Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f6iENhDIFPZ5_BFUkA1itidBCCk.roa
File:                     f6iENhDIFPZ5_BFUkA1itidBCCk.roa (raw, json)
Hash identifier:          Il06+i2GqzX3pTvAO2Xg5meY/MdvBK5L2RezN4HrAE0=
Subject key identifier:   7F:A8:84:36:10:C8:14:F6:79:FC:11:54:90:0D:62:B6:27:41:08:29
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187BBC2D02A9E89657763D7EE0F5A68F349
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f6iENhDIFPZ5_BFUkA1itidBCCk.roa
Signing time:             Wed 26 Apr 2023 04:11:59 +0000
ROA not before:           Wed 26 Apr 2023 04:11:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bb:c2:d0:2a:9e:89:65:77:63:d7:ee:0f:5a:68:f3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 26 04:11:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7fa8843610c814f679fc1154900d62b627410829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:74:68:40:1f:f2:e1:7f:bd:80:23:2c:63:e1:
                    4c:95:50:04:40:be:e2:8a:41:e8:85:43:35:ea:a3:
                    7d:a3:20:87:c6:f4:3d:02:9f:c7:0e:2b:21:fb:f6:
                    f4:95:35:3b:b4:bf:00:b7:0a:e0:3f:73:b6:e7:36:
                    65:78:24:c3:1f:54:be:2b:82:ae:dc:36:57:c3:d0:
                    70:ae:f1:02:d9:78:a9:09:9c:0c:2c:68:b9:82:49:
                    7c:51:27:96:ac:73:aa:da:fe:66:d4:3e:4f:f4:f8:
                    18:55:f1:1f:2d:75:30:70:3a:70:e5:c7:fc:9d:ee:
                    9c:74:6b:7a:58:51:0b:dc:f3:7e:f7:dc:88:3d:27:
                    99:1d:b4:4a:50:09:1b:2f:55:be:dc:48:95:42:18:
                    91:43:97:2e:5c:18:27:2f:6e:fa:5d:86:a1:9e:87:
                    96:9b:0c:ca:85:68:ea:43:13:2e:bf:e1:02:2a:a3:
                    53:99:3b:2d:13:8c:2b:e8:e6:fd:00:ec:81:d7:48:
                    dd:7a:69:d0:22:f7:3c:9e:b0:85:d4:1f:af:5a:23:
                    48:7e:cd:f6:d8:9b:2e:16:ee:80:8b:3d:dd:50:2d:
                    5f:1c:9c:6b:f5:1c:b5:64:92:d7:ff:0f:bc:7b:98:
                    ec:63:bc:b5:d1:dc:a3:af:a4:25:00:e3:d5:e0:f8:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:84:36:10:C8:14:F6:79:FC:11:54:90:0D:62:B6:27:41:08:29
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f6iENhDIFPZ5_BFUkA1itidBCCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:98:43:c4:6e:03:86:85:34:b1:5b:0e:d9:e8:58:87:97:
         f8:2d:12:40:39:60:bf:9f:d6:e5:fc:a7:93:e9:f9:2b:d5:0a:
         fd:a6:bf:04:19:6f:4e:91:73:f0:29:cc:0f:f5:1e:d3:ca:b5:
         e5:cd:fb:f1:98:ec:4e:73:b8:5f:ff:24:58:7a:8a:45:90:50:
         97:36:58:d2:ca:43:05:6e:b0:a7:73:53:7e:84:28:93:0f:a1:
         25:68:db:bf:db:28:ce:71:f4:1b:d1:b0:dc:9a:a7:39:6b:f0:
         d9:ed:b1:5c:8e:c5:b0:aa:ac:da:a3:b4:11:74:53:d6:41:ef:
         25:06:99:55:61:e5:28:25:9d:2f:70:f8:0a:58:ba:59:48:4b:
         cc:58:9e:d2:ae:44:d0:b8:74:d3:d8:58:21:fc:8a:67:ce:c8:
         b2:74:24:58:e1:17:f3:3d:11:38:67:75:7b:1d:ea:89:a3:51:
         8b:04:2b:6c:bc:13:77:ed:43:fc:17:40:d5:93:66:e1:9f:73:
         67:18:98:83:5e:38:c4:9e:7b:b2:98:2c:c5:ab:eb:3c:a2:14:
         1c:22:2a:c6:5d:37:06:7e:9c:2c:81:dd:eb:86:7e:28:88:e4:
         6f:6a:f3:0d:fc:29:ce:09:0f:9b:44:e2:ef:c8:80:62:63:30:
         0c:ff:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----