Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN8UDQhMK7RQxuj24tdooUY-TGo.roa
File:                     jN8UDQhMK7RQxuj24tdooUY-TGo.roa (raw, json)
Hash identifier:          Ku2qvb9aOWc4ctwEzWsg70YcEfnO/nCYvldpANBBd3U=
Subject key identifier:   8C:DF:14:0D:08:4C:2B:B4:50:C6:E8:F6:E2:D7:68:A1:46:3E:4C:6A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A9B8BDE03453C692D5E29123D743F904
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN8UDQhMK7RQxuj24tdooUY-TGo.roa
Signing time:             Fri 03 Mar 2023 23:05:01 +0000
ROA not before:           Fri 03 Mar 2023 23:05:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a9b8:e45/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a9:b8:bd:e0:34:53:c6:92:d5:e2:91:23:d7:43:f9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 23:05:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8cdf140d084c2bb450c6e8f6e2d768a1463e4c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:38:02:60:9f:bf:85:c0:98:5a:9d:23:36:
                    fe:2a:3c:b4:07:b5:9d:96:17:af:62:d3:5c:7e:30:
                    5d:8f:a1:a5:76:02:4d:8d:9d:a8:28:63:57:b8:b2:
                    08:ad:37:83:4a:27:4d:1e:12:40:f4:d7:50:39:f0:
                    2f:4a:98:22:62:d7:5a:b5:a1:88:d2:46:27:11:3f:
                    fa:d6:07:62:d9:2c:07:8c:0d:51:9f:af:c4:ca:1e:
                    eb:db:f4:70:1c:00:71:53:f6:ad:ac:bc:89:9a:ab:
                    97:27:70:a0:85:71:a2:91:54:0c:14:b3:c8:aa:fe:
                    fd:f1:43:aa:97:92:ea:86:0e:95:65:b0:a7:a0:f0:
                    2d:94:20:d4:0e:8f:77:18:ca:44:f1:cd:a6:73:25:
                    65:46:66:16:e8:bb:5f:51:36:4d:2f:49:39:85:e3:
                    10:85:5a:05:34:b9:ed:b7:ab:b6:dd:37:e2:74:53:
                    b9:fb:87:74:f4:74:30:5a:0d:06:09:cc:9a:99:c4:
                    77:c9:5e:97:5a:62:3e:51:ed:c1:84:4a:a2:30:bf:
                    f3:9f:b2:b7:04:4e:2e:4f:02:4b:7d:57:01:d2:ae:
                    60:10:33:af:d8:9d:e0:00:5a:b3:fb:46:c1:1d:bd:
                    bf:12:fe:c6:dd:c6:39:8f:34:1d:04:b3:44:eb:5e:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DF:14:0D:08:4C:2B:B4:50:C6:E8:F6:E2:D7:68:A1:46:3E:4C:6A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jN8UDQhMK7RQxuj24tdooUY-TGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:80:c3:b7:29:89:6b:08:bc:44:5a:93:b5:a3:9a:25:8d:80:
         dc:43:4a:b2:24:20:e1:62:37:84:7f:b5:7f:a0:89:19:7e:95:
         d7:5e:d0:43:03:d7:4d:51:17:af:27:ee:59:33:3a:48:7c:88:
         84:d5:9c:48:34:b0:0b:99:68:4a:62:94:5e:d1:05:2f:cc:aa:
         9f:a0:f7:ff:20:0c:e7:eb:92:da:78:8c:c2:db:b1:28:92:89:
         62:b2:3b:f3:ad:e9:bf:7e:f9:c0:b7:87:9c:db:21:2d:1f:85:
         1c:df:33:9f:69:0c:e1:2f:d0:08:f0:70:4b:50:0e:b7:55:79:
         3b:ac:a2:c6:f6:30:6b:47:ec:76:44:92:52:23:dd:76:ec:17:
         33:e1:ad:07:75:13:bf:f2:11:f1:26:49:67:84:5e:83:20:ee:
         b3:93:bb:22:ba:25:89:25:e6:0d:7f:09:e5:18:79:ae:75:30:
         ff:3b:b0:5d:b7:c2:f3:a3:b9:a6:50:55:5a:4a:c5:8b:b5:f0:
         2b:26:c8:0a:ce:e0:ca:99:b8:71:c2:35:0c:0b:9c:46:ec:4c:
         68:28:0f:d9:8b:40:5d:c0:80:a3:f7:e8:0e:34:50:a5:25:d6:
         5a:25:7d:64:28:10:3d:b0:72:31:2d:26:4c:91:ee:f3:c4:73:
         a5:64:4c:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYapuL3gNFPGktXikSPXQ/kEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAzMjMwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2RmMTQwZDA4NGMyYmI0NTBjNmU4ZjZlMmQ3NjhhMTQ2M2U0YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhs4AmCfv4XAmFqdIzb+Kjy0B7Wd
lhevYtNcfjBdj6GldgJNjZ2oKGNXuLIIrTeDSidNHhJA9NdQOfAvSpgiYtdataGI
0kYnET/61gdi2SwHjA1Rn6/Eyh7r2/RwHABxU/atrLyJmquXJ3CghXGikVQMFLPI
qv798UOql5Lqhg6VZbCnoPAtlCDUDo93GMpE8c2mcyVlRmYW6LtfUTZNL0k5heMQ
hVoFNLntt6u23TfidFO5+4d09HQwWg0GCcyamcR3yV6XWmI+Ue3BhEqiML/zn7K3
BE4uTwJLfVcB0q5gEDOv2J3gAFqz+0bBHb2/Ev7G3cY5jzQdBLNE615N/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIzfFA0ITCu0UMbo9uLXaKFGPkxqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvak44VURRaE1LN1JReHVqMjR0ZG9vVVktVEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJWAw7cpiWsIvERak7Wj
miWNgNxDSrIkIOFiN4R/tX+giRl+ldde0EMD101RF68n7lkzOkh8iITVnEg0sAuZ
aEpilF7RBS/Mqp+g9/8gDOfrktp4jMLbsSiSiWKyO/Ot6b9++cC3h5zbIS0fhRzf
M59pDOEv0AjwcEtQDrdVeTusosb2MGtH7HZEklIj3XbsFzPhrQd1E7/yEfEmSWeE
XoMg7rOTuyK6JYkl5g1/CeUYea51MP87sF23wvOjuaZQVVpKxYu18CsmyArO4MqZ
uHHCNQwLnEbsTGgoD9mLQF3AgKP36A40UKUl1lolfWQoED2wcjEtJkyR7vPEc6Vk
TPY=
-----END CERTIFICATE-----