Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1fFSQjZ6R7jkfmHHMWOJ-k2HfE.roa
File:                     K1fFSQjZ6R7jkfmHHMWOJ-k2HfE.roa (raw, json)
Hash identifier:          h8vPjNq19HUS+bFwocPlctin/Elcq8x6Gcvydgns5iI=
Subject key identifier:   2B:57:C5:49:08:D9:E9:1E:E3:91:F9:87:1C:C5:8E:27:E9:36:1D:F1
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01895007BCB6C7B8B1BAEB01C331AD1595E4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1fFSQjZ6R7jkfmHHMWOJ-k2HfE.roa
Signing time:             Thu 13 Jul 2023 16:13:51 +0000
ROA not before:           Thu 13 Jul 2023 16:13:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:50:07:bc:b6:c7:b8:b1:ba:eb:01:c3:31:ad:15:95:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul 13 16:13:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b57c54908d9e91ee391f9871cc58e27e9361df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:9e:0d:24:0e:75:c3:89:be:bf:bc:c0:dd:
                    76:e7:bc:a5:8c:00:8b:f9:46:d0:35:06:8e:31:49:
                    c3:4d:bb:42:49:0c:8c:62:ba:54:df:c2:a4:af:5f:
                    eb:94:b7:1f:50:10:f2:a1:38:dc:08:8f:97:7e:c8:
                    6c:01:65:e4:f1:73:bd:f8:05:b8:5d:c2:4d:b8:69:
                    2e:cd:f8:30:c9:ea:e9:34:99:37:51:d2:82:8a:90:
                    72:25:e1:7e:fd:c1:74:84:3f:d4:a5:12:46:9d:0d:
                    5f:5d:1e:c2:27:45:fb:25:0f:8f:1b:b4:26:01:88:
                    e6:d1:ba:0d:27:99:a9:ac:fe:43:73:be:0a:7e:76:
                    14:28:f0:7e:9d:5c:24:ef:84:e0:8a:71:7e:24:38:
                    6f:b7:58:55:74:f2:58:e9:4c:80:69:25:aa:f1:bc:
                    d4:d7:fb:c0:9f:bc:56:5a:3e:06:16:0c:c6:79:3b:
                    6c:fc:f1:56:ea:55:25:fc:9c:b9:1b:ea:27:a4:82:
                    d1:09:33:52:7d:40:c2:84:c1:0a:11:40:9f:cc:45:
                    64:aa:7e:e7:a3:d0:6d:c2:d5:78:c2:29:a1:02:51:
                    ac:c8:2e:c8:ad:0c:8c:57:ff:d7:fc:fc:0f:47:e7:
                    25:fb:3a:46:0f:99:c7:48:47:8f:41:70:a2:f5:6f:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:57:C5:49:08:D9:E9:1E:E3:91:F9:87:1C:C5:8E:27:E9:36:1D:F1
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K1fFSQjZ6R7jkfmHHMWOJ-k2HfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:bd:db:3c:56:5a:18:57:4d:96:09:50:df:45:d1:3e:79:
         89:98:ac:ec:c7:19:65:2b:dc:de:e1:b2:c8:04:f8:8a:f5:3e:
         4e:02:94:db:83:80:7b:96:fa:6f:6e:03:53:e7:4b:bd:d8:2b:
         58:e2:4e:72:75:0d:48:f4:25:01:18:d3:11:08:0f:3f:08:99:
         66:f7:57:c8:b3:ec:03:10:58:22:2f:47:bf:e1:cd:61:fc:4c:
         09:5e:fb:43:54:11:65:77:c4:7d:a7:fb:b3:23:0a:92:4c:84:
         36:93:30:5a:2c:7c:f7:b4:b6:b5:0e:e4:b8:4b:c8:64:e5:d6:
         60:01:f7:4b:69:30:60:0e:c7:d7:cb:a7:95:4e:43:c2:2e:b9:
         72:83:2d:87:96:fd:2d:e5:06:23:92:66:46:46:77:5b:db:32:
         88:b1:47:ed:f3:83:0b:76:50:d8:8b:35:13:ee:66:22:62:d2:
         6d:96:b2:4b:b5:bd:08:4e:d9:6f:75:04:bd:79:58:1c:8b:c9:
         ec:f5:33:83:9c:56:82:ab:94:7c:b2:92:23:fe:4b:5f:b9:95:
         6e:60:9a:43:42:76:37:48:1c:2d:cd:cf:b3:21:4b:3e:af:95:
         66:23:80:db:1c:fb:1c:b9:55:35:54:8a:47:f1:d1:d5:f6:e8:
         b8:b6:5e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----