Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q76v3A650DrYbW77rDXJgyGASo.roa
File:                     1-Q76v3A650DrYbW77rDXJgyGASo.roa (raw, json)
Hash identifier:          dV6wH+10nu6y/xTDUylo/qLByiTejtZWTjpamKtm8fA=
Subject key identifier:   F9:0E:FA:BF:70:3A:E7:40:EB:61:B5:BB:EE:B0:D7:26:0C:86:01:2A
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186CC17211B8C55B0A5CA44D57A5128F77A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q76v3A650DrYbW77rDXJgyGASo.roa
Signing time:             Fri 10 Mar 2023 15:15:13 +0000
ROA not before:           Fri 10 Mar 2023 15:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cc:17:21:1b:8c:55:b0:a5:ca:44:d5:7a:51:28:f7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 10 15:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f90efabf703ae740eb61b5bbeeb0d7260c86012a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:8c:b5:f2:07:89:e8:85:76:47:7f:9a:4f:
                    4c:8c:93:1c:f5:16:7d:2a:a5:91:96:b9:ef:02:cd:
                    cb:45:9a:84:ee:7f:9f:36:cb:d0:70:f7:54:2d:29:
                    7a:89:04:28:4d:c8:c5:a0:05:b6:49:ad:0b:cb:a6:
                    de:e6:e5:5b:b0:7f:c7:e6:5a:55:ed:bf:01:b0:73:
                    30:30:70:79:a3:bd:83:33:c8:14:46:19:10:71:c3:
                    fd:21:98:7c:f9:18:e6:6b:3f:31:58:8a:10:5c:b8:
                    e9:ac:9c:fd:0c:ef:72:46:e7:88:82:ad:95:e5:83:
                    54:a3:c3:53:b9:ae:57:95:37:dd:54:d0:f6:8c:a0:
                    68:73:1f:37:3c:86:ee:07:3e:12:22:d2:43:94:17:
                    80:1f:a0:76:17:5a:8b:68:7c:a1:47:f3:89:3c:0f:
                    85:c3:e1:05:09:f3:cf:ca:34:d0:e0:24:71:d3:65:
                    66:ad:02:90:5e:79:45:c9:7e:b2:da:aa:79:61:73:
                    1e:e7:28:db:f4:cf:87:0b:eb:38:08:5b:4c:d0:42:
                    53:a5:46:42:97:b4:ab:98:f6:d3:00:46:b9:29:12:
                    3d:d7:b4:be:99:23:b3:ee:5e:08:e8:64:a5:a2:a4:
                    0e:ca:95:75:97:59:c8:81:6c:51:ac:84:c5:19:a9:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:FA:BF:70:3A:E7:40:EB:61:B5:BB:EE:B0:D7:26:0C:86:01:2A
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Q76v3A650DrYbW77rDXJgyGASo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:89:36:e0:96:37:f9:03:2b:29:48:83:58:69:dd:95:f2:b9:
         1b:54:92:30:3a:8b:f9:f6:9b:26:78:2e:d1:9b:05:d1:41:0d:
         93:92:82:c3:7e:ee:ac:ed:22:e8:08:70:c7:4c:ff:7f:ce:8f:
         64:55:ee:9f:14:21:da:90:0d:8a:00:94:96:49:cf:95:c6:8c:
         17:37:54:5e:3d:10:a8:10:07:2f:08:21:f6:71:51:40:a4:57:
         ec:9a:9c:ec:f4:d6:c0:16:7f:6e:69:3d:df:27:75:b0:46:87:
         3d:6a:6a:fd:63:7d:1f:82:7e:d5:8e:61:45:7c:5d:43:42:5f:
         52:ff:6a:2b:ef:8f:a4:70:93:63:5d:83:2a:c8:27:33:df:c5:
         17:71:ea:02:7e:3f:03:76:93:d1:d4:21:d6:03:c7:c0:b7:0a:
         da:b2:19:75:8c:ec:7d:7c:d9:49:30:52:33:ef:c6:2e:c4:11:
         2c:cb:38:98:35:55:87:c4:68:73:aa:91:74:23:f2:01:47:b2:
         81:fd:c5:e8:57:a2:53:c3:c3:87:e4:93:17:6d:72:c0:f2:85:
         75:b0:66:08:d4:79:2e:e3:9d:75:c8:5c:34:ac:f1:43:a3:13:
         5d:3d:77:15:3e:23:e7:10:ae:c9:e0:30:56:d0:86:b7:84:44:
         f8:74:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----