Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LtQHlVuP92Wkh5jYJlXI6nISV6s.roa
File:                     LtQHlVuP92Wkh5jYJlXI6nISV6s.roa (raw, json)
Hash identifier:          7HLd2X88p99aKIsOqFbgmsPv7O48PnGUoend3/IpT6A=
Subject key identifier:   2E:D4:07:95:5B:8F:F7:65:A4:87:98:D8:26:55:C8:EA:72:12:57:AB
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0188251CB082C22661AA4D867C97BA0A7096
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LtQHlVuP92Wkh5jYJlXI6nISV6s.roa
Signing time:             Tue 16 May 2023 15:10:17 +0000
ROA not before:           Tue 16 May 2023 15:10:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:25:1c:b0:82:c2:26:61:aa:4d:86:7c:97:ba:0a:70:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: May 16 15:10:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2ed407955b8ff765a48798d82655c8ea721257ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:90:0c:6c:61:3c:94:90:59:e4:22:09:d6:
                    4c:05:7f:fb:9a:86:49:9f:c5:62:79:55:e4:0d:23:
                    21:10:4d:36:dc:6a:c0:f0:3f:bc:99:89:a6:b2:49:
                    9d:a5:36:0d:b6:8c:80:18:30:36:d2:8a:e8:3a:bc:
                    ec:0e:31:63:73:4d:d1:1d:b8:f7:70:1a:fe:44:82:
                    3d:fe:da:ff:86:bb:ca:bf:f2:a5:79:21:e5:b6:a5:
                    97:0c:01:19:41:1f:0b:1e:2b:32:8c:55:5a:26:b5:
                    fa:8e:3c:22:6d:c9:b2:a9:e3:28:64:2a:37:3d:20:
                    54:b8:9d:df:ff:b6:1c:a3:7d:3a:e8:7b:20:a4:50:
                    94:84:8c:1c:59:4e:54:61:ac:d3:d0:dd:54:14:71:
                    b6:8b:cc:9e:e8:e6:a6:1c:66:e2:46:49:96:a7:a8:
                    07:86:15:46:b3:70:ef:75:5a:4d:e0:9f:45:6b:e0:
                    7f:c4:e5:0b:cb:43:e7:8d:f6:74:0a:3b:57:0d:b7:
                    36:86:e2:65:76:74:69:4a:f9:65:64:f3:8e:5a:16:
                    46:a9:36:a4:ac:a5:6e:73:c8:a8:b8:b8:77:47:ef:
                    62:03:c5:ec:c6:4d:21:3d:b1:2f:c3:21:39:f1:a0:
                    00:03:fd:86:ce:1c:14:2b:68:ef:da:b0:a3:36:42:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:07:95:5B:8F:F7:65:A4:87:98:D8:26:55:C8:EA:72:12:57:AB
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LtQHlVuP92Wkh5jYJlXI6nISV6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:f7:0a:eb:46:d0:f7:b9:08:37:6d:63:b6:46:db:11:06:
         05:66:ff:a5:64:42:23:c9:df:17:d6:ca:38:18:07:80:2f:58:
         95:87:94:79:63:bc:54:c9:3e:5e:27:3d:15:4f:3e:7f:bf:ef:
         f2:bd:c8:75:80:cb:38:9b:7a:4d:ce:60:04:e7:fa:2d:9d:dc:
         cf:43:df:05:92:c3:44:9c:9a:17:7e:42:30:1f:f8:37:e2:c6:
         ed:28:c0:13:c5:08:f4:eb:0c:4b:13:89:11:bf:5a:34:72:1b:
         ef:f6:95:b9:c9:99:86:ac:b2:9f:32:54:eb:64:c6:e8:c5:55:
         bb:f4:8b:eb:58:ba:c6:39:06:fd:67:03:3d:ec:81:15:78:78:
         07:af:b9:77:19:d0:18:3b:9b:ff:db:71:84:cb:3a:dd:55:ae:
         07:2d:8a:c9:83:65:4a:b5:0e:d1:e6:a6:c2:6d:9c:16:a1:49:
         42:82:66:5d:59:86:d3:4e:c2:45:27:5d:e5:a9:c7:c3:ac:83:
         cd:94:0b:bf:13:1f:be:05:01:fa:62:fb:01:2e:57:4f:3a:51:
         4d:90:1f:ce:04:ea:82:4b:39:74:7d:da:3e:b3:29:de:81:72:
         4c:2d:ad:eb:80:37:93:dd:be:24:2f:d1:ec:aa:27:74:97:0f:
         52:fd:ae:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYglHLCCwiZhqk2GfJe6CnCWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE2MTUxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWQ0MDc5NTViOGZmNzY1YTQ4Nzk4ZDgyNjU1YzhlYTcyMTI1N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5mQDGxhPJSQWeQiCdZMBX/7moZJ
n8VieVXkDSMhEE023GrA8D+8mYmmskmdpTYNtoyAGDA20oroOrzsDjFjc03RHbj3
cBr+RII9/tr/hrvKv/KleSHltqWXDAEZQR8LHisyjFVaJrX6jjwibcmyqeMoZCo3
PSBUuJ3f/7Yco3066HsgpFCUhIwcWU5UYazT0N1UFHG2i8ye6OamHGbiRkmWp6gH
hhVGs3DvdVpN4J9Fa+B/xOULy0PnjfZ0CjtXDbc2huJldnRpSvllZPOOWhZGqTak
rKVuc8iouLh3R+9iA8Xsxk0hPbEvwyE58aAAA/2GzhwUK2jv2rCjNkKdJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFC7UB5Vbj/dlpIeY2CZVyOpyElerMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTHRRSGxWdVA5MldraDVqWUpsWEk2bklTVjZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAK2d9wrrRtD3uQg3bWO2
RtsRBgVm/6VkQiPJ3xfWyjgYB4AvWJWHlHljvFTJPl4nPRVPPn+/7/K9yHWAyzib
ek3OYATn+i2d3M9D3wWSw0Scmhd+QjAf+Dfixu0owBPFCPTrDEsTiRG/WjRyG+/2
lbnJmYassp8yVOtkxujFVbv0i+tYusY5Bv1nAz3sgRV4eAevuXcZ0Bg7m//bcYTL
Ot1VrgctismDZUq1DtHmpsJtnBahSUKCZl1ZhtNOwkUnXeWpx8Osg82UC78TH74F
Afpi+wEuV086UU2QH84E6oJLOXR92j6zKd6BckwtreuAN5PdviQv0eyqJ3SXD1L9
rqY=
-----END CERTIFICATE-----