Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fbu_XGEAFYy2-k6eWpCP5LFhIOo.roa
File:                     fbu_XGEAFYy2-k6eWpCP5LFhIOo.roa (raw, json)
Hash identifier:          HBUdD2BGXkVqPDv2ApmmGRVKVbRPiC6uGMwcwKleliA=
Subject key identifier:   7D:BB:BF:5C:61:00:15:8C:B6:FA:4E:9E:5A:90:8F:E4:B1:61:20:EA
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018756E6DADF79F06AD72FA073BBF63C6BBD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fbu_XGEAFYy2-k6eWpCP5LFhIOo.roa
Signing time:             Thu 06 Apr 2023 14:09:42 +0000
ROA not before:           Thu 06 Apr 2023 14:09:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:56:e6:da:df:79:f0:6a:d7:2f:a0:73:bb:f6:3c:6b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  6 14:09:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7dbbbf5c6100158cb6fa4e9e5a908fe4b16120ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:43:c9:9b:e0:ea:55:8c:dd:9d:1c:34:c8:
                    4a:a2:5c:56:48:0d:c6:24:e9:2d:85:05:73:dd:87:
                    5d:d6:d6:2f:16:4b:31:bd:88:46:fd:81:ff:c4:97:
                    a9:ca:f4:be:ce:d8:0c:1c:28:60:bf:63:1d:2d:a7:
                    7e:21:3b:ec:02:e3:1b:d4:a1:dd:b7:53:17:d1:a3:
                    29:02:b5:07:95:01:93:4e:92:e5:16:4d:fe:bd:d9:
                    4b:fb:bb:b3:e4:8c:b2:c5:9e:88:0d:c6:c2:f4:92:
                    0f:64:6c:cb:67:ec:ef:0a:c6:9c:84:0e:b2:9e:09:
                    52:0e:67:c0:34:ef:bf:c8:eb:5d:eb:2c:98:e1:ec:
                    3d:5d:e2:54:96:ca:56:26:bd:05:9f:c2:86:36:e3:
                    e8:7b:b0:69:b8:c6:57:f5:02:44:38:30:f8:fc:8e:
                    c8:cd:34:1f:97:e1:1c:ed:b2:84:70:a2:54:50:8d:
                    ad:bc:87:39:25:c6:ae:57:68:f1:c5:c4:e9:56:28:
                    57:58:e5:0b:cc:fe:54:4c:22:89:b6:d9:93:1a:0f:
                    e9:28:a2:67:1f:66:2a:e7:40:8b:64:39:85:d6:81:
                    68:d6:a6:07:44:95:9a:1f:c5:9a:9c:43:34:0c:8d:
                    97:df:45:30:2a:f1:e5:68:5c:6e:34:d3:06:70:04:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:BF:5C:61:00:15:8C:B6:FA:4E:9E:5A:90:8F:E4:B1:61:20:EA
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fbu_XGEAFYy2-k6eWpCP5LFhIOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:73:1f:41:ea:3f:8d:68:24:6d:39:f5:22:e2:69:d8:86:78:
         51:2e:55:7c:3c:82:bc:7f:7a:dc:0e:9b:78:ec:47:9c:50:17:
         cc:01:6f:a9:7f:78:68:03:e5:26:64:39:38:92:d3:69:5d:4b:
         49:f4:cc:19:a4:ca:a6:3b:5d:ed:2b:2b:eb:e8:74:7d:bc:b1:
         17:02:b0:62:c0:1c:07:75:ba:b7:54:d5:66:4f:39:ff:47:a0:
         be:d8:32:02:d2:a3:06:51:bf:8a:93:7e:0a:a5:2a:2a:dc:b0:
         11:dd:71:69:10:2c:bf:a4:f1:8f:7f:32:0e:97:70:0b:a2:cb:
         75:a5:71:33:8a:8a:f5:38:ed:f9:05:12:d7:36:1f:73:b4:ed:
         8a:04:17:e3:79:95:74:12:b7:b1:ff:71:c2:80:b6:fa:5e:1f:
         5d:51:9e:5a:6f:5c:c0:7b:15:13:cc:4d:92:cf:67:85:08:27:
         ea:d6:19:f2:97:75:4d:df:b7:94:87:7d:04:00:81:62:ce:1a:
         87:ee:6d:b0:a7:98:69:1f:42:d0:ba:a6:2a:ee:c6:f7:83:23:
         c9:dd:b0:4a:98:2f:d3:50:e5:21:ff:a4:6f:8c:fc:9d:12:dc:
         1c:f6:71:37:2e:e6:49:8f:dc:77:54:f4:c0:94:05:23:1f:3d:
         07:a5:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----