Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTAq1-mIkqCKEy7Alk-S6AzE6Yc.roa
File:                     oTAq1-mIkqCKEy7Alk-S6AzE6Yc.roa (raw, json)
Hash identifier:          H6ubGrAA9s7XGN1kRh+wbVuBLEx8cx2s8q+Ad9uvsVE=
Subject key identifier:   A1:30:2A:D7:E9:88:92:A0:8A:13:2E:C0:96:4F:92:E8:0C:C4:E9:87
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187D701AC34F4B9859DC32CCCC65640F497
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTAq1-mIkqCKEy7Alk-S6AzE6Yc.roa
Signing time:             Mon 01 May 2023 11:10:23 +0000
ROA not before:           Mon 01 May 2023 11:10:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d7:01:ac:34:f4:b9:85:9d:c3:2c:cc:c6:56:40:f4:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  1 11:10:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a1302ad7e98892a08a132ec0964f92e80cc4e987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:bb:94:94:bc:af:ff:d1:ee:16:c1:36:52:
                    84:3f:f8:54:78:f0:7a:b4:34:11:5f:49:df:06:34:
                    a6:84:10:03:9d:de:87:8a:fa:d4:2a:1b:09:f2:27:
                    91:b3:62:8a:fa:a1:50:47:dc:67:b5:05:35:18:e7:
                    5a:6d:72:a2:6d:d3:f7:15:36:e3:72:fc:0b:1d:c4:
                    8f:bb:87:68:75:c8:52:38:f7:07:d1:db:cf:cc:65:
                    6c:51:89:7d:2f:52:4f:3b:1d:e9:b8:99:19:1c:8a:
                    b7:36:23:b9:6b:7f:57:77:c0:53:15:4e:7f:3e:23:
                    37:5e:32:25:db:d3:4c:75:a4:03:17:76:51:69:42:
                    2e:7c:ca:98:2b:7d:7b:0f:60:71:86:2e:15:16:95:
                    59:d1:8a:24:6f:6f:2d:5d:4e:dc:9c:71:17:0c:ce:
                    2e:cc:cd:08:cb:74:26:8f:93:50:2f:47:07:eb:4c:
                    e4:d2:59:3c:e4:5b:0f:b6:3c:f0:bf:99:8f:c9:e2:
                    f4:35:6c:79:14:d3:06:09:5f:1f:54:fb:ed:13:ab:
                    1a:30:26:7e:f4:b5:c8:d2:92:46:1c:42:90:6a:da:
                    63:97:69:72:e4:b1:b6:d5:6d:28:77:04:c4:69:61:
                    1c:59:7f:91:41:84:95:99:db:bf:45:2a:22:56:9e:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:2A:D7:E9:88:92:A0:8A:13:2E:C0:96:4F:92:E8:0C:C4:E9:87
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oTAq1-mIkqCKEy7Alk-S6AzE6Yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:13:af:73:d7:c1:8a:3b:35:c9:12:26:b4:6a:33:f8:b9:57:
         d8:1a:17:a5:86:6d:16:98:f6:cb:70:63:52:1f:02:81:fc:8c:
         54:33:83:9d:37:37:61:d5:14:2d:08:aa:c3:57:be:bf:b0:1d:
         82:a2:a0:38:6e:98:d0:89:07:55:2a:2c:fb:6c:13:a4:cd:cd:
         67:9b:2c:43:a5:bf:87:7d:40:e2:94:fe:61:c1:6c:67:1b:3d:
         c2:3c:87:8b:79:b9:14:fe:d5:25:ca:e3:49:a7:a1:11:b9:51:
         56:ca:dc:b1:c4:24:36:af:9b:b6:ac:70:69:69:20:8f:85:8f:
         c4:26:d1:29:09:a6:6d:03:07:07:80:f3:e2:4f:e3:1b:1b:ab:
         92:d2:4a:33:fb:3e:c3:b9:79:e8:b6:55:d8:1b:e6:05:9d:b8:
         77:91:b6:5c:87:b2:76:d4:63:88:11:e6:b7:53:11:6c:44:df:
         56:6c:c9:c2:ed:c0:7a:34:03:07:99:5f:72:bd:d2:10:e8:d3:
         2d:3c:d7:fb:1d:ca:9d:fc:dc:8d:5b:0a:19:82:cd:92:bd:51:
         04:87:e9:fa:9f:d0:cd:7f:6d:01:6d:4a:08:e2:30:b7:13:d1:
         03:66:1c:71:96:06:4a:0a:15:a2:fe:19:55:30:59:8d:d3:9a:
         13:d6:ab:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfXAaw09LmFncMszMZWQPSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTAxMTExMDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTMwMmFkN2U5ODg5MmEwOGExMzJlYzA5NjRmOTJlODBjYzRlOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV27lJS8r//R7hbBNlKEP/hUePB6
tDQRX0nfBjSmhBADnd6HivrUKhsJ8ieRs2KK+qFQR9xntQU1GOdabXKibdP3FTbj
cvwLHcSPu4dodchSOPcH0dvPzGVsUYl9L1JPOx3puJkZHIq3NiO5a39Xd8BTFU5/
PiM3XjIl29NMdaQDF3ZRaUIufMqYK317D2Bxhi4VFpVZ0Yokb28tXU7cnHEXDM4u
zM0Iy3Qmj5NQL0cH60zk0lk85FsPtjzwv5mPyeL0NWx5FNMGCV8fVPvtE6saMCZ+
9LXI0pJGHEKQatpjl2ly5LG21W0odwTEaWEcWX+RQYSVmdu/RSoiVp55kwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKEwKtfpiJKgihMuwJZPkugMxOmHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvb1RBcTEtbUlrcUNLRXk3QWxrLVM2QXpFNlljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIwTr3PXwYo7NckSJrRq
M/i5V9gaF6WGbRaY9stwY1IfAoH8jFQzg503N2HVFC0IqsNXvr+wHYKioDhumNCJ
B1UqLPtsE6TNzWebLEOlv4d9QOKU/mHBbGcbPcI8h4t5uRT+1SXK40mnoRG5UVbK
3LHEJDavm7ascGlpII+Fj8Qm0SkJpm0DBweA8+JP4xsbq5LSSjP7PsO5eei2Vdgb
5gWduHeRtlyHsnbUY4gR5rdTEWxE31ZsycLtwHo0AweZX3K90hDo0y081/sdyp38
3I1bChmCzZK9UQSH6fqf0M1/bQFtSgjiMLcT0QNmHHGWBkoKFaL+GVUwWY3TmhPW
q90=
-----END CERTIFICATE-----