Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTr6dw0-v0NItk0UySuUIlMBetA.roa
File:                     lTr6dw0-v0NItk0UySuUIlMBetA.roa (raw, json)
Hash identifier:          Z1k7tcsTMh1YsGfOLBN1A7/CyuKqyaWdWblpYFi0vLI=
Subject key identifier:   95:3A:FA:77:0D:3E:BF:43:48:B6:4D:14:C9:2B:94:22:53:01:7A:D0
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187C26B4185356BBA90C2587025C86FF58D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTr6dw0-v0NItk0UySuUIlMBetA.roa
Signing time:             Thu 27 Apr 2023 11:13:41 +0000
ROA not before:           Thu 27 Apr 2023 11:13:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c2:6b:41:85:35:6b:ba:90:c2:58:70:25:c8:6f:f5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 27 11:13:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=953afa770d3ebf4348b64d14c92b942253017ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:18:5a:ef:b3:44:37:ec:e8:94:c3:0a:29:
                    bb:23:7e:5c:e9:eb:d5:93:a5:04:04:81:35:21:ba:
                    ef:ac:6f:1e:c9:d1:a7:f1:0b:bd:b8:dc:0c:46:ae:
                    86:1c:33:b8:12:6a:2d:6d:ce:75:e7:5b:1a:27:7a:
                    f8:c1:9e:25:ca:8d:4f:a4:9c:41:dc:d6:8b:ee:00:
                    32:64:ea:a8:f9:af:fb:54:da:4e:64:5c:d6:ce:1b:
                    98:40:19:e8:35:de:ab:89:dc:a4:0e:75:d3:18:e9:
                    8c:7f:5a:d3:36:09:99:19:7a:cf:79:bd:80:30:81:
                    ba:f9:11:82:31:bd:c4:ae:f2:89:2c:69:69:2d:a8:
                    81:bf:b3:70:52:25:43:e9:cb:74:46:a1:3b:a8:c6:
                    03:c2:3e:15:8a:12:b2:19:cf:4f:da:82:f9:3e:9e:
                    0d:55:d5:0a:92:af:b8:5b:2c:4e:49:a2:da:7a:50:
                    80:e7:cb:9b:bc:ca:24:2c:25:01:c2:d6:97:82:20:
                    68:f0:0a:55:c7:b9:db:e7:3a:52:b7:8c:60:c4:ca:
                    7a:6b:13:04:db:1f:7d:87:39:12:bf:af:5c:ae:d0:
                    2a:fa:7e:f4:da:23:3f:06:76:8e:de:d8:14:39:03:
                    68:c5:87:76:e4:cc:a8:89:1e:bc:1a:56:a0:e4:a1:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3A:FA:77:0D:3E:BF:43:48:B6:4D:14:C9:2B:94:22:53:01:7A:D0
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTr6dw0-v0NItk0UySuUIlMBetA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:2f:1a:c9:ab:a9:f2:c5:61:90:ce:d4:f5:0b:74:a6:a1:82:
         08:ad:84:29:09:06:cf:c8:cd:0b:47:38:7b:b8:9e:1f:29:e4:
         ee:d1:51:3b:a1:4c:ec:d7:3b:8b:33:e2:2f:7a:ff:26:a6:f9:
         89:d2:cd:86:9b:8f:d2:71:a6:06:2b:4c:71:84:67:38:f5:58:
         b3:d9:e2:0b:cc:ce:67:46:81:53:29:14:df:fa:3f:87:08:9d:
         58:64:a8:5a:1e:1c:1e:45:5a:48:4c:f7:69:42:98:62:99:82:
         1e:9e:82:20:11:ec:3c:39:50:26:4c:32:a9:b7:9e:ef:6c:db:
         9f:88:9a:95:91:e7:1c:50:b6:56:68:eb:33:62:6c:92:07:cb:
         a6:39:a5:87:ad:ed:69:40:ab:3e:15:a8:d5:33:59:ad:69:07:
         f5:1f:6d:38:8b:4e:20:22:09:f6:6f:34:e5:d5:8c:cf:dd:72:
         4a:26:d4:a7:e8:35:41:f9:d9:bf:75:f3:fd:3f:1b:c6:99:35:
         43:59:36:52:b5:e4:d9:66:62:2f:9e:5f:75:a3:01:16:1d:7a:
         0b:f9:28:fb:1f:2d:ea:ff:e4:c7:e9:94:10:34:c5:5e:f5:04:
         0e:05:e6:aa:56:52:0d:fa:2a:f2:0f:13:54:7e:0c:f8:6c:03:
         f0:7e:9d:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfCa0GFNWu6kMJYcCXIb/WNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDI3MTExMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTNhZmE3NzBkM2ViZjQzNDhiNjRkMTRjOTJiOTQyMjUzMDE3YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFAYWu+zRDfs6JTDCim7I35c6evV
k6UEBIE1IbrvrG8eydGn8Qu9uNwMRq6GHDO4Emotbc5151saJ3r4wZ4lyo1PpJxB
3NaL7gAyZOqo+a/7VNpOZFzWzhuYQBnoNd6ridykDnXTGOmMf1rTNgmZGXrPeb2A
MIG6+RGCMb3ErvKJLGlpLaiBv7NwUiVD6ct0RqE7qMYDwj4VihKyGc9P2oL5Pp4N
VdUKkq+4WyxOSaLaelCA58ubvMokLCUBwtaXgiBo8ApVx7nb5zpSt4xgxMp6axME
2x99hzkSv69crtAq+n702iM/BnaO3tgUOQNoxYd25MyoiR68Glag5KGJHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJU6+ncNPr9DSLZNFMkrlCJTAXrQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbFRyNmR3MC12ME5JdGswVXlTdVVJbE1CZXRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACYvGsmrqfLFYZDO1PUL
dKahggithCkJBs/IzQtHOHu4nh8p5O7RUTuhTOzXO4sz4i96/yam+YnSzYabj9Jx
pgYrTHGEZzj1WLPZ4gvMzmdGgVMpFN/6P4cInVhkqFoeHB5FWkhM92lCmGKZgh6e
giAR7Dw5UCZMMqm3nu9s25+ImpWR5xxQtlZo6zNibJIHy6Y5pYet7WlAqz4VqNUz
Wa1pB/UfbTiLTiAiCfZvNOXVjM/dckom1KfoNUH52b918/0/G8aZNUNZNlK15Nlm
Yi+eX3WjARYdegv5KPsfLer/5MfplBA0xV71BA4F5qpWUg36KvIPE1R+DPhsA/B+
nRU=
-----END CERTIFICATE-----