Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpCLscsytqLu_O5G54Jyniq2vxQ.roa
File:                     zpCLscsytqLu_O5G54Jyniq2vxQ.roa (raw, json)
Hash identifier:          ITup3wcPz87pElBOMyBdh++9YHL/hcdrtBaF2jGT6CQ=
Subject key identifier:   CE:90:8B:B1:CB:32:B6:A2:EE:FC:EE:46:E7:82:72:9E:2A:B6:BF:14
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186C80284A593CD3D8A56E0B33617CA80E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpCLscsytqLu_O5G54Jyniq2vxQ.roa
Signing time:             Thu 09 Mar 2023 20:14:13 +0000
ROA not before:           Thu 09 Mar 2023 20:14:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c8:02:84:a5:93:cd:3d:8a:56:e0:b3:36:17:ca:80:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  9 20:14:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce908bb1cb32b6a2eefcee46e782729e2ab6bf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:83:ba:86:21:93:7e:52:ec:93:99:12:29:
                    6a:02:10:86:84:92:72:48:b0:3e:49:e9:d5:33:50:
                    e4:7b:76:32:f2:94:8e:7e:c3:85:86:6a:29:8d:b5:
                    e3:0a:c5:11:82:f7:fa:47:d1:51:0b:16:10:a7:af:
                    a7:74:f4:78:42:25:27:b0:ec:ef:ba:32:97:3e:00:
                    61:5a:0c:9d:70:a4:89:98:01:b7:c7:ca:7a:53:58:
                    2a:21:db:8b:66:44:26:42:d8:46:f1:c9:8c:f1:d6:
                    fd:3a:56:93:0b:e3:35:93:fb:06:eb:59:02:d8:03:
                    4f:2a:3d:f0:35:a3:eb:58:b9:e1:67:2b:07:ce:7a:
                    6a:b3:9a:e7:43:5a:71:d9:99:7f:54:cb:ec:3c:64:
                    0e:62:94:3c:c8:7a:a2:89:59:f6:84:3b:1f:39:08:
                    f3:13:59:87:ac:71:d8:9a:a7:2d:3e:53:0d:8a:f4:
                    41:f6:74:82:70:9b:ec:e1:7e:81:2d:81:e9:00:e4:
                    87:a5:f9:46:5e:b3:a1:c8:7e:7a:cf:ab:67:88:a5:
                    78:c4:c4:60:da:f4:57:44:f7:fe:74:0c:8e:e2:63:
                    c4:59:9c:0d:b0:07:98:79:ea:88:1e:d7:16:20:a6:
                    84:76:54:cb:b7:fb:ab:e9:8f:db:a5:18:60:0f:54:
                    0f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:8B:B1:CB:32:B6:A2:EE:FC:EE:46:E7:82:72:9E:2A:B6:BF:14
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpCLscsytqLu_O5G54Jyniq2vxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:47:84:3c:07:93:06:cc:2f:c7:82:da:1f:15:2a:07:10:f3:
         9d:5a:01:4c:ec:07:fa:5d:0b:a1:f3:e6:71:03:d7:1e:cd:70:
         2f:dd:6a:d7:86:e6:7d:70:8c:54:15:87:e0:5c:88:2f:7c:a3:
         4d:76:ef:5e:a0:f3:55:f0:9e:76:23:80:26:6e:fe:b8:e3:c7:
         3c:e0:8d:ca:9d:c8:55:65:9d:59:4a:ea:18:66:87:ed:68:d0:
         d3:60:57:8b:9d:58:ad:ed:07:00:41:8d:46:b9:63:24:04:4f:
         93:2e:73:ee:2e:44:1c:ea:96:9e:f9:72:80:91:f4:1a:bf:a5:
         3b:cd:b8:48:81:7d:fb:02:ad:7e:73:9c:fd:8c:10:dc:a2:06:
         1d:36:a4:44:59:01:27:9a:c5:74:35:8d:89:07:12:c7:20:db:
         3d:38:4a:70:19:98:27:d0:c5:ef:97:df:12:37:73:61:e4:df:
         6f:5c:78:22:fa:4c:db:20:c8:b8:b1:fd:1b:78:b6:81:3a:c4:
         a6:69:a2:7b:f8:54:a1:d4:f1:ae:c8:e6:13:8f:0a:7a:a2:f6:
         56:c7:1e:b3:62:a1:97:ca:a3:80:1c:45:25:01:ea:5f:d2:91:
         b3:13:84:db:91:89:08:94:10:01:48:bd:2e:75:34:15:95:bc:
         5e:49:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----