Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLHUr6LH6skaQzfQsRWmk1CXV6I.roa
File:                     RLHUr6LH6skaQzfQsRWmk1CXV6I.roa (raw, json)
Hash identifier:          j1NbPdllMiq3YjoLc0S+AJLZSkkLwcobA6WyFwBOkBA=
Subject key identifier:   44:B1:D4:AF:A2:C7:EA:C9:1A:43:37:D0:B1:15:A6:93:50:97:57:A2
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186CCF3C6F565FE0713D38757E14FB78632
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLHUr6LH6skaQzfQsRWmk1CXV6I.roa
Signing time:             Fri 10 Mar 2023 19:16:13 +0000
ROA not before:           Fri 10 Mar 2023 19:16:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cc:f3:c6:f5:65:fe:07:13:d3:87:57:e1:4f:b7:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 10 19:16:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44b1d4afa2c7eac91a4337d0b115a693509757a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6e:6d:c5:4c:4a:6e:6c:46:f9:0c:bf:d5:80:
                    11:f6:ce:47:e8:af:fa:05:06:29:25:24:8c:7a:64:
                    3a:6c:a9:57:b1:20:d1:2e:fa:b1:17:9c:fb:db:7c:
                    ac:bc:b0:66:a8:94:ef:36:00:4f:b6:ae:51:a1:2c:
                    5f:11:2d:e8:e5:f9:52:db:44:59:9e:b2:15:68:d4:
                    7e:3f:28:cb:26:d6:25:ce:d8:4f:d4:ee:c4:22:1e:
                    b3:1a:b2:8c:0c:10:d0:d5:18:6b:b2:98:d6:e2:5a:
                    0d:d3:14:9d:7b:84:d3:6f:e0:1f:3f:42:d0:a5:a8:
                    2a:d6:dc:82:d3:fc:41:fd:ec:f8:f2:c9:f0:b5:cd:
                    06:7d:c3:16:a0:31:50:e7:46:fa:3e:74:7d:1b:e1:
                    f4:cd:87:78:68:03:d3:c1:bf:7f:bf:1b:69:72:47:
                    7c:c7:bd:b2:17:39:1b:f5:c5:8e:f4:e4:59:26:79:
                    82:51:f8:e9:e2:29:2b:36:84:26:6c:df:26:2b:e2:
                    f6:76:1d:51:24:8b:bc:3a:9f:7c:35:ef:c4:bd:a7:
                    2a:c1:50:93:ed:c7:6c:b1:bf:b6:3c:ea:52:f3:b2:
                    d2:45:84:e6:51:4d:f7:39:b7:11:ea:d4:01:0f:db:
                    c2:8f:ec:0b:62:df:e3:3d:50:f1:6c:db:64:66:84:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B1:D4:AF:A2:C7:EA:C9:1A:43:37:D0:B1:15:A6:93:50:97:57:A2
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLHUr6LH6skaQzfQsRWmk1CXV6I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:70:5f:49:6c:8d:ee:3a:41:c4:7a:0d:56:2e:e4:78:2b:e1:
         0f:0e:de:de:54:06:d7:dd:67:04:80:56:fc:d5:a1:16:fa:48:
         8a:a9:9d:ce:06:68:79:90:f3:d6:16:a1:f0:18:af:0f:c9:54:
         28:d8:d0:85:b2:9e:f5:35:ba:70:e5:a9:3e:d5:98:c2:36:00:
         b1:6e:69:47:6f:24:ed:da:6b:b9:fa:85:36:1c:84:3a:aa:fe:
         97:54:ac:ea:71:e5:65:ab:ea:5d:d7:f0:bf:0b:76:8b:58:99:
         91:c4:21:28:ed:69:b1:83:8c:58:b2:e2:1c:86:db:41:86:15:
         1b:ea:c8:f1:8c:97:f8:54:74:f0:5e:40:08:de:26:a9:1a:55:
         c2:6d:a1:87:ea:7e:f0:51:a0:ef:5e:cb:b9:28:4d:42:e6:68:
         09:4c:3c:ba:f0:a0:a9:fb:fa:b0:a8:2e:f5:2a:2b:83:b9:ea:
         53:5d:45:a4:f7:82:ef:18:8f:33:69:2c:58:e7:92:ce:86:b0:
         48:8e:b1:ce:ea:59:07:5f:b0:77:13:22:5a:74:7a:2a:47:e2:
         be:3a:a7:a6:ed:83:f9:9a:5c:85:b2:b9:46:e9:3b:cb:93:3a:
         d1:da:1c:8c:f9:de:4d:6c:e6:9b:62:23:97:8d:14:60:2e:a0:
         94:93:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----