Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3mh-FsveJomhFYPM8ogsWdxwjg.roa
File:                     z3mh-FsveJomhFYPM8ogsWdxwjg.roa (raw, json)
Hash identifier:          m20zK0Ku7O3kYzpipY6uknuJABjkox6B0CY2fc+zQDU=
Subject key identifier:   CF:79:A1:F8:5B:2F:78:9A:26:84:56:0F:33:CA:20:B1:67:71:C2:38
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018775FF597BD1EFE3681CF9E942BD546C6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3mh-FsveJomhFYPM8ogsWdxwjg.roa
Signing time:             Wed 12 Apr 2023 15:04:41 +0000
ROA not before:           Wed 12 Apr 2023 15:04:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:187:75ff:53c8/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:75:ff:59:7b:d1:ef:e3:68:1c:f9:e9:42:bd:54:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 12 15:04:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf79a1f85b2f789a2684560f33ca20b16771c238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1d:da:ad:07:d0:89:17:cf:b2:40:2b:74:53:
                    45:c2:4b:df:12:4a:35:fd:41:db:16:97:af:1b:61:
                    ad:5a:c8:69:7b:58:7d:59:6e:b8:3d:08:60:9f:a1:
                    d4:a6:84:d3:3c:2b:56:68:c4:01:2d:5b:98:09:d4:
                    ac:b2:de:7f:f1:d1:67:55:41:d1:06:98:03:78:6d:
                    de:ce:78:95:01:15:4d:9e:5c:06:26:bf:45:bc:30:
                    67:04:4d:95:18:ab:ae:aa:8c:3c:dd:21:df:61:64:
                    1c:02:3a:17:50:38:f5:85:6f:f1:72:26:fb:e9:2f:
                    81:16:f3:d2:f8:25:eb:90:c8:c7:47:69:ed:66:41:
                    a9:93:54:12:bc:19:af:00:20:06:54:5d:07:5a:6d:
                    99:78:91:c7:5a:22:d3:98:ff:83:a5:6a:fe:a5:f2:
                    7e:3d:f4:01:8e:cb:5f:12:3a:0a:7f:59:79:0f:a3:
                    63:d2:ee:7f:82:83:6b:be:6c:74:f9:04:71:e1:9d:
                    56:ba:da:ef:1d:36:28:bb:88:e1:fc:fa:01:8a:d4:
                    87:e0:7d:5b:a1:4d:d1:18:4b:02:c2:09:c7:2c:00:
                    cb:07:57:ae:99:20:96:2f:cd:61:1e:9e:f0:a0:2f:
                    0b:6e:7b:33:2b:e4:62:13:b2:e0:77:01:f3:4a:8f:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:A1:F8:5B:2F:78:9A:26:84:56:0F:33:CA:20:B1:67:71:C2:38
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3mh-FsveJomhFYPM8ogsWdxwjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:19:c5:0b:cb:4a:2d:40:47:e7:bf:56:4b:74:07:36:2a:a5:
         51:2d:4a:34:c1:3e:46:d2:29:c6:ba:31:39:a4:c6:4d:6f:ef:
         ac:19:d6:57:5b:ab:d5:8b:22:3c:d6:eb:62:55:1b:c6:fc:6d:
         99:ac:65:ef:8d:c5:6f:41:b6:8b:0f:82:6a:42:d4:9a:39:5e:
         3e:bc:68:77:96:5c:27:19:a0:0a:8e:69:c4:9f:0f:ef:b7:aa:
         fa:cf:5d:e4:8f:94:33:df:c4:db:45:e2:8a:31:10:bb:04:26:
         03:46:d1:3b:93:a9:c7:f6:02:de:ac:a3:b3:92:71:31:dc:42:
         f9:f9:9f:3b:a0:72:34:7d:23:aa:e6:fb:69:86:2b:c6:86:c9:
         ac:01:a9:95:05:94:6f:a9:b4:e8:12:7f:40:4f:2d:98:89:49:
         e4:45:30:b0:28:d3:49:2f:45:79:71:5f:6c:2d:0f:54:99:73:
         07:70:5b:57:9d:40:a1:a1:d0:cb:79:8b:09:07:5f:59:72:76:
         0f:2d:6d:13:ab:82:b4:81:37:4d:64:fd:cc:3d:d3:e4:ff:2b:
         5b:84:13:f3:b7:ec:8c:f9:54:63:f5:8d:d4:2b:12:ce:97:a4:
         4c:d9:ec:a9:f5:fe:80:8e:55:4e:1b:88:01:0b:9a:f0:87:94:
         64:9e:de:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd1/1l70e/jaBz56UK9VGxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMTUwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjc5YTFmODViMmY3ODlhMjY4NDU2MGYzM2NhMjBiMTY3NzFjMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh3arQfQiRfPskArdFNFwkvfEko1
/UHbFpevG2GtWshpe1h9WW64PQhgn6HUpoTTPCtWaMQBLVuYCdSsst5/8dFnVUHR
BpgDeG3ezniVARVNnlwGJr9FvDBnBE2VGKuuqow83SHfYWQcAjoXUDj1hW/xcib7
6S+BFvPS+CXrkMjHR2ntZkGpk1QSvBmvACAGVF0HWm2ZeJHHWiLTmP+DpWr+pfJ+
PfQBjstfEjoKf1l5D6Nj0u5/goNrvmx0+QRx4Z1WutrvHTYou4jh/PoBitSH4H1b
oU3RGEsCwgnHLADLB1eumSCWL81hHp7woC8LbnszK+RiE7LgdwHzSo9UowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM95ofhbL3iaJoRWDzPKILFnccI4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvejNtaC1Gc3ZlSm9taEZZUE04b2dzV2R4d2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIQZxQvLSi1AR+e/Vkt0
BzYqpVEtSjTBPkbSKca6MTmkxk1v76wZ1ldbq9WLIjzW62JVG8b8bZmsZe+NxW9B
tosPgmpC1Jo5Xj68aHeWXCcZoAqOacSfD++3qvrPXeSPlDPfxNtF4ooxELsEJgNG
0TuTqcf2At6so7OScTHcQvn5nzugcjR9I6rm+2mGK8aGyawBqZUFlG+ptOgSf0BP
LZiJSeRFMLAo00kvRXlxX2wtD1SZcwdwW1edQKGh0Mt5iwkHX1lydg8tbROrgrSB
N01k/cw90+T/K1uEE/O37Iz5VGP1jdQrEs6XpEzZ7Kn1/oCOVU4biAELmvCHlGSe
3k8=
-----END CERTIFICATE-----