Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBt9tL-2pNBvSWtUQCGKILrTXA4.roa
File:                     iBt9tL-2pNBvSWtUQCGKILrTXA4.roa (raw, json)
Hash identifier:          Cg7x+eZwEEbXED43O6Udo14+BIKg/p7DpD9BIABMiYg=
Subject key identifier:   88:1B:7D:B4:BF:B6:A4:D0:6F:49:6B:54:40:21:8A:20:BA:D3:5C:0E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187168857EFCA4B414CA0A5F87AF74E82EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBt9tL-2pNBvSWtUQCGKILrTXA4.roa
Signing time:             Sat 25 Mar 2023 02:10:46 +0000
ROA not before:           Sat 25 Mar 2023 02:10:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:16:88:57:ef:ca:4b:41:4c:a0:a5:f8:7a:f7:4e:82:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 25 02:10:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=881b7db4bfb6a4d06f496b5440218a20bad35c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:40:35:93:a2:91:3c:52:dc:d2:96:31:35:
                    16:02:e1:ac:c9:d6:52:62:c2:dc:73:9c:79:8d:5c:
                    f6:9a:66:fe:42:1d:b0:18:15:b6:3b:23:c1:8f:79:
                    60:1a:f1:ef:e9:48:be:b6:5e:8d:74:85:14:f1:bb:
                    d8:2f:82:80:1b:01:08:84:01:20:27:20:6b:de:9b:
                    49:36:21:30:ad:84:8f:cc:e9:fb:1f:7b:32:7e:82:
                    8a:86:5b:89:39:6d:31:d2:f7:54:c3:27:80:95:44:
                    47:9f:12:d5:d9:1d:9b:00:26:4a:bd:50:95:d1:56:
                    d5:a4:68:9c:fd:6f:db:87:86:48:c9:25:16:68:0c:
                    1e:8b:85:88:da:29:3c:fd:bd:95:3b:95:21:b6:28:
                    d7:bc:7a:47:82:b4:c8:18:d1:b2:21:68:68:40:8f:
                    b6:18:f3:6d:e6:29:fb:80:c7:df:67:a7:e0:17:eb:
                    05:18:a0:19:6e:8a:b5:ef:af:08:4c:91:56:77:8f:
                    3d:ef:a9:e5:85:e6:21:c9:2a:c4:d3:89:04:ad:15:
                    b4:e4:84:27:09:bc:e3:40:b4:75:f6:84:cd:63:e0:
                    39:09:b7:90:9d:ef:21:f3:59:ef:f0:8c:e5:97:c0:
                    be:73:a7:e9:c4:99:25:39:6d:43:a4:3d:41:c9:93:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:7D:B4:BF:B6:A4:D0:6F:49:6B:54:40:21:8A:20:BA:D3:5C:0E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iBt9tL-2pNBvSWtUQCGKILrTXA4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:f7:5c:a3:9b:17:70:6c:58:b9:f3:5d:d2:58:29:f8:f9:01:
         c5:6e:cc:d5:4a:34:27:c7:89:7a:ed:0e:e1:68:76:5d:dc:cd:
         e8:26:4b:4b:59:c8:47:ed:5e:5a:ed:8b:d0:74:6e:13:7b:d8:
         7a:23:d3:91:54:53:bd:7d:40:93:ae:16:a7:44:a4:7f:ee:61:
         c8:bc:2e:3f:1d:df:0b:0c:91:7d:a1:d9:3b:f9:ef:19:d1:75:
         0b:b9:47:06:96:19:b3:f6:ef:58:4a:f2:86:d5:39:29:cc:76:
         43:0c:f5:4d:b9:0c:a3:da:97:63:7d:e9:cf:18:23:a9:d3:57:
         5e:f9:69:ac:e1:26:60:df:b8:5e:e1:28:e7:02:f1:e4:40:b6:
         a1:00:a4:a0:64:fc:b3:53:5f:3b:90:56:d4:ec:3c:dd:9b:d2:
         20:8a:24:59:31:a6:22:05:d1:f9:36:cc:e5:c5:27:d2:e3:e2:
         b8:88:9f:b2:6c:94:58:12:7c:dd:02:d6:2f:02:be:a9:8c:db:
         3a:82:53:da:f4:30:c9:ad:3a:f4:67:0c:f3:01:e0:8e:d3:06:
         4b:26:f6:d9:51:0a:15:7e:50:5f:24:68:c7:53:be:03:bf:e8:
         31:19:7d:fb:8b:d1:d0:22:88:77:3a:e9:0f:b1:13:85:4b:27:
         74:7c:a7:8d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcWiFfvyktBTKCl+Hr3ToLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI1MDIxMDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODFiN2RiNGJmYjZhNGQwNmY0OTZiNTQ0MDIxOGEyMGJhZDM1YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrRANZOikTxS3NKWMTUWAuGsydZS
YsLcc5x5jVz2mmb+Qh2wGBW2OyPBj3lgGvHv6Ui+tl6NdIUU8bvYL4KAGwEIhAEg
JyBr3ptJNiEwrYSPzOn7H3syfoKKhluJOW0x0vdUwyeAlURHnxLV2R2bACZKvVCV
0VbVpGic/W/bh4ZIySUWaAwei4WI2ik8/b2VO5UhtijXvHpHgrTIGNGyIWhoQI+2
GPNt5in7gMffZ6fgF+sFGKAZboq1768ITJFWd48976nlheYhySrE04kErRW05IQn
CbzjQLR19oTNY+A5CbeQne8h81nv8Izll8C+c6fpxJklOW1DpD1ByZPKYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIgbfbS/tqTQb0lrVEAhiiC601wOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaUJ0OXRMLTJwTkJ2U1d0VVFDR0tJTHJUWEE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA73XKObF3BsWLnzXdJY
Kfj5AcVuzNVKNCfHiXrtDuFodl3czegmS0tZyEftXlrti9B0bhN72Hoj05FUU719
QJOuFqdEpH/uYci8Lj8d3wsMkX2h2Tv57xnRdQu5RwaWGbP271hK8obVOSnMdkMM
9U25DKPal2N96c8YI6nTV175aazhJmDfuF7hKOcC8eRAtqEApKBk/LNTXzuQVtTs
PN2b0iCKJFkxpiIF0fk2zOXFJ9Lj4riIn7JslFgSfN0C1i8CvqmM2zqCU9r0MMmt
OvRnDPMB4I7TBksm9tlRChV+UF8kaMdTvgO/6DEZffuL0dAiiHc66Q+xE4VLJ3R8
p40=
-----END CERTIFICATE-----