Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0RvfQbDIta_e0WCNb_kcJrj1acE.roa
File:                     0RvfQbDIta_e0WCNb_kcJrj1acE.roa (raw, json)
Hash identifier:          C8+/G+6VYF83osgGNC5ZQNAyjEw+dg1ZDs+QvmjennA=
Subject key identifier:   D1:1B:DF:41:B0:C8:B5:AF:DE:D1:60:8D:6F:F9:1C:26:B8:F5:69:C1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05DE7019
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0RvfQbDIta_e0WCNb_kcJrj1acE.roa
Signing time:             Wed 13 Apr 2022 20:54:53 +0000
ROA not before:           Wed 13 Apr 2022 20:54:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98463769 (0x5de7019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 13 20:54:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d11bdf41b0c8b5afded1608d6ff91c26b8f569c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:ad:35:91:90:51:1f:57:d9:74:77:8a:0f:
                    9d:2e:9d:1d:e9:e1:d3:1e:92:06:07:45:b4:57:0c:
                    fe:5e:26:07:61:4e:5a:1d:28:62:d0:e0:c2:9e:98:
                    d7:3b:c4:c4:b6:2a:e3:c8:19:4e:e9:c6:34:6e:67:
                    5a:fa:a0:49:0b:02:f5:9b:14:db:e4:b9:36:c7:1c:
                    09:9e:9e:8e:de:68:54:3e:d5:4e:a0:36:23:b1:20:
                    af:ce:a3:f7:5a:71:d8:e8:51:01:08:39:6f:8c:b4:
                    e8:b3:a3:b8:6d:e4:73:70:ac:80:70:a0:ae:77:fc:
                    74:c3:9b:31:cb:b3:3b:48:33:2c:82:a5:1e:eb:35:
                    dc:ea:9b:03:4f:61:b4:e1:f9:e4:73:63:36:25:b4:
                    d9:9b:d8:61:1d:15:31:57:eb:4d:6d:1c:f6:16:75:
                    c0:68:9a:e4:89:22:bb:01:20:f3:23:a7:7b:ff:6d:
                    dd:c9:04:28:bf:a1:5d:6a:44:d2:54:73:31:0d:e1:
                    7b:97:38:75:8e:f7:7c:45:1c:22:84:31:71:72:c4:
                    73:4f:29:df:bd:4d:82:73:00:9f:61:6d:59:de:8f:
                    61:ea:86:ca:56:36:1c:29:8f:60:02:86:a0:36:8a:
                    57:17:e7:df:16:5e:d5:62:b1:5a:a5:fc:3b:0e:6f:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1B:DF:41:B0:C8:B5:AF:DE:D1:60:8D:6F:F9:1C:26:B8:F5:69:C1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0RvfQbDIta_e0WCNb_kcJrj1acE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:57:f2:11:7b:b7:f6:f3:3d:d6:f1:fa:60:ef:f6:6e:33:
         02:ca:a5:1c:30:0b:77:09:07:8b:a9:c3:60:cb:c1:0d:70:05:
         11:63:89:50:ff:81:43:3a:b3:8c:5b:2a:9a:de:31:c2:09:5d:
         e6:b0:46:3f:82:df:1b:de:ca:fb:7d:cb:3a:25:5c:60:de:65:
         ee:d1:99:3d:14:e9:5a:26:99:b6:8a:b8:ea:20:82:b3:5c:7a:
         c1:c9:d8:a9:00:c6:a5:5f:c3:c8:75:5e:3f:52:7f:e5:ae:e5:
         98:4d:7d:07:59:f6:49:b1:1e:3d:79:d1:b3:7c:3a:7d:c3:56:
         cc:75:b6:64:6d:17:81:8e:fe:e5:b7:a9:dc:c0:fa:79:98:8c:
         e2:ae:82:3c:ca:4b:d2:1d:2d:c2:df:35:f6:31:79:91:26:9b:
         16:69:c3:34:79:82:c3:d9:b4:ac:bc:6c:ec:82:98:1a:ae:6e:
         a9:79:bb:56:61:80:04:b2:96:16:b9:ef:e8:a6:e3:ec:a4:7f:
         ff:f0:8e:08:2e:b7:ad:1b:59:9a:1f:e5:a0:22:c2:32:63:45:
         2f:e1:64:54:75:f4:23:08:76:1b:9f:8d:bd:5e:0c:77:a6:02:
         90:a0:3a:3a:9a:81:85:6c:bd:37:10:6e:e5:54:c8:11:04:4d:
         46:03:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----