Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBMh3AjzSmeTD_ybdZM8esat-Fc.roa
File:                     SBMh3AjzSmeTD_ybdZM8esat-Fc.roa (raw, json)
Hash identifier:          uFbu29OO/BveRwQ7AED4sm4NbTEs2j+J7SL4sLok8JU=
Subject key identifier:   48:13:21:DC:08:F3:4A:67:93:0F:FC:9B:75:93:3C:7A:C6:AD:F8:57
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       01893455DEC337EB9E8144BFCCFFBFB5A87B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBMh3AjzSmeTD_ybdZM8esat-Fc.roa
Signing time:             Sat 08 Jul 2023 07:09:50 +0000
ROA not before:           Sat 08 Jul 2023 07:09:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
                          2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
                          2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:34:55:de:c3:37:eb:9e:81:44:bf:cc:ff:bf:b5:a8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  8 07:09:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=481321dc08f34a67930ffc9b75933c7ac6adf857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:af:71:19:9a:2f:09:ac:de:02:b6:69:0e:b0:
                    c4:5a:9a:0c:2c:a1:63:01:7b:ac:9e:31:81:57:64:
                    8d:2a:ea:7a:dd:ce:c8:3d:df:50:0f:a7:fb:79:be:
                    bb:9d:e8:e5:1a:79:3b:f2:66:db:bb:74:97:61:00:
                    a6:74:7d:3e:23:da:86:1a:6c:14:8b:8c:11:3a:7a:
                    b4:30:d1:d5:13:3e:bd:a6:c1:88:8a:05:e4:c8:5f:
                    71:30:24:54:e4:76:56:da:ac:d6:c7:82:b2:ca:48:
                    54:f3:73:be:a9:fd:ba:5f:6d:4d:79:45:75:65:21:
                    92:fc:cd:fc:0e:77:f4:35:56:8c:55:02:74:5f:6e:
                    2e:ee:49:d9:bf:b6:0e:96:88:de:97:06:37:04:d9:
                    27:cc:c5:59:25:59:7b:98:97:5e:6c:48:f3:6e:62:
                    a3:f4:aa:be:e7:00:e3:eb:a2:51:74:7c:da:05:f3:
                    1e:49:6a:a8:8e:93:ea:55:aa:a2:db:3d:a3:df:45:
                    d8:9e:2a:d6:8d:5d:7f:48:11:29:17:0d:9b:01:43:
                    78:a1:0a:b2:e4:17:f1:70:15:f1:02:ce:f2:a3:89:
                    96:27:6b:2e:14:fa:46:41:8e:a0:9f:c5:ae:63:69:
                    8a:d2:a4:52:ad:97:66:fe:d6:81:7c:6f:ff:68:a4:
                    83:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:21:DC:08:F3:4A:67:93:0F:FC:9B:75:93:3C:7A:C6:AD:F8:57
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SBMh3AjzSmeTD_ybdZM8esat-Fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:43:9d:ef:a4:a4:84:e1:2b:48:b8:a3:c9:ec:2d:42:80:
         99:04:51:4a:27:87:99:0f:c4:53:d2:44:dd:98:7d:9d:df:52:
         07:d3:2f:c5:0a:09:86:87:9f:12:2e:7e:2e:70:ba:2b:4a:e4:
         d1:61:25:fe:fd:b4:fc:01:9e:1b:7e:99:51:be:9c:1c:cf:77:
         68:04:4e:4f:48:96:4d:fb:f0:3a:c1:c2:b5:7a:ad:41:ab:43:
         0b:97:3b:62:77:61:8c:00:f4:b5:01:e6:7c:38:c8:c6:02:79:
         2c:44:d7:57:07:b5:e5:77:9d:65:40:5a:57:ac:25:59:69:09:
         87:a1:32:7c:46:11:b0:73:1b:23:44:13:21:48:da:01:92:da:
         46:88:8a:0e:c9:90:43:94:c9:15:db:73:31:93:d2:11:f3:47:
         bf:e3:09:d6:c7:0b:a8:00:b6:10:33:ed:7a:8c:14:d0:d4:e1:
         08:a5:99:19:e7:e4:a0:23:70:8a:17:bf:32:32:c3:61:3d:37:
         1a:4b:de:9e:59:10:40:17:89:6a:b6:f5:cd:3a:15:8d:a1:e6:
         b7:39:96:2f:55:14:da:ce:f0:20:96:83:40:a6:07:e6:a9:6e:
         37:01:f7:2b:71:1e:87:23:9e:09:88:b8:96:12:da:24:05:25:
         25:9c:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----