Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YZvI-R83h-rb-6d4rt40LJSiDw.roa
File:                     _YZvI-R83h-rb-6d4rt40LJSiDw.roa (raw, json)
Hash identifier:          OZo00XtX2HJa17Fcr6hWn1ZX3psAusFS/lGihxcbAqs=
Subject key identifier:   FD:86:6F:23:E4:7C:DE:1F:AB:6F:EE:9D:E2:BB:78:D0:B2:52:88:3C
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       0186A235C5041CE9C1100A09BB7C9914A110
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YZvI-R83h-rb-6d4rt40LJSiDw.roa
Signing time:             Thu 02 Mar 2023 12:04:38 +0000
ROA not before:           Thu 02 Mar 2023 12:04:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
                          2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
                          2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
                          2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
                          2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
                          2001:67c:64:ffff:0:186:a235:6f14/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a2:35:c5:04:1c:e9:c1:10:0a:09:bb:7c:99:14:a1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Mar  2 12:04:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fd866f23e47cde1fab6fee9de2bb78d0b252883c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:ce:bd:b1:5a:81:55:ad:75:01:81:08:0f:
                    36:d1:c8:a6:34:e7:1a:63:8f:6d:81:7b:94:da:ad:
                    2f:ed:b5:32:c0:7d:29:c3:85:e3:73:08:91:77:ec:
                    92:06:ab:62:19:03:ab:76:50:21:ee:b9:3b:d5:9c:
                    a7:d0:a3:34:8d:cc:ba:b5:d0:20:90:04:b9:79:11:
                    9a:58:1d:a0:25:1a:0f:49:49:f3:e2:b9:b7:ce:0a:
                    09:b8:48:34:00:d8:8e:bb:54:5b:75:76:60:66:5e:
                    18:4a:9a:3b:0c:84:cb:7f:74:90:c6:94:05:41:b0:
                    f6:73:07:56:ce:01:28:b1:a4:93:92:d0:bf:32:7d:
                    3a:bb:4c:7c:4c:27:c4:0e:d8:ce:d8:44:61:59:d9:
                    0a:bc:44:49:7f:21:04:c9:0d:75:68:df:34:71:dd:
                    0a:6c:99:95:15:a4:7a:01:41:d7:ac:15:a8:af:8c:
                    ce:88:88:22:e5:f6:a3:2f:71:15:c0:68:9c:f8:74:
                    84:48:e5:c1:39:6b:88:2f:b5:e9:dd:8f:aa:0f:4f:
                    3b:89:a5:dd:22:94:8f:77:fe:65:02:2f:3a:eb:7d:
                    6f:af:2d:c3:26:09:fb:e9:a1:41:33:2a:73:c9:06:
                    08:12:99:79:f1:be:29:97:4b:1a:86:9d:1d:77:b3:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:86:6F:23:E4:7C:DE:1F:AB:6F:EE:9D:E2:BB:78:D0:B2:52:88:3C
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_YZvI-R83h-rb-6d4rt40LJSiDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:a1:7e:18:54:c7:a2:21:55:76:dc:4f:49:04:ac:74:31:
         9a:c4:c4:a7:38:93:83:42:ac:50:78:2a:06:34:90:be:96:51:
         a9:55:54:72:57:94:a9:ba:df:5f:a5:cf:45:51:01:54:57:8d:
         64:55:71:28:dc:7d:8e:18:e7:0c:fd:80:e4:ab:7b:f4:37:f6:
         d1:b1:88:ed:1d:36:ca:94:1a:7c:7f:c8:3c:dd:e4:87:c5:a4:
         52:7d:7e:f2:f1:e4:30:3b:db:3e:43:79:1c:fb:71:81:94:5b:
         2b:d5:85:f3:bb:e1:17:60:8e:25:68:5a:d5:fa:57:88:af:69:
         7f:c0:02:48:3a:6f:51:9f:e5:69:f7:7d:94:6f:6c:0a:a6:8e:
         ae:d8:ea:b5:dd:5e:b7:e1:6d:9b:4f:db:46:0f:4b:c6:12:57:
         af:c7:96:0d:6a:d5:11:41:b1:a6:82:b7:ed:34:3b:91:c0:2a:
         3f:20:07:80:cd:f2:db:a0:76:b7:4e:e2:05:4c:59:f7:39:22:
         c0:5a:90:4b:95:e7:1e:58:db:aa:be:1a:d7:28:8c:b8:fc:46:
         7c:71:fd:fe:cf:36:57:b9:5b:00:5e:e0:d0:c7:0d:8f:fd:fb:
         d2:de:f2:2c:0f:a2:22:bb:e4:0d:22:99:e2:26:3c:ab:a2:7e:
         23:0f:fb:b5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaiNcUEHOnBEAoJu3yZFKEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMTIwNDM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg2NmYyM2U0N2NkZTFmYWI2ZmVlOWRlMmJiNzhkMGIyNTI4ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqTOvbFagVWtdQGBCA820cimNOca
Y49tgXuU2q0v7bUywH0pw4XjcwiRd+ySBqtiGQOrdlAh7rk71Zyn0KM0jcy6tdAg
kAS5eRGaWB2gJRoPSUnz4rm3zgoJuEg0ANiOu1RbdXZgZl4YSpo7DITLf3SQxpQF
QbD2cwdWzgEosaSTktC/Mn06u0x8TCfEDtjO2ERhWdkKvERJfyEEyQ11aN80cd0K
bJmVFaR6AUHXrBWor4zOiIgi5fajL3EVwGic+HSESOXBOWuIL7Xp3Y+qD087iaXd
IpSPd/5lAi86631vry3DJgn76aFBMypzyQYIEpl58b4pl0sahp0dd7McWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP2GbyPkfN4fq2/uneK7eNCyUog8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX1ladkktUjgzaC1yYi02ZDRydDQwTEpTaUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC/9oX4YVMeiIVV23E9J
BKx0MZrExKc4k4NCrFB4KgY0kL6WUalVVHJXlKm631+lz0VRAVRXjWRVcSjcfY4Y
5wz9gOSre/Q39tGxiO0dNsqUGnx/yDzd5IfFpFJ9fvLx5DA72z5DeRz7cYGUWyvV
hfO74RdgjiVoWtX6V4ivaX/AAkg6b1Gf5Wn3fZRvbAqmjq7Y6rXdXrfhbZtP20YP
S8YSV6/Hlg1q1RFBsaaCt+00O5HAKj8gB4DN8tugdrdO4gVMWfc5IsBakEuV5x5Y
26q+GtcojLj8Rnxx/f7PNle5WwBe4NDHDY/9+9Le8iwPoiK75A0imeImPKuifiMP
+7U=
-----END CERTIFICATE-----