Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qcxy9SGbRW0cfxxmRH-YDv8CdY4.roa
File:                     qcxy9SGbRW0cfxxmRH-YDv8CdY4.roa (raw, json)
Hash identifier:          9rfK5JWfG/trC058uR1GK3TJ779MakOxHdPxLli5rok=
Subject key identifier:   A9:CC:72:F5:21:9B:45:6D:1C:7F:1C:66:44:7F:98:0E:FF:02:75:8E
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01869744599DE3A57A1CD65C26C0AA4B1082
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qcxy9SGbRW0cfxxmRH-YDv8CdY4.roa
Signing time:             Tue 28 Feb 2023 09:04:44 +0000
ROA not before:           Tue 28 Feb 2023 09:04:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9743:d639/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:97:44:59:9d:e3:a5:7a:1c:d6:5c:26:c0:aa:4b:10:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Feb 28 09:04:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a9cc72f5219b456d1c7f1c66447f980eff02758e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:de:ad:66:69:b3:b3:1c:63:47:56:cb:76:
                    9d:55:28:e1:51:51:c1:22:c0:58:a0:16:ca:a4:ac:
                    2d:fd:d8:cd:8d:da:5d:c7:19:cc:c2:6a:c6:d1:ca:
                    b1:e5:e0:3c:f0:f4:62:cf:61:32:ed:9f:35:51:db:
                    68:87:f9:b9:97:68:25:3d:02:75:ad:98:42:6d:33:
                    dc:a5:d0:0c:8c:df:8b:d4:66:c3:34:3c:53:43:87:
                    17:a4:ff:fa:16:74:1d:4f:a3:5c:b4:57:ed:1c:87:
                    da:0a:91:3f:9d:c2:f2:9e:74:95:98:f4:37:38:66:
                    31:8a:3c:e8:8e:37:47:dd:05:6b:17:99:e4:97:b6:
                    bb:23:8a:fe:6c:2a:1f:cc:06:bb:90:de:47:30:bf:
                    a4:41:70:0d:45:01:e9:3f:37:5a:7d:8f:8a:94:2e:
                    ab:26:02:07:1e:29:e4:ae:79:a8:cb:ce:aa:f5:35:
                    46:ed:1c:a5:d3:ee:6c:ba:91:cb:12:f6:03:88:75:
                    75:49:a0:f7:35:84:85:21:04:4d:4c:03:f9:d2:e3:
                    b6:40:a8:09:bf:db:bb:73:82:c1:d6:2d:94:dd:ea:
                    9a:79:2c:83:4b:f0:24:00:2b:06:44:ee:d6:f1:53:
                    74:6d:d4:76:dd:e8:d9:5a:3c:b3:a1:34:e9:73:f3:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CC:72:F5:21:9B:45:6D:1C:7F:1C:66:44:7F:98:0E:FF:02:75:8E
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/qcxy9SGbRW0cfxxmRH-YDv8CdY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:4b:f2:34:cf:32:b5:02:04:21:53:8f:4e:2b:7c:89:fb:2d:
         22:ab:09:2e:0a:1c:a1:90:c9:14:5f:95:28:ab:d6:61:45:4d:
         6d:c3:15:fc:89:0e:cd:39:85:c4:5b:d3:d7:6b:86:65:96:b2:
         d2:0f:fa:0f:a0:07:e8:92:f2:18:fd:9e:75:a8:08:a1:71:4d:
         34:c8:18:8d:06:57:09:67:47:de:8c:b9:34:8f:db:b2:36:74:
         cc:2e:8c:1a:29:e4:b0:0d:22:35:1b:60:37:5f:a9:17:a6:fe:
         52:28:d0:57:ab:03:39:50:fb:b6:27:27:2d:52:86:0d:a6:98:
         b6:c8:c2:2b:4b:ff:8f:fa:00:66:34:bc:a8:07:2e:1d:e9:dd:
         11:91:98:68:7c:88:35:66:6b:9f:76:87:a7:77:e9:98:2d:e4:
         d1:73:87:5b:ff:4e:51:11:22:b6:2c:8b:5b:da:11:00:38:72:
         02:cc:9a:16:a6:f5:c6:0e:aa:26:3e:9b:6a:6f:59:05:1b:a4:
         8f:5f:98:43:60:23:27:4a:63:0c:38:f4:25:50:df:14:88:c5:
         02:b1:84:b6:48:04:5d:3d:92:41:f8:ef:e6:1e:09:22:05:74:
         2c:89:18:c8:29:9c:09:09:aa:aa:f0:1c:4f:32:9c:ca:6f:6f:
         01:03:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----