Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/swPqb1KX8SJo2Tj-gy7AIbHmQNI.roa
File:                     swPqb1KX8SJo2Tj-gy7AIbHmQNI.roa (raw, json)
Hash identifier:          PGyCaTaxpSxkoNFzaTGiH0Asc3Ern0hYFvwIlnVtABs=
Subject key identifier:   B3:03:EA:6F:52:97:F1:22:68:D9:38:FE:83:2E:C0:21:B1:E6:40:D2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188051E71580547240C50EE3CDB7FC6A384
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/swPqb1KX8SJo2Tj-gy7AIbHmQNI.roa
Signing time:             Wed 10 May 2023 10:04:21 +0000
ROA not before:           Wed 10 May 2023 10:04:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:188:51e:621e/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:1e:71:58:05:47:24:0c:50:ee:3c:db:7f:c6:a3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 10 10:04:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b303ea6f5297f12268d938fe832ec021b1e640d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:86:ba:0c:55:7d:28:7e:76:dd:5a:2c:6a:
                    15:f8:e1:88:ab:15:d3:9b:dc:83:39:ac:41:ae:79:
                    0c:82:15:43:66:e5:0c:78:74:76:8b:14:32:f4:a8:
                    bc:d5:f3:a7:ae:4f:99:95:e9:b7:a2:3c:59:11:65:
                    9d:1e:e8:7a:18:aa:30:20:36:74:20:a1:70:82:ee:
                    3e:95:78:82:1d:9d:c8:da:cb:e5:e7:e0:8b:31:24:
                    19:7c:8c:6c:15:44:5c:a7:3e:ca:2d:37:46:74:b4:
                    6f:69:77:4c:de:1a:40:13:ba:07:56:08:df:5f:99:
                    cd:ac:7f:b5:d4:0b:00:c5:2b:23:20:43:78:ed:34:
                    36:52:33:03:b3:e3:c2:06:2b:42:66:91:ae:9d:cb:
                    f4:99:ab:cc:1b:a0:7a:75:e8:bc:90:5e:87:e1:b9:
                    97:df:8a:c1:79:da:86:a2:00:85:68:fc:92:4e:c5:
                    14:d0:2d:81:bf:08:92:c4:14:16:d9:0e:70:2e:f3:
                    9c:c6:cf:b0:cb:af:b2:46:f6:2d:9f:02:ca:58:ec:
                    ac:32:94:60:19:3a:55:70:c7:3d:04:ac:ad:7f:61:
                    03:a9:21:99:2b:c0:4a:ee:41:6d:03:8f:33:e2:92:
                    68:38:52:42:ba:b3:a6:b3:d4:0b:41:94:69:f3:95:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:EA:6F:52:97:F1:22:68:D9:38:FE:83:2E:C0:21:B1:E6:40:D2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/swPqb1KX8SJo2Tj-gy7AIbHmQNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:b4:63:6e:10:0b:a2:3b:4f:34:26:91:04:15:a6:4e:30:
         2d:d6:a5:ac:8d:ef:cb:2b:38:ee:28:cd:83:94:38:b3:4e:d3:
         8e:b2:7e:d3:75:b3:eb:94:01:58:d3:cd:5a:b5:33:34:f2:85:
         9b:2d:4d:1d:a5:26:29:0c:11:95:79:d1:b4:67:25:8f:a8:9b:
         ac:a8:1f:db:c3:4a:2c:e3:4a:22:21:1d:d3:0a:b0:4f:75:23:
         72:09:88:60:4b:db:66:02:d6:d3:50:41:7e:22:7c:00:7b:56:
         80:17:93:a0:3a:f7:ea:13:3c:57:e4:c7:7f:4f:bc:de:88:d0:
         9e:87:10:14:5c:62:aa:1e:4d:23:41:86:31:bb:04:df:3a:b6:
         15:75:75:69:81:63:91:ce:6f:d2:76:54:ca:ef:71:9c:9e:4a:
         fe:e2:8d:0f:b0:e8:37:80:d2:05:17:13:5c:62:4c:fa:21:68:
         2e:8b:1d:86:e3:b8:83:ee:9c:3b:66:18:52:62:0d:30:d4:93:
         46:ce:0f:d3:50:4a:a9:4e:61:98:2e:ea:78:fa:82:e2:6f:0a:
         18:72:6a:34:89:78:f0:e2:3a:c2:8b:e8:57:bc:d5:36:1f:f0:
         85:85:b4:69:16:cb:e2:14:f3:a0:63:04:eb:18:58:f9:af:81:
         df:75:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----