Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mzLKKv1Q7RiDsty-dteprKTp40.roa
File:                     5mzLKKv1Q7RiDsty-dteprKTp40.roa (raw, json)
Hash identifier:          wndTccLlpFbCcKHJoe36FeOcqrwmesyXotvhvgRBRe4=
Subject key identifier:   E6:6C:CB:28:AB:F5:43:B4:62:0E:CB:72:F9:DB:5E:A6:B2:93:A7:8D
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       018774F1118AE1E10D847C737E7873AADEE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mzLKKv1Q7RiDsty-dteprKTp40.roa
Signing time:             Wed 12 Apr 2023 10:09:28 +0000
ROA not before:           Wed 12 Apr 2023 10:09:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:f1:11:8a:e1:e1:0d:84:7c:73:7e:78:73:aa:de:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr 12 10:09:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e66ccb28abf543b4620ecb72f9db5ea6b293a78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:5d:70:84:29:9a:9f:5f:cf:f5:c3:a8:4f:
                    a4:14:03:eb:21:e7:15:44:71:23:d2:42:0d:92:df:
                    9f:c7:10:f2:3e:07:aa:9f:8f:89:0c:ba:d0:82:64:
                    20:94:48:84:5a:30:0a:96:e5:b8:d4:80:dc:3d:9c:
                    f5:80:46:8a:c2:f0:8f:93:b0:43:fd:f3:bd:a8:1f:
                    a6:1c:dd:c8:0e:a0:42:94:6f:6c:fe:14:3d:e4:86:
                    01:0e:29:b5:6f:1c:1d:ac:f4:79:61:29:0d:bc:99:
                    c6:52:62:49:ba:02:2a:4e:99:a6:26:16:20:e3:5c:
                    ec:21:15:57:38:d3:4b:96:d1:57:7a:87:fb:08:43:
                    df:fd:11:78:c2:d1:29:07:b1:0f:50:07:5f:d1:c9:
                    e6:3d:b2:e6:68:1a:df:06:ce:9c:85:5e:a0:9b:9a:
                    df:bc:0b:dd:f6:62:7d:95:a5:ad:6c:03:01:a1:ed:
                    b1:fa:df:6c:75:94:56:a7:41:07:9c:24:a2:36:85:
                    ca:31:0b:c2:50:2a:c9:9f:da:e6:a7:3a:6f:5d:ab:
                    09:97:81:93:0d:49:86:9b:aa:3a:bc:44:ee:ea:62:
                    d8:b9:13:31:64:a3:e5:cb:95:16:3b:9a:70:8c:2a:
                    c7:1e:bf:10:59:29:2f:eb:4d:2a:31:8a:07:36:fc:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6C:CB:28:AB:F5:43:B4:62:0E:CB:72:F9:DB:5E:A6:B2:93:A7:8D
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5mzLKKv1Q7RiDsty-dteprKTp40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:9f:0e:0f:f1:c4:b7:f4:f4:b3:8e:36:51:51:0b:bc:37:
         d8:78:d7:0b:6e:60:f5:f8:a5:cb:52:bb:7f:8d:d7:23:50:85:
         7e:e1:c0:f7:9e:48:aa:af:45:d3:05:90:14:44:ae:83:1d:a9:
         b9:b9:b1:02:48:0d:b3:9a:c4:7d:f6:e8:60:c4:1a:27:69:49:
         f4:9c:b5:a8:3d:ff:a1:f5:a4:b4:7b:42:82:d2:62:cc:ee:e6:
         f3:a4:1a:59:2c:ab:d4:75:84:ab:f0:b0:07:58:d4:08:97:ed:
         13:29:31:93:19:4e:c7:8a:19:86:dd:e4:22:1f:ee:29:8c:bf:
         1f:1c:10:79:28:17:29:b1:74:4b:00:fa:c4:4f:c9:e0:bc:69:
         79:f5:7d:9c:93:68:65:38:ea:6e:14:bc:bc:61:70:29:f0:10:
         5f:66:ac:3d:c5:63:a4:f6:f5:44:c7:5e:29:fb:f8:4c:ad:c0:
         a7:d1:9b:68:2a:4e:0a:91:60:ed:17:2d:b7:66:2b:eb:2a:6d:
         c6:69:99:22:f5:09:0a:f5:6c:f0:9e:8a:9e:90:d3:22:80:75:
         45:b4:57:61:ab:64:5e:21:1c:5c:ec:a8:5f:6c:eb:69:de:51:
         a2:4b:45:ae:5f:91:47:52:15:83:a7:16:d5:e2:cb:fb:fa:40:
         0e:8d:13:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYd08RGK4eENhHxzfnhzqt7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDEyMTAwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjZjY2IyOGFiZjU0M2I0NjIwZWNiNzJmOWRiNWVhNmIyOTNhNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1FdcIQpmp9fz/XDqE+kFAPrIecV
RHEj0kINkt+fxxDyPgeqn4+JDLrQgmQglEiEWjAKluW41IDcPZz1gEaKwvCPk7BD
/fO9qB+mHN3IDqBClG9s/hQ95IYBDim1bxwdrPR5YSkNvJnGUmJJugIqTpmmJhYg
41zsIRVXONNLltFXeof7CEPf/RF4wtEpB7EPUAdf0cnmPbLmaBrfBs6chV6gm5rf
vAvd9mJ9laWtbAMBoe2x+t9sdZRWp0EHnCSiNoXKMQvCUCrJn9rmpzpvXasJl4GT
DUmGm6o6vETu6mLYuRMxZKPly5UWO5pwjCrHHr8QWSkv600qMYoHNvxLawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOZsyyir9UO0Yg7LcvnbXqayk6eNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNW16TEtLdjFRN1JpRHN0eS1kdGVwcktUcDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAfZnw4P8cS39PSzjjZR
UQu8N9h41wtuYPX4pctSu3+N1yNQhX7hwPeeSKqvRdMFkBREroMdqbm5sQJIDbOa
xH326GDEGidpSfSctag9/6H1pLR7QoLSYszu5vOkGlksq9R1hKvwsAdY1AiX7RMp
MZMZTseKGYbd5CIf7imMvx8cEHkoFymxdEsA+sRPyeC8aXn1fZyTaGU46m4UvLxh
cCnwEF9mrD3FY6T29UTHXin7+EytwKfRm2gqTgqRYO0XLbdmK+sqbcZpmSL1CQr1
bPCeip6Q0yKAdUW0V2GrZF4hHFzsqF9s62neUaJLRa5fkUdSFYOnFtXiy/v6QA6N
E9w=
-----END CERTIFICATE-----