Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOhaJm3fugMiaQWTIKp-YhuxS1o.roa
File:                     mOhaJm3fugMiaQWTIKp-YhuxS1o.roa (raw, json)
Hash identifier:          MOjgJpzaV2iZlqpyMNtqNcZVpc1flB1BHNlplVVMH8Y=
Subject key identifier:   98:E8:5A:26:6D:DF:BA:03:22:69:05:93:20:AA:7E:62:1B:B1:4B:5A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01876DDD73EDB9C0BA495911F343D7FB40B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOhaJm3fugMiaQWTIKp-YhuxS1o.roa
Signing time:             Tue 11 Apr 2023 01:10:42 +0000
ROA not before:           Tue 11 Apr 2023 01:10:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6d:dd:73:ed:b9:c0:ba:49:59:11:f3:43:d7:fb:40:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 11 01:10:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98e85a266ddfba032269059320aa7e621bb14b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:64:1f:4e:18:2c:24:a4:ee:30:32:e9:41:
                    41:64:71:20:ec:9f:31:ea:ea:a5:c7:55:c1:f0:80:
                    8a:a8:f5:b4:25:d4:85:90:ee:6e:91:0f:99:40:19:
                    c9:49:42:e5:e7:51:fd:ea:2e:0b:a9:b7:8e:91:aa:
                    48:5c:a6:fb:a4:8e:5f:31:b0:cc:7e:fd:df:d8:c0:
                    96:69:92:f0:1f:45:80:71:e2:72:1c:ad:a5:82:cd:
                    49:59:fd:3f:39:e5:6a:29:fb:8f:0d:cc:2d:e9:e9:
                    66:0d:a7:40:09:76:b8:9b:c8:0e:19:ab:f7:b7:bc:
                    09:c8:9f:f8:29:0b:df:84:58:ed:78:ab:8c:a5:74:
                    56:b3:1b:14:70:bc:15:04:1a:2b:38:ca:69:30:c8:
                    fb:50:3c:ac:8a:7d:9b:53:7d:32:c7:f1:ea:95:2a:
                    77:43:b9:0b:f8:8e:8e:1c:f0:81:84:85:bb:c1:a9:
                    50:b2:26:e5:37:f5:00:ec:78:89:52:85:20:be:00:
                    64:f4:24:ed:2c:77:6b:ca:97:b8:88:cc:e8:0e:f2:
                    21:0f:12:ab:a0:f5:6f:b1:47:ac:68:41:72:69:66:
                    79:49:88:fe:14:a4:ad:b1:28:75:19:d8:93:54:2d:
                    b7:a1:e5:a7:28:66:d2:94:51:ea:74:8c:a3:41:06:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:5A:26:6D:DF:BA:03:22:69:05:93:20:AA:7E:62:1B:B1:4B:5A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mOhaJm3fugMiaQWTIKp-YhuxS1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:f4:d0:ab:4e:70:aa:f2:ff:79:39:a0:86:ac:e2:f8:b5:9f:
         8e:4d:0d:04:3a:05:03:c7:d6:bf:6d:c1:19:c7:99:be:bc:c9:
         27:51:04:80:60:8a:d1:f7:d8:40:b5:e3:f6:57:c3:22:73:58:
         8f:73:d1:55:85:ef:b5:1b:85:14:76:e7:78:15:b7:b1:09:9b:
         88:38:8d:27:ae:82:44:96:36:2c:cb:43:20:34:73:89:e3:96:
         54:ee:c4:40:fa:6f:d5:47:88:7b:d8:a9:20:9b:d5:98:2a:68:
         e9:4d:4f:3d:d8:bd:23:00:6f:1f:4d:24:e8:01:f8:87:67:35:
         dc:25:bb:ba:18:ca:23:90:c7:9d:81:4e:64:fa:d8:5b:69:d5:
         ae:9b:5c:5d:48:af:78:c5:a9:92:96:1e:a1:38:8e:60:31:95:
         04:2e:8f:fe:d8:17:f8:47:d0:a7:fc:f9:9c:ce:52:c8:8a:9d:
         da:a9:fd:4b:85:3b:18:8d:b6:c2:49:c2:67:00:ab:90:f4:3d:
         a5:a3:5c:bb:f0:d1:d4:6e:6f:64:87:50:96:be:08:56:dc:95:
         5d:c8:4b:bc:28:00:b5:2d:be:13:fd:67:5c:6c:a0:f0:d2:17:
         46:a7:5b:95:30:54:10:a4:ff:39:c6:14:2d:60:99:48:98:69:
         a3:61:1c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----