Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wd3a3yWzGeMa4DzjNjLQAOTEQW0.roa
File:                     wd3a3yWzGeMa4DzjNjLQAOTEQW0.roa (raw, json)
Hash identifier:          8PS21uCH3s4m3a54Xo+NnLFX9BxJPKzzuwXuGHemw40=
Subject key identifier:   C1:DD:DA:DF:25:B3:19:E3:1A:E0:3C:E3:36:32:D0:00:E4:C4:41:6D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188153C8CB410CB9DF7F110B76EE3996BB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wd3a3yWzGeMa4DzjNjLQAOTEQW0.roa
Signing time:             Sat 13 May 2023 13:11:09 +0000
ROA not before:           Sat 13 May 2023 13:11:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:15:3c:8c:b4:10:cb:9d:f7:f1:10:b7:6e:e3:99:6b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 13 13:11:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1dddadf25b319e31ae03ce33632d000e4c4416d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:6a:bd:2a:88:66:f1:d6:2b:80:92:f5:91:
                    60:76:4a:2c:84:97:38:af:67:35:a8:4d:4d:9c:53:
                    bd:24:ea:87:e4:9c:b6:73:e8:b4:65:f7:29:fc:a0:
                    27:e6:a3:b0:6d:0e:70:90:e7:d5:81:7a:98:96:c3:
                    3b:44:70:e3:7a:8c:f6:2e:96:19:8f:69:38:d0:d5:
                    cc:e6:5d:09:d4:80:56:2f:71:3f:dc:3f:20:57:f1:
                    ca:33:57:7c:c3:88:b2:bb:88:1f:6e:41:4d:ef:ba:
                    57:68:b1:85:7e:9f:13:d5:a2:a2:bb:8c:4b:c4:4f:
                    04:85:12:96:e9:ba:b3:8a:8e:65:b1:03:e7:4a:d0:
                    e8:70:45:85:9e:b3:56:af:ba:9e:32:5d:29:13:51:
                    a6:03:2e:02:d9:04:2d:ae:97:f2:da:30:40:08:4d:
                    13:ec:a6:4e:9d:2e:92:33:de:4c:00:d9:e8:aa:7e:
                    76:04:e5:6d:7a:61:da:ff:a4:41:6d:7b:26:65:bd:
                    56:a3:98:4b:94:8e:1c:bb:4f:0e:25:78:bb:dc:eb:
                    a1:0e:8f:67:e4:c3:52:93:ba:aa:22:a8:09:28:44:
                    a7:87:da:14:8b:38:a3:05:29:d1:21:5c:82:16:48:
                    4c:df:9b:6c:28:81:9d:e0:37:e7:39:31:a8:de:99:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DD:DA:DF:25:B3:19:E3:1A:E0:3C:E3:36:32:D0:00:E4:C4:41:6D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/wd3a3yWzGeMa4DzjNjLQAOTEQW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:fb:97:75:79:69:bc:b0:de:78:c6:a0:29:6d:de:38:e6:
         d4:84:4e:ed:06:d5:0b:45:f0:91:04:c2:c7:4a:64:44:65:53:
         dc:46:73:3d:32:12:c8:20:14:cc:c6:78:f7:7b:77:d1:ac:cf:
         af:12:a9:24:54:31:74:88:18:7b:89:44:56:a5:d5:dc:8b:69:
         dc:36:5d:a4:d3:af:f6:8c:f2:80:9b:5b:c5:e5:e2:f1:1f:d0:
         2a:a4:a1:fe:02:4b:6b:5c:fd:68:29:d8:1e:a0:df:8a:74:35:
         64:0a:66:54:00:a7:7e:2f:f3:9d:63:34:fe:dd:1b:a7:f0:86:
         54:46:55:7e:80:1c:f4:17:c7:f5:e7:0e:2e:02:a2:89:b2:1b:
         83:a3:69:2d:ae:9e:1f:9a:f7:12:79:44:d1:3f:ff:46:67:8c:
         64:03:2e:1e:01:9a:25:35:9a:42:30:da:68:87:79:97:63:27:
         89:62:d7:4b:19:7f:44:6c:b9:a4:91:71:9d:8d:64:73:8d:21:
         34:d4:e7:60:3d:f9:73:0e:7c:b1:0f:40:00:b6:35:cd:65:dd:
         50:a1:1d:55:31:cd:23:a9:15:8a:93:9c:23:7b:a9:df:19:80:
         ba:87:7e:a3:9d:de:88:79:79:8e:09:f1:8e:4e:9f:2a:07:e8:
         ef:f3:fa:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgVPIy0EMud9/EQt27jmWu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTEzMTMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWRkZGFkZjI1YjMxOWUzMWFlMDNjZTMzNjMyZDAwMGU0YzQ0MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW1qvSqIZvHWK4CS9ZFgdkoshJc4
r2c1qE1NnFO9JOqH5Jy2c+i0Zfcp/KAn5qOwbQ5wkOfVgXqYlsM7RHDjeoz2LpYZ
j2k40NXM5l0J1IBWL3E/3D8gV/HKM1d8w4iyu4gfbkFN77pXaLGFfp8T1aKiu4xL
xE8EhRKW6bqzio5lsQPnStDocEWFnrNWr7qeMl0pE1GmAy4C2QQtrpfy2jBACE0T
7KZOnS6SM95MANnoqn52BOVtemHa/6RBbXsmZb1Wo5hLlI4cu08OJXi73OuhDo9n
5MNSk7qqIqgJKESnh9oUizijBSnRIVyCFkhM35tsKIGd4DfnOTGo3pmF6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMHd2t8lsxnjGuA84zYy0ADkxEFtMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvd2QzYTN5V3pHZU1hNER6ak5qTFFBT1RFUVcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB6X+5d1eWm8sN54xqAp
bd445tSETu0G1QtF8JEEwsdKZERlU9xGcz0yEsggFMzGePd7d9Gsz68SqSRUMXSI
GHuJRFal1dyLadw2XaTTr/aM8oCbW8Xl4vEf0Cqkof4CS2tc/Wgp2B6g34p0NWQK
ZlQAp34v851jNP7dG6fwhlRGVX6AHPQXx/XnDi4CoomyG4OjaS2unh+a9xJ5RNE/
/0ZnjGQDLh4BmiU1mkIw2miHeZdjJ4li10sZf0RsuaSRcZ2NZHONITTU52A9+XMO
fLEPQAC2Nc1l3VChHVUxzSOpFYqTnCN7qd8ZgLqHfqOd3oh5eY4J8Y5OnyoH6O/z
+q0=
-----END CERTIFICATE-----