Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpCeTUjmPLUpKj-85IV_9kEifl4.roa
File:                     kpCeTUjmPLUpKj-85IV_9kEifl4.roa (raw, json)
Hash identifier:          LD0pCRFbRISOP1oTFP900EZjP5xpwQhcGQBrFseWFDY=
Subject key identifier:   92:90:9E:4D:48:E6:3C:B5:29:2A:3F:BC:E4:85:7F:F6:41:22:7E:5E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A75D62FD7E34DDEF3523B3E09119AB61
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpCeTUjmPLUpKj-85IV_9kEifl4.roa
Signing time:             Fri 03 Mar 2023 12:06:00 +0000
ROA not before:           Fri 03 Mar 2023 12:06:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a75c:e30f/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a7:5d:62:fd:7e:34:dd:ef:35:23:b3:e0:91:19:ab:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  3 12:06:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92909e4d48e63cb5292a3fbce4857ff641227e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:45:49:da:54:4f:91:26:92:c8:07:33:4e:
                    de:60:44:f9:5a:7f:9f:eb:dd:de:99:18:d2:0a:24:
                    5d:cb:70:09:8b:2c:9f:71:7f:39:bf:08:e3:e9:0a:
                    84:b1:56:b6:02:3b:5b:96:28:7f:96:b2:64:d1:c9:
                    a7:3c:ac:e9:7a:6f:1d:23:ef:e8:25:c8:95:70:73:
                    99:2f:31:ce:42:ac:62:1b:85:34:ba:24:92:df:77:
                    bc:df:8d:cb:93:10:f2:08:f5:6e:2b:57:96:ad:fc:
                    77:b5:b2:96:f5:2e:b5:2a:60:04:47:04:4f:09:c6:
                    e7:e6:75:0f:a9:63:4c:c9:c3:82:52:0e:96:72:40:
                    60:99:0e:f8:52:16:7d:88:d3:34:1b:d1:36:1b:c3:
                    68:58:97:28:b2:04:48:83:4f:b7:d5:3d:e7:98:9a:
                    f0:ca:07:c1:07:71:af:0d:e9:a5:5d:9c:46:1e:ff:
                    10:5c:58:cd:15:3b:14:a2:71:83:8c:5d:17:72:db:
                    01:2f:ff:b2:b3:0a:00:a1:ad:46:ac:35:b5:0c:d7:
                    8f:cd:16:e3:55:12:c6:f9:e0:e2:1b:a2:81:d3:95:
                    a8:02:36:9e:ba:30:5c:0c:af:2e:21:75:f6:dc:52:
                    b8:05:0f:14:0c:a1:28:f6:64:d8:23:17:25:20:d9:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:90:9E:4D:48:E6:3C:B5:29:2A:3F:BC:E4:85:7F:F6:41:22:7E:5E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kpCeTUjmPLUpKj-85IV_9kEifl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:1f:4a:1d:ba:f3:0e:38:08:f6:ab:fc:f9:e1:63:e4:86:b1:
         18:59:0c:72:99:1e:5a:91:39:73:6d:a4:04:f2:1b:f6:a9:26:
         6f:a8:37:81:ed:46:f7:7d:1a:9b:81:f0:78:7f:40:58:5e:95:
         e0:64:e8:f2:60:3f:12:18:61:8d:d0:5c:f0:1f:c1:b4:98:e9:
         f1:9f:f8:69:c1:93:8b:e5:1d:56:e4:29:1d:46:09:fa:9e:2d:
         ca:ac:fb:35:c3:76:1c:a7:69:73:47:b3:93:ae:68:71:20:78:
         52:e1:19:ab:1c:0b:aa:99:1f:4f:ad:fe:df:06:9a:a5:13:84:
         81:b7:e6:a8:05:f6:aa:94:95:1e:25:94:ff:69:6f:28:05:d6:
         e0:6d:98:5b:4e:07:42:e3:54:e2:41:d7:b1:55:c8:22:e2:c8:
         8e:ca:98:24:00:da:8a:b3:ea:d1:7e:fb:df:9a:19:e6:90:a5:
         da:2b:64:3f:17:63:30:97:c8:e0:2c:3d:40:28:88:09:4e:c9:
         49:03:b2:f3:52:38:19:50:bc:ea:20:b9:26:44:49:ee:54:8f:
         b9:fc:5b:7d:97:8f:ac:d4:5d:29:a2:ba:97:03:e4:7f:db:d3:
         75:ba:4e:8b:c8:d8:a5:1b:fa:fe:d1:ee:35:4f:0c:bf:c2:5e:
         7e:8f:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----