Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-DOFeQWazbl-djTeSvtvRYqFTc.roa
File:                     r-DOFeQWazbl-djTeSvtvRYqFTc.roa (raw, json)
Hash identifier:          MoY8vxhR/fJRhZ1OQK6lvzWPo5z7ODWfwzYKZM2oDWs=
Subject key identifier:   AF:E0:CE:15:E4:16:6B:36:E5:F9:D8:D3:79:2B:ED:BD:16:2A:15:37
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187F6C605021F9883A5E624CA8970035193
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-DOFeQWazbl-djTeSvtvRYqFTc.roa
Signing time:             Sun 07 May 2023 15:13:05 +0000
ROA not before:           Sun 07 May 2023 15:13:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:f6:c6:05:02:1f:98:83:a5:e6:24:ca:89:70:03:51:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May  7 15:13:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=afe0ce15e4166b36e5f9d8d3792bedbd162a1537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:b4:ee:d9:4b:37:04:aa:53:5d:35:ee:34:
                    5e:e4:b0:85:8e:48:f5:b3:b8:16:3f:05:26:88:ae:
                    d8:8e:0c:a1:70:4d:50:db:e4:0c:cd:b0:33:b3:df:
                    af:67:b2:ac:0a:c1:02:b1:50:42:f0:fd:a3:70:1b:
                    00:d7:aa:44:4c:61:b4:8d:a0:e9:2d:1c:11:e4:52:
                    92:8e:b0:b4:0a:bd:19:29:49:7c:d6:68:30:3c:eb:
                    01:a3:54:82:e0:74:95:3b:65:f3:1d:e4:a6:1a:cd:
                    c7:00:6a:d7:e3:64:b3:8b:8d:19:9c:95:c8:ab:44:
                    68:35:5e:72:14:0b:31:64:ab:e6:02:d1:b4:34:33:
                    02:b2:63:73:09:38:09:24:47:02:e4:28:49:03:14:
                    e9:d3:b8:e8:8c:8f:c0:50:fe:55:8a:42:e6:d1:c2:
                    2e:da:03:be:04:88:1b:a9:d5:9c:aa:7d:9a:5d:d6:
                    b3:59:03:e8:4f:ff:4b:8c:2b:07:bc:14:5f:d0:cd:
                    a2:34:49:11:9f:a0:7d:c4:bf:65:22:1e:05:76:cd:
                    c0:ba:d0:fd:b4:32:be:2e:a8:1c:d7:9f:44:ef:de:
                    09:bd:d8:b3:81:9c:91:f1:38:af:2b:1e:2b:ae:56:
                    07:25:d1:b6:aa:35:fa:15:16:24:9d:6d:08:ad:87:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:CE:15:E4:16:6B:36:E5:F9:D8:D3:79:2B:ED:BD:16:2A:15:37
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r-DOFeQWazbl-djTeSvtvRYqFTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:6f:b0:8d:11:36:ec:04:91:65:37:9e:63:85:8b:73:cd:d1:
         48:b3:8a:34:25:68:7c:35:e2:7e:ef:a5:37:80:6e:99:ee:96:
         80:29:81:b6:7c:d0:90:65:18:48:2a:e3:9e:49:6d:67:dd:20:
         e8:d3:43:3c:d7:ad:27:ac:e3:e7:26:d4:36:54:cb:c8:1f:62:
         b4:83:2b:36:8f:b0:b4:28:03:ce:80:b9:96:80:c5:0a:df:4d:
         e1:8a:11:0d:3c:60:6f:05:59:60:13:06:d2:f0:bb:4a:12:e7:
         9b:9a:ad:18:0f:42:43:30:8c:71:64:bf:c2:2d:5e:e9:dc:ba:
         0c:01:38:6f:d8:b3:ae:84:13:6b:80:54:1f:f9:9a:81:e6:2b:
         39:13:3a:66:05:43:3c:3f:5c:54:d2:6b:0d:42:4c:6f:e6:ac:
         4a:7e:26:b4:6a:62:ee:6e:a2:2f:39:9c:43:27:60:7a:26:65:
         a0:b0:ee:6e:4f:ce:b2:65:59:27:44:01:73:28:f2:35:1e:d1:
         52:f3:7d:38:f4:ee:38:7d:7a:57:dc:ce:1c:00:27:5e:95:2c:
         87:ed:95:c8:cf:ae:23:d8:0c:86:d7:de:ef:f8:e4:a0:eb:59:
         40:2f:68:2b:5e:a3:0f:e9:46:d7:cb:5c:c2:bb:9e:43:c1:08:
         5b:f1:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----