Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3nsib8bR9e9J-xZCK4cNb2zYTs.roa
File:                     H3nsib8bR9e9J-xZCK4cNb2zYTs.roa (raw, json)
Hash identifier:          KaMQKTUoJ/p+jt/f2F26Mc3kg9Hh7oc7G4ZVt1uDdw4=
Subject key identifier:   1F:79:EC:89:BF:1B:47:D7:BD:27:EC:59:08:AE:1C:35:BD:B3:61:3B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186BA095AE8927F5BDFE087B52B3D6D7FDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3nsib8bR9e9J-xZCK4cNb2zYTs.roa
Signing time:             Tue 07 Mar 2023 03:07:00 +0000
ROA not before:           Tue 07 Mar 2023 03:07:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:ba08:c2f5/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ba:09:5a:e8:92:7f:5b:df:e0:87:b5:2b:3d:6d:7f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  7 03:07:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1f79ec89bf1b47d7bd27ec5908ae1c35bdb3613b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c2:f6:e7:3d:80:ed:9f:35:e5:3f:8b:53:31:
                    87:aa:de:bc:69:2e:ff:ba:72:83:31:90:d3:56:25:
                    fb:94:8c:1d:13:c5:ec:73:70:ec:2d:6a:45:fb:f3:
                    c4:d7:b9:77:6e:42:3b:62:c7:7f:be:4e:e7:2c:50:
                    ed:ed:98:b9:4b:90:4c:80:1e:76:cc:a7:b4:fe:75:
                    b7:88:3a:23:5f:c9:d3:8a:c0:94:cd:13:7a:9b:5b:
                    ab:82:6b:3a:8a:a4:34:33:b1:e3:c8:53:58:b0:89:
                    75:3b:7a:2f:6e:dd:95:c8:ba:fc:33:4d:83:55:6f:
                    f1:39:a8:4a:80:bf:c9:d1:66:56:ed:37:4d:4d:bc:
                    b5:4d:89:fb:bf:ed:10:0f:91:c9:71:fd:92:39:cf:
                    04:90:24:b5:32:97:4f:ab:8c:c7:06:b3:38:60:49:
                    b5:76:69:0d:d3:13:b7:9f:18:07:bf:25:13:ea:ca:
                    df:22:73:5f:7c:31:bb:36:d4:95:64:e7:85:ed:cf:
                    5d:13:71:d0:70:a4:cf:7e:4b:51:ca:85:02:3a:9f:
                    d6:6e:a1:98:3e:c1:a1:b8:9f:8d:b8:64:03:54:d7:
                    87:be:5d:98:90:da:74:7b:bd:de:8c:9f:85:f3:34:
                    fd:ab:7f:03:cb:3c:ee:c1:ca:9a:d0:19:a2:20:af:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:EC:89:BF:1B:47:D7:BD:27:EC:59:08:AE:1C:35:BD:B3:61:3B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H3nsib8bR9e9J-xZCK4cNb2zYTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:bf:ff:86:2a:e2:34:0a:a2:8a:39:ef:51:38:a8:ac:e3:
         9c:ea:33:18:7b:79:a6:9d:a8:32:c0:dd:6f:07:fc:62:70:bf:
         70:50:e8:99:ea:b7:1c:e9:ad:84:ce:ff:c9:e4:c0:86:3b:4f:
         39:85:f8:67:51:33:5f:35:20:b7:d1:63:91:50:f9:a2:c5:29:
         76:f5:71:a0:c6:d7:01:f1:3c:4c:97:a1:6f:c6:c0:5a:b7:3d:
         f9:2e:f3:d9:c4:2c:3d:c7:55:c6:35:de:9a:fa:f7:9f:7c:1c:
         50:49:26:2d:64:b4:d6:69:3e:c9:91:b6:23:e0:b1:7d:84:d3:
         d2:9b:ae:af:e5:44:9e:58:6a:59:19:a1:1c:8e:7e:93:73:8f:
         c0:35:e5:2e:e1:dc:29:1b:d4:b9:e0:89:31:c7:66:cc:f2:f4:
         18:c0:5a:b6:65:a6:9b:de:72:c3:de:24:9d:35:d5:66:f2:34:
         9f:5f:28:c3:c9:74:03:fb:5c:92:60:82:93:c6:69:f9:f1:b7:
         f9:4b:52:df:5c:9b:b0:01:c4:8e:82:52:bf:dd:46:c2:cc:31:
         66:c9:b2:62:c1:0a:d7:86:bb:0a:e9:8e:b2:cb:80:4a:c0:c9:
         68:3c:6c:fc:cb:27:b9:88:ab:2b:7f:13:54:4a:ea:c2:97:94:
         cf:eb:fb:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa6CVrokn9b3+CHtSs9bX/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA3MDMwNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc5ZWM4OWJmMWI0N2Q3YmQyN2VjNTkwOGFlMWMzNWJkYjM2MTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcL25z2A7Z815T+LUzGHqt68aS7/
unKDMZDTViX7lIwdE8Xsc3DsLWpF+/PE17l3bkI7Ysd/vk7nLFDt7Zi5S5BMgB52
zKe0/nW3iDojX8nTisCUzRN6m1urgms6iqQ0M7HjyFNYsIl1O3ovbt2VyLr8M02D
VW/xOahKgL/J0WZW7TdNTby1TYn7v+0QD5HJcf2SOc8EkCS1MpdPq4zHBrM4YEm1
dmkN0xO3nxgHvyUT6srfInNffDG7NtSVZOeF7c9dE3HQcKTPfktRyoUCOp/WbqGY
PsGhuJ+NuGQDVNeHvl2YkNp0e73ejJ+F8zT9q38Dyzzuwcqa0BmiIK9j1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFB957Im/G0fXvSfsWQiuHDW9s2E7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvSDNuc2liOGJSOWU5Si14WkNLNGNOYjJ6WVRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAKhv/+GKuI0CqKKOe9R
OKis45zqMxh7eaadqDLA3W8H/GJwv3BQ6JnqtxzprYTO/8nkwIY7TzmF+GdRM181
ILfRY5FQ+aLFKXb1caDG1wHxPEyXoW/GwFq3Pfku89nELD3HVcY13pr69598HFBJ
Ji1ktNZpPsmRtiPgsX2E09Kbrq/lRJ5YalkZoRyOfpNzj8A15S7h3Ckb1LngiTHH
Zszy9BjAWrZlppvecsPeJJ011WbyNJ9fKMPJdAP7XJJggpPGafnxt/lLUt9cm7AB
xI6CUr/dRsLMMWbJsmLBCteGuwrpjrLLgErAyWg8bPzLJ7mIqyt/E1RK6sKXlM/r
+zE=
-----END CERTIFICATE-----