Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4oVYWz58O30w1qmzjSIZQYZCgg.roa
File:                     K4oVYWz58O30w1qmzjSIZQYZCgg.roa (raw, json)
Hash identifier:          EtmySjxDRLNdqpx5UE3DX2EGS2KdK05eJAhdptkXKOI=
Subject key identifier:   2B:8A:15:61:6C:F9:F0:ED:F4:C3:5A:A6:CE:34:88:65:06:19:0A:08
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0187548BB51C97D2F20D732E05A21FA0EFB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4oVYWz58O30w1qmzjSIZQYZCgg.roa
Signing time:             Thu 06 Apr 2023 03:10:54 +0000
ROA not before:           Thu 06 Apr 2023 03:10:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:54:8b:b5:1c:97:d2:f2:0d:73:2e:05:a2:1f:a0:ef:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Apr  6 03:10:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b8a15616cf9f0edf4c35aa6ce34886506190a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:22:e6:d7:16:80:77:9c:67:8c:2b:62:2b:
                    30:51:06:26:ba:4b:bc:39:67:4b:d6:f1:50:24:3f:
                    18:66:04:6e:f9:28:86:82:83:23:f7:b0:d7:1e:ee:
                    91:9e:ff:a7:b8:52:b0:f7:08:a9:7c:62:65:73:80:
                    56:61:e3:9e:ef:2e:6f:24:8c:70:b0:ba:0e:88:92:
                    ca:ad:d5:af:f8:51:ee:bc:f9:2e:50:8c:26:54:63:
                    9d:4f:1e:a4:a3:01:4d:3a:3e:88:48:29:25:3a:16:
                    7b:a5:8e:29:aa:24:39:f7:fc:25:24:d7:58:0a:96:
                    33:df:8a:1d:b7:b5:21:d7:9a:2d:4b:cf:d9:b6:80:
                    d1:e7:34:88:72:c0:51:a8:5d:60:f7:5a:0b:3b:57:
                    f4:80:da:09:5d:43:d6:e7:10:80:25:f7:6d:32:7d:
                    65:95:62:3e:75:87:11:f6:c9:5f:3d:93:f1:fd:6d:
                    23:5a:af:35:0c:32:30:16:a4:ec:d6:62:9a:b2:fe:
                    76:dd:2a:e9:92:c4:4b:1f:1a:f2:d2:54:cc:c4:d0:
                    77:e3:91:58:4f:5b:ae:f7:0d:63:58:b1:6a:15:6f:
                    f4:b8:43:80:db:87:d9:13:65:81:43:6e:d2:12:45:
                    38:70:c9:38:4e:1a:11:61:61:08:de:6b:cb:83:0b:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8A:15:61:6C:F9:F0:ED:F4:C3:5A:A6:CE:34:88:65:06:19:0A:08
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/K4oVYWz58O30w1qmzjSIZQYZCgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:f3:3f:a5:d5:8d:69:c3:d7:ba:35:15:bf:b4:88:9e:4a:bd:
         84:95:b3:05:11:9f:c4:03:f0:8a:99:d1:fb:8e:5f:d4:fe:ac:
         00:ae:80:bc:cf:2a:24:8a:fc:b3:1f:31:69:b4:16:09:d2:b5:
         c9:51:cb:86:8c:36:6e:a7:72:89:60:02:89:09:0b:3a:25:09:
         75:08:30:2a:3c:2b:19:89:bd:8d:d3:3e:0b:34:5e:5c:e4:e1:
         bf:c5:f6:9b:34:a5:e3:33:a7:ca:17:2b:7d:41:37:0b:92:b0:
         66:d1:12:d4:88:b2:5d:69:e0:55:a4:73:37:a8:9c:1c:44:86:
         6b:29:12:08:a7:ef:cb:04:4b:36:74:28:3e:7e:b4:07:b3:a1:
         96:64:3e:a6:69:17:a1:74:34:0b:08:94:ae:7d:ea:72:b7:6b:
         1e:22:10:d2:be:3e:33:a3:6a:6d:33:63:9c:94:a8:20:37:40:
         6d:11:2a:2e:de:31:f6:f7:df:96:85:64:ee:23:99:33:c0:7a:
         4f:89:6f:35:96:db:52:34:50:f5:45:59:95:ee:a9:e9:21:41:
         34:49:52:0f:04:b3:a3:e8:72:f7:87:54:3b:39:8c:f9:da:a5:
         33:fe:6f:df:8c:0d:c8:e3:b4:b1:f6:f5:73:d9:cd:83:22:da:
         94:18:92:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----