Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uDlXPBkpnvf28In1LHfuCD-zHag.roa
File:                     uDlXPBkpnvf28In1LHfuCD-zHag.roa (raw, json)
Hash identifier:          ZHBIWAHdXl72tVTTbWhr7xUAB4zJ3w1QRQHk5AaLS20=
Subject key identifier:   B8:39:57:3C:19:29:9E:F7:F6:F0:89:F5:2C:77:EE:08:3F:B3:1D:A8
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187A49502603C1328A0916C4E12859A6C8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uDlXPBkpnvf28In1LHfuCD-zHag.roa
Signing time:             Fri 21 Apr 2023 16:10:41 +0000
ROA not before:           Fri 21 Apr 2023 16:10:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a4:95:02:60:3c:13:28:a0:91:6c:4e:12:85:9a:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 21 16:10:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b839573c19299ef7f6f089f52c77ee083fb31da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2d:07:93:14:a1:03:34:e2:ba:c5:41:0b:f1:
                    91:6e:9b:b0:dc:ae:55:26:98:3a:9a:17:e6:4c:af:
                    d7:57:0b:70:d6:4d:a3:59:e5:91:15:29:f3:b9:22:
                    41:7b:ef:4f:6d:4d:aa:b8:30:4a:cb:85:dc:9c:e6:
                    17:74:35:6e:ac:80:4b:bd:0b:12:c4:0b:38:80:96:
                    64:db:32:44:05:60:cc:1a:00:82:11:26:4c:9e:a3:
                    02:1d:98:a9:d5:ba:05:5f:4b:a1:6f:55:7f:04:6c:
                    b8:40:4e:af:55:9c:ed:db:0b:58:b1:b5:4b:14:03:
                    8e:e0:34:2b:ee:a4:f5:86:50:de:41:09:29:bb:fd:
                    96:48:13:5f:58:58:83:bd:26:a6:72:c3:27:17:d7:
                    d2:fe:4a:df:c0:c5:0d:ca:27:6f:30:8a:7e:52:bd:
                    da:47:c6:2a:77:2b:e0:db:49:52:db:8b:81:b5:32:
                    b8:d0:36:19:60:7b:17:96:0d:ac:0c:20:6d:3e:43:
                    aa:a3:2b:15:8e:da:07:f7:a5:d4:d9:cf:86:cd:07:
                    e8:78:f3:71:e6:c8:8b:61:0e:b5:59:34:b4:54:25:
                    f7:1c:c4:27:21:39:23:4f:c1:c7:5e:4c:9c:05:5b:
                    d2:bc:57:b8:2e:dd:50:08:ea:da:e2:cf:df:04:c8:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:39:57:3C:19:29:9E:F7:F6:F0:89:F5:2C:77:EE:08:3F:B3:1D:A8
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uDlXPBkpnvf28In1LHfuCD-zHag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:79:ab:ae:58:9e:50:59:21:eb:e8:1b:98:01:95:38:89:48:
         97:17:e6:a3:fd:da:44:e3:90:65:43:10:00:67:7a:b2:03:f0:
         ca:0e:22:36:88:e9:7f:27:32:82:13:74:99:cb:99:f5:19:ce:
         92:d4:f8:6b:47:fd:73:c0:0c:fe:42:0f:83:5e:08:42:04:95:
         fd:70:0d:cc:7e:26:c4:24:3e:a6:d8:53:93:ee:85:64:98:3d:
         c0:de:7e:af:17:f7:1a:c3:54:c5:e5:af:4c:42:6c:9e:bc:37:
         4f:f8:c5:3d:04:fd:e8:1a:5e:40:02:2c:c3:d8:cf:15:0f:70:
         69:43:e7:36:e9:a2:3b:5e:2e:76:05:1d:76:f5:ff:89:34:93:
         02:48:23:5a:0b:fd:41:05:85:95:72:f8:41:79:d3:86:a8:3a:
         07:4b:d9:66:65:ec:ee:9c:41:89:50:2c:54:a3:79:7b:c6:6a:
         33:13:d0:ac:28:96:d9:09:a5:68:2c:2b:97:55:d5:c6:3d:87:
         4e:be:f0:e8:1c:bb:0c:78:f4:3d:5e:c2:9d:ce:4c:ab:45:44:
         a2:e0:1c:16:0f:24:1e:27:2e:5e:61:3e:ac:45:86:2c:3d:c9:
         c5:d6:52:97:34:66:ac:75:74:99:7e:95:6d:8c:25:32:02:91:
         ec:0a:4a:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeklQJgPBMooJFsThKFmmyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDIxMTYxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODM5NTczYzE5Mjk5ZWY3ZjZmMDg5ZjUyYzc3ZWUwODNmYjMxZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi0HkxShAzTiusVBC/GRbpuw3K5V
Jpg6mhfmTK/XVwtw1k2jWeWRFSnzuSJBe+9PbU2quDBKy4XcnOYXdDVurIBLvQsS
xAs4gJZk2zJEBWDMGgCCESZMnqMCHZip1boFX0uhb1V/BGy4QE6vVZzt2wtYsbVL
FAOO4DQr7qT1hlDeQQkpu/2WSBNfWFiDvSamcsMnF9fS/krfwMUNyidvMIp+Ur3a
R8Yqdyvg20lS24uBtTK40DYZYHsXlg2sDCBtPkOqoysVjtoH96XU2c+GzQfoePNx
5siLYQ61WTS0VCX3HMQnITkjT8HHXkycBVvSvFe4Lt1QCOra4s/fBMiidQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLg5VzwZKZ739vCJ9Sx37gg/sx2oMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdURsWFBCa3BudmYyOEluMUxIZnVDRC16SGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHJ5q65YnlBZIevoG5gB
lTiJSJcX5qP92kTjkGVDEABnerID8MoOIjaI6X8nMoITdJnLmfUZzpLU+GtH/XPA
DP5CD4NeCEIElf1wDcx+JsQkPqbYU5PuhWSYPcDefq8X9xrDVMXlr0xCbJ68N0/4
xT0E/egaXkACLMPYzxUPcGlD5zbpojteLnYFHXb1/4k0kwJII1oL/UEFhZVy+EF5
04aoOgdL2WZl7O6cQYlQLFSjeXvGajMT0KwoltkJpWgsK5dV1cY9h06+8Ogcuwx4
9D1ewp3OTKtFRKLgHBYPJB4nLl5hPqxFhiw9ycXWUpc0Zqx1dJl+lW2MJTICkewK
SlM=
-----END CERTIFICATE-----