Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e3kHMFeCGPrlMI2sRfcenwlBskU.roa
File:                     e3kHMFeCGPrlMI2sRfcenwlBskU.roa (raw, json)
Hash identifier:          lxeZsWM9QMN7ztSZsL/nAiNLY9JsXuh966vDaXvd5Xg=
Subject key identifier:   7B:79:07:30:57:82:18:FA:E5:30:8D:AC:45:F7:1E:9F:09:41:B2:45
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01870B2ACC6A0183FF7B95A24AD3D6DD194C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e3kHMFeCGPrlMI2sRfcenwlBskU.roa
Signing time:             Wed 22 Mar 2023 21:12:46 +0000
ROA not before:           Wed 22 Mar 2023 21:12:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0b:2a:cc:6a:01:83:ff:7b:95:a2:4a:d3:d6:dd:19:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 22 21:12:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b790730578218fae5308dac45f71e9f0941b245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:86:1c:14:fa:8b:67:62:32:a0:66:2b:00:72:
                    92:69:75:6d:de:36:eb:9a:cd:f6:9a:71:e6:f3:4e:
                    81:5e:88:e7:ba:d7:68:ad:32:45:83:99:7f:cc:2b:
                    32:f8:da:24:47:d0:1c:90:10:8e:5d:37:31:f6:8c:
                    04:a7:80:d1:56:eb:e0:f8:35:13:54:27:b5:9e:b3:
                    21:90:95:4e:3e:91:1b:42:91:70:66:7e:83:81:9b:
                    77:b8:cd:df:ce:83:dd:f1:27:18:34:9c:ee:c5:f6:
                    87:f3:6a:a8:36:f0:88:95:b9:25:01:8a:3f:64:d9:
                    a9:40:33:ba:55:8b:7a:c9:6b:a3:f4:7a:4e:a8:91:
                    72:38:96:21:b8:f1:ef:d8:70:da:48:e4:19:e8:c9:
                    f6:16:f2:2f:49:5d:d0:3e:26:e0:18:59:ed:df:7b:
                    77:2e:46:b1:d6:b5:3e:2d:77:70:43:8f:4a:4c:bc:
                    37:7a:3e:84:cd:f5:1a:fc:74:34:82:91:5c:41:53:
                    c7:96:e8:0b:12:4a:91:d6:0f:2b:7c:60:40:bf:d7:
                    f1:8c:ec:8c:7c:b1:90:64:2f:04:b7:98:a6:78:fc:
                    d0:8f:63:82:19:9f:76:66:9b:1a:89:18:ee:9f:3d:
                    e7:c5:85:f4:df:bd:9f:87:a6:79:37:0c:c9:0f:cb:
                    ea:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:79:07:30:57:82:18:FA:E5:30:8D:AC:45:F7:1E:9F:09:41:B2:45
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e3kHMFeCGPrlMI2sRfcenwlBskU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:b5:ce:84:06:13:80:ae:12:6a:56:f3:17:03:98:fc:0f:ef:
         6a:98:32:55:f6:b6:ec:82:31:7e:88:c8:f3:42:61:6d:3b:5d:
         5e:c3:6f:e9:82:79:08:bf:aa:9f:24:af:27:6b:39:fe:10:69:
         06:fd:d9:2f:d6:c5:2d:bd:87:15:e1:e1:c2:41:fb:90:7b:8e:
         bc:b9:d8:4b:13:df:99:b4:fe:e8:6f:59:15:94:a8:83:d3:eb:
         a5:79:ff:10:93:90:a7:a3:4d:a4:5a:54:0d:d6:ba:a3:9f:86:
         a3:85:34:6d:e8:bf:0e:d7:e2:ba:23:76:7c:b0:23:22:4f:9e:
         08:3d:0d:70:b7:5f:f0:35:6e:45:d0:57:d1:16:e2:27:9d:39:
         58:56:3c:7b:3d:c0:5e:06:d3:09:b7:73:fb:44:d3:16:03:1b:
         c5:e9:d8:c7:50:40:42:48:a6:cf:a9:7a:3c:3c:bb:1f:4f:59:
         f7:ea:fc:1e:5d:97:f8:bb:ac:a0:e2:1c:d9:9f:3a:30:06:8c:
         1e:47:19:90:cb:28:86:7c:8f:6e:19:7d:dd:24:8a:43:16:0e:
         62:21:8c:e6:9a:56:a1:bc:3e:7f:88:58:4f:b4:47:4f:be:b8:
         7d:b5:61:ca:d1:d3:6b:88:9f:07:f4:a3:19:16:d7:2e:89:3d:
         f9:00:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----