Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGHMwfGfYPB00_60KP26MN7P1gw.roa
File:                     zGHMwfGfYPB00_60KP26MN7P1gw.roa (raw, json)
Hash identifier:          YZrYTLrN1ji3Q200Y8wgTde3m3FUILKvcU5Sl7w9lQk=
Subject key identifier:   CC:61:CC:C1:F1:9F:60:F0:74:D3:FE:B4:28:FD:BA:30:DE:CF:D6:0C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186ABDE09454BCF0EEE02F41B888EE2355C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGHMwfGfYPB00_60KP26MN7P1gw.roa
Signing time:             Sat 04 Mar 2023 09:05:00 +0000
ROA not before:           Sat 04 Mar 2023 09:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:abdd:588f/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ab:de:09:45:4b:cf:0e:ee:02:f4:1b:88:8e:e2:35:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  4 09:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cc61ccc1f19f60f074d3feb428fdba30decfd60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:06:06:d7:fe:30:33:5a:43:5a:80:db:68:
                    96:39:d9:85:16:15:10:24:60:eb:ec:6e:ed:12:59:
                    02:36:09:45:a5:d3:fd:a1:e5:10:aa:47:f4:bc:c0:
                    91:21:ee:ca:1b:a0:4b:bf:5a:a0:3f:5f:05:28:11:
                    e2:d5:eb:dc:6a:f8:41:36:9c:2a:fe:c5:94:d3:15:
                    46:9d:79:93:c1:54:85:78:f7:4e:ea:c4:7b:e0:c4:
                    17:2e:9f:85:6d:bf:28:55:33:a8:ed:59:7d:03:99:
                    e2:bb:44:7e:ee:4d:2c:21:d4:36:50:8f:3e:76:df:
                    a1:6d:14:24:ee:41:cc:26:a3:47:ab:0e:92:9c:c8:
                    12:42:f1:d1:60:4d:b2:cc:c5:34:eb:34:d5:13:30:
                    fc:52:88:d2:11:1d:49:42:73:95:69:44:1d:d9:1c:
                    70:d2:9c:c4:c6:d7:bb:ae:be:c4:37:33:32:53:e6:
                    6c:2f:6f:e7:58:df:87:9b:aa:27:90:cf:a5:a5:47:
                    5a:6b:ae:83:83:35:61:f0:ba:e5:27:b0:4f:8b:5e:
                    4a:24:fc:ce:ea:b9:e9:83:37:22:99:87:63:44:9c:
                    48:ce:a3:c9:86:97:67:c5:3b:91:9f:fc:84:da:bc:
                    fa:64:76:bb:6e:a2:70:57:53:41:dc:85:e6:49:bb:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:CC:C1:F1:9F:60:F0:74:D3:FE:B4:28:FD:BA:30:DE:CF:D6:0C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGHMwfGfYPB00_60KP26MN7P1gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:90:28:c9:3e:01:9a:eb:52:04:51:80:5b:c5:70:93:36:
         48:bb:00:0a:7d:da:b3:3d:d4:f6:ab:ae:0c:78:0f:15:9c:f9:
         a2:9e:05:7e:d9:b3:9d:f7:7a:63:4a:a0:5b:9c:5e:5f:95:a2:
         e2:52:6f:c4:88:28:41:01:71:5d:25:f1:76:52:d4:1a:e6:2b:
         d6:f0:47:fa:89:26:4c:a5:28:12:47:62:85:2f:e0:99:3d:9c:
         d0:74:f3:9e:6f:bd:dc:a0:80:09:03:c1:8b:7e:89:c0:6e:e8:
         ce:01:0a:dd:a8:92:88:d7:34:d8:c6:1b:26:1d:1e:41:b9:77:
         ab:ab:33:09:5b:21:bd:2a:1b:cd:df:ad:9d:e4:f6:0a:9b:65:
         5f:0c:95:ca:01:f6:30:77:b8:28:86:16:e6:4e:d9:c8:ee:26:
         2d:4c:3c:b5:27:4a:19:f7:a1:dd:9d:5f:bf:6d:28:71:5d:03:
         d4:e4:0c:d9:14:48:6a:72:28:75:3f:f2:dc:0b:0e:2b:aa:9e:
         4b:ef:63:b1:fa:64:01:58:d7:88:ed:e8:05:25:8e:94:57:88:
         91:39:3b:ea:d3:b5:c5:b5:88:38:65:7d:e7:05:bf:50:09:f3:
         d2:2e:bd:85:11:40:8c:83:db:87:20:f2:f2:68:5e:5e:6e:32:
         a5:23:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----