c9:e9:6d:fa:db:0a:1a:6a:de:8d:48:
                    be:4e:b5:e7:20:3b:70:19:f0:dd:6e:19:40:0a:dc:
                    3a:52:f6:10:d4:1a:9f:6b:39:b9:41:ca:6f:6a:26:
                    60:69:75:ed:e1:c3:2f:9d:a8:fd:2e:8e:25:05:45:
                    9e:b2:38:d1:eb:2f:ab:88:bf:a1:c3:94:4f:2c:66:
                    5a:11:0d:c6:70:1c:92:5d:30:3b:b6:50:1b:23:f6:
                    41:ee:46:7f:80:5a:70:63:e5:97:57:3f:6d:e9:ee:
                    74:7c:fb:9d:7a:2a:67:e6:0e:41:03:50:9b:a5:1a:
                    90:f8:82:10:27:76:76:81:ab:fe:96:a2:04:80:24:
                    9c:70:56:89:37:78:11:a8:c5:7b:18:81:40:54:ce:
                    60:d8:3c:6a:13:f4:c3:4c:e6:47:cf:bf:44:9f:ee:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:31:9F:D1:B9:8D:6E:DB:61:50:83:5F:48:10:1A:CD:C2:48:B5
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cRcxn9G5jW7bYVCDX0gQGs3CSLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:54:e1:d4:10:36:9c:1f:42:17:ee:92:a7:8a:c4:fe:0c:
         18:be:b6:50:be:70:c7:5f:de:ae:b9:e2:f3:b9:de:ad:3b:66:
         12:8a:79:95:3c:33:af:13:c6:fb:1a:b1:ce:ea:d7:4f:98:3e:
         fe:0b:c4:b5:98:7b:ab:f0:42:19:c8:d7:13:26:ba:75:07:9c:
         dd:c7:18:22:dc:3f:86:28:1e:8a:9c:cb:91:ef:db:47:08:79:
         55:9b:20:ce:72:5d:d1:35:e5:1d:37:fd:7a:5a:66:7b:3b:4f:
         22:4c:18:05:98:eb:68:05:46:aa:bd:c1:d2:30:29:6a:4c:60:
         7d:3f:e9:21:9b:4c:ce:15:35:a4:97:f1:17:d0:48:ed:aa:2b:
         78:60:1b:11:bd:5b:9e:4e:6e:4f:a8:7f:e5:4b:e8:b2:a0:53:
         a1:02:6c:af:5f:c1:92:b0:4e:01:9c:f6:76:af:bb:4c:10:d3:
         5e:4e:e3:95:90:f3:e2:38:d5:bf:b6:3f:f5:df:2c:21:9e:d0:
         d3:b9:70:6e:f8:9b:de:f2:d4:38:b8:f6:1f:e8:3b:ee:46:d9:
         77:b5:cb:18:ef:86:86:a0:e5:03:42:fa:84:f7:76:4e:da:f7:
         84:42:00:08:c5:24:a5:3e:5f:4a:a5:75:cc:46:48:ca:97:55:
         9d:12:7f:ec
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYalNqbckmEKssjbkxoL7+A6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAzMDIwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTE3MzE5ZmQxYjk4ZDZlZGI2MTUwODM1ZjQ4MTAxYWNkYzI0OGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnGqP6aS+R0b8zebWXArmECWQ2sA
uFmVSVZAm2hIb30OG+Az/zfY9kbFdgvGh/ffVYf5kXu9SYblf+GD3wyzddHiF3LF
LUc2NPypuY5j+bBJEYxwbNPM30OumSzzyelt+tsKGmrejUi+TrXnIDtwGfDdbhlA
Ctw6UvYQ1Bqfazm5QcpvaiZgaXXt4cMvnaj9Lo4lBUWesjjR6y+riL+hw5RPLGZa
EQ3GcBySXTA7tlAbI/ZB7kZ/gFpwY+WXVz9t6e50fPudeipn5g5BA1CbpRqQ+IIQ
J3Z2gav+lqIEgCSccFaJN3gRqMV7GIFAVM5g2DxqE/TDTOZHz79En+6O1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHEXMZ/RuY1u22FQg19IEBrNwki1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvY1JjeG45RzVqVzdiWVZDRFgwZ1FHczNDU0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACDzVOHUEDacH0IX7pKn
isT+DBi+tlC+cMdf3q654vO53q07ZhKKeZU8M68Txvsasc7q10+YPv4LxLWYe6vw
QhnI1xMmunUHnN3HGCLcP4YoHoqcy5Hv20cIeVWbIM5yXdE15R03/XpaZns7TyJM
GAWY62gFRqq9wdIwKWpMYH0/6SGbTM4VNaSX8RfQSO2qK3hgGxG9W55Obk+of+VL
6LKgU6ECbK9fwZKwTgGc9navu0wQ015O45WQ8+I41b+2P/XfLCGe0NO5cG74m97y
1Di49h/oO+5G2Xe1yxjvhoag5QNC+oT3dk7a94RCAAjFJKU+X0qldcxGSMqXVZ0S
f+w=
-----END CERTIFICATE-----