Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SncPgYrgUWLBhnphGVCFk7gv1hA.roa
File:                     SncPgYrgUWLBhnphGVCFk7gv1hA.roa (raw, json)
Hash identifier:          SbvAM2CRbOmUsvs0EK1Jr73sx4jty8Q66HjMT72answ=
Subject key identifier:   4A:77:0F:81:8A:E0:51:62:C1:86:7A:61:19:50:85:93:B8:2F:D6:10
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186CE7277F2184462C72E350769F2BFCDEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SncPgYrgUWLBhnphGVCFk7gv1hA.roa
Signing time:             Sat 11 Mar 2023 02:14:13 +0000
ROA not before:           Sat 11 Mar 2023 02:14:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ce:72:77:f2:18:44:62:c7:2e:35:07:69:f2:bf:cd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar 11 02:14:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a770f818ae05162c1867a6119508593b82fd610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:20:29:7d:c9:43:e8:85:52:d9:18:0d:3d:
                    16:63:17:48:02:10:25:02:e7:b4:f7:7f:1a:9c:04:
                    c0:c6:93:3d:00:6a:0d:e0:f4:1f:cd:4e:c7:b6:ad:
                    66:b3:c7:2c:a1:42:d5:7b:97:09:97:d4:6c:95:8e:
                    f4:1d:22:1f:09:d8:00:d8:ea:6c:75:20:44:cc:97:
                    1f:bc:9c:5a:ed:6a:3b:57:75:97:27:74:c5:5d:08:
                    dd:2b:87:e2:9d:44:00:ca:e9:6c:81:9f:00:5e:99:
                    ad:5e:67:2e:c2:1c:7d:04:39:9b:14:15:20:04:62:
                    00:40:32:e5:8c:26:23:cd:1e:46:2f:f9:3a:cf:9e:
                    fb:da:49:55:fe:05:18:e6:63:05:95:e7:2a:1b:07:
                    fb:96:bf:57:02:73:98:02:7f:58:87:8c:6a:ba:b7:
                    82:09:16:52:b8:7c:aa:73:b9:ad:40:3b:78:f6:cc:
                    f7:34:55:71:fc:db:41:91:0a:34:6c:1f:c5:ec:da:
                    29:d7:52:eb:5e:3b:b0:a1:a9:69:94:a2:62:c0:55:
                    05:2d:e5:9c:69:47:f1:bc:78:dd:97:84:76:38:d3:
                    db:3b:55:5e:a0:a0:31:09:4e:8e:8d:fa:d9:fe:04:
                    aa:e0:b4:ae:2a:3e:3b:63:9f:96:cb:3b:ca:34:a9:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:77:0F:81:8A:E0:51:62:C1:86:7A:61:19:50:85:93:B8:2F:D6:10
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SncPgYrgUWLBhnphGVCFk7gv1hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:70:f9:3c:69:b2:96:40:9f:a0:f2:82:5f:c4:ea:1d:05:
         59:55:c9:e0:a1:32:cd:7e:8a:68:8a:25:0a:b9:59:8e:15:97:
         89:96:e8:b6:a6:8c:00:37:7a:00:ef:40:8f:d3:40:fe:2c:d4:
         35:77:df:0d:1f:b9:4f:3f:c4:17:ff:88:c6:85:27:d6:73:b0:
         2e:03:d6:7e:26:60:4c:b6:9c:30:bc:1d:7f:64:62:aa:a9:58:
         1b:8d:c3:7d:6b:a6:1a:db:62:67:9f:43:be:39:cf:ca:7e:27:
         fe:b9:d1:9b:f7:23:a3:47:11:f2:d1:ed:29:ae:0a:3d:2a:b1:
         91:5d:a8:70:ff:22:7a:09:f2:c7:5c:18:0d:15:f9:4b:c7:77:
         05:11:a2:4f:3d:bb:31:00:2e:7c:01:06:a5:bd:3d:90:c0:db:
         59:b3:ef:57:37:d7:7d:f1:83:64:44:ac:b2:48:62:e3:da:a7:
         4f:d3:e6:ff:e4:11:06:00:fa:22:ae:22:b4:f5:11:63:25:55:
         ab:d9:8d:ba:40:00:81:42:18:65:ce:94:55:77:bb:e3:f9:fc:
         bf:44:e8:ac:50:24:79:24:e4:84:a7:68:ab:83:95:61:88:30:
         98:bf:2e:7e:8b:c9:be:a5:99:93:99:8c:30:2d:ff:cb:83:d2:
         48:45:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----