Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crN0eL96uRvvZR6g2cByrSLavHo.roa
File:                     crN0eL96uRvvZR6g2cByrSLavHo.roa (raw, json)
Hash identifier:          D5M6O4RQR4aUrxYvMtjsRRbf5mb6TY2gK+nakXchFWI=
Subject key identifier:   72:B3:74:78:BF:7A:B9:1B:EF:65:1E:A0:D9:C0:72:AD:22:DA:BC:7A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018725F79B7EC1A71A0DF23826A53EE52025
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crN0eL96uRvvZR6g2cByrSLavHo.roa
Signing time:             Tue 28 Mar 2023 02:06:36 +0000
ROA not before:           Tue 28 Mar 2023 02:06:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:187:25f6:b676/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:25:f7:9b:7e:c1:a7:1a:0d:f2:38:26:a5:3e:e5:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 28 02:06:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72b37478bf7ab91bef651ea0d9c072ad22dabc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3c:78:a5:0c:e5:4a:79:88:72:f4:70:f1:66:
                    e0:5a:4c:b7:1e:7c:a7:b7:f7:9f:56:c6:07:bf:9f:
                    7c:4a:cb:ca:26:89:b7:f1:49:ce:07:8c:53:4f:b6:
                    d9:c6:5e:e9:04:88:96:7b:7c:3a:04:21:90:5f:c2:
                    34:cc:f9:ef:ff:be:54:6e:78:d4:e3:a0:30:0d:77:
                    2e:70:9f:7b:46:44:69:13:e4:52:27:84:47:18:f7:
                    c3:99:30:19:5a:16:c6:72:00:19:f9:06:83:45:6e:
                    62:a8:da:56:05:c4:0b:3e:4f:79:0b:42:99:f4:ac:
                    44:49:a6:6f:36:8d:3f:17:25:14:53:e0:7b:b9:41:
                    08:bd:e5:57:71:34:d2:1b:ca:90:29:1f:db:bd:55:
                    cb:5e:cb:7e:a5:1f:eb:56:2f:92:a3:5e:59:51:2b:
                    ad:84:21:95:4c:e8:ea:61:61:9d:4b:3f:6e:71:4c:
                    9e:19:90:c0:4c:d5:9e:ab:83:e9:49:70:b8:08:f0:
                    70:6f:8d:f9:6e:40:c4:0e:42:7b:dd:ea:20:98:b8:
                    8c:49:47:de:70:9b:1d:98:87:76:f5:d3:cb:c4:f7:
                    cf:ca:2f:c5:80:bf:1d:e0:24:09:b2:57:88:6e:21:
                    d3:48:f7:8a:ab:ce:6b:97:fb:37:3d:f2:29:7d:45:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:74:78:BF:7A:B9:1B:EF:65:1E:A0:D9:C0:72:AD:22:DA:BC:7A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crN0eL96uRvvZR6g2cByrSLavHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:35:b9:d8:7b:48:33:d2:18:9a:58:c0:99:02:e9:fb:4e:
         ce:ef:28:d9:52:7f:e0:39:6c:5d:73:b6:5d:ff:3c:99:a2:53:
         9b:d3:a3:03:4d:65:e2:1f:0f:5e:fb:8b:44:c4:b5:6f:d4:3e:
         f7:cb:22:69:07:5a:f9:a0:31:28:4f:b4:7c:f5:c2:84:fe:de:
         ae:ec:fb:93:4e:f9:d2:7c:a7:8a:c9:90:fd:7c:b0:f0:24:65:
         9e:9f:07:4e:31:e2:2c:af:9b:0e:c9:8b:08:30:95:7c:3f:7a:
         09:f6:ca:71:56:6c:86:6f:bb:98:9f:7f:da:4b:8c:85:df:b2:
         4a:32:74:b4:76:aa:0f:15:25:f7:5d:b7:47:65:4e:e1:2f:0c:
         d8:28:6e:eb:28:8b:18:0e:ef:fd:7d:4a:4f:9d:30:a8:79:e4:
         6b:55:10:04:84:36:40:cc:92:26:c0:3d:e8:73:01:19:11:70:
         fc:0d:30:1b:49:24:77:3d:e4:c2:95:6b:d4:53:7b:44:b8:be:
         a7:1e:d9:04:fb:44:a7:98:57:0f:7a:b1:cc:e8:4a:7d:35:4a:
         30:97:53:de:58:f5:28:95:51:ee:68:66:ac:fc:3e:cb:c8:da:
         78:f2:86:9d:1f:46:8d:95:7d:82:9b:b3:7e:e4:92:fa:60:22:
         89:dc:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----