Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0iigUAKvDCymd1krOHdiep7gFNU.roa
File:                     0iigUAKvDCymd1krOHdiep7gFNU.roa (raw, json)
Hash identifier:          HdDL+LTlSTiWxqz4GjBzGGQSeZYrLDBrg/i3qmYFjKQ=
Subject key identifier:   D2:28:A0:50:02:AF:0C:2C:A6:77:59:2B:38:77:62:7A:9E:E0:14:D5
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04DF2353
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0iigUAKvDCymd1krOHdiep7gFNU.roa
Signing time:             Wed 09 Mar 2022 17:28:45 +0000
ROA not before:           Wed 09 Mar 2022 17:28:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81732435 (0x4df2353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar  9 17:28:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d228a05002af0c2ca677592b3877627a9ee014d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:50:cc:25:2c:09:83:37:1b:3c:7d:9b:8a:
                    d8:3d:f1:4b:00:ff:ca:c5:8b:b2:a5:33:f4:af:2f:
                    6b:26:4e:7f:2f:f6:ea:8c:ef:7d:64:ed:78:d2:24:
                    89:a1:bf:57:70:b5:aa:c3:20:5a:16:a6:6c:87:3e:
                    34:b8:ee:25:ee:f4:ab:ef:38:92:04:d7:5c:64:91:
                    ea:6b:e1:d0:56:f1:ea:41:4d:66:30:e8:97:a1:80:
                    3b:04:55:52:21:f6:1a:62:85:4f:5b:d5:75:4c:71:
                    da:8b:5d:ec:6e:f8:33:3e:b9:bc:d6:16:07:85:42:
                    e6:37:ba:ac:65:5c:a4:cc:aa:00:e5:54:cf:8e:c4:
                    11:07:78:49:9a:f9:66:3d:d5:89:9f:6d:b0:51:46:
                    2a:07:9d:0a:c0:c4:84:52:66:fa:97:99:0c:8f:b5:
                    59:d7:0c:e9:c4:20:8d:42:a8:9c:2b:3f:2a:e4:ea:
                    47:36:db:3d:50:fd:06:e2:68:60:1d:6f:e3:21:c6:
                    01:80:76:9d:e6:d3:c0:cd:f7:86:47:3a:96:64:b0:
                    d1:f9:54:43:46:fd:e9:09:37:9d:c8:59:b8:a3:8d:
                    89:c1:82:1c:c9:65:19:cc:09:98:28:e4:0e:6e:59:
                    09:fd:e5:18:76:2c:ec:8d:98:fa:3e:60:26:d9:27:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:A0:50:02:AF:0C:2C:A6:77:59:2B:38:77:62:7A:9E:E0:14:D5
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0iigUAKvDCymd1krOHdiep7gFNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:ac:43:4a:8f:a9:15:95:73:d6:7a:a0:d2:27:7f:ee:df:83:
         0c:d5:3c:4b:6a:41:47:b3:0b:08:ec:80:bd:36:02:c7:5b:ce:
         f8:c7:26:7d:2a:68:e5:bd:70:47:df:a6:e8:dc:65:35:3a:74:
         4a:9e:1f:7a:7b:83:a2:dc:48:79:22:ef:6f:9e:05:aa:b8:5f:
         2a:26:f1:d0:0c:2a:e3:da:13:7e:9d:06:62:54:24:7c:89:a8:
         10:f1:9c:91:6d:8e:66:bb:5d:ed:16:dd:e4:04:c6:42:67:14:
         a3:c5:a1:de:15:54:be:e6:e2:1a:36:d0:d7:cf:63:57:8a:28:
         db:be:a2:45:a0:80:c5:4f:77:bd:ec:78:82:88:d6:d5:15:dd:
         a8:09:8d:dd:13:86:f9:93:2a:eb:2c:2b:0e:30:1a:23:e8:66:
         c9:99:69:19:ed:a9:e6:da:39:76:8d:77:9d:87:9e:a2:70:3a:
         51:09:bf:be:53:63:bf:20:20:20:96:01:35:21:ee:ef:9a:0c:
         ce:22:75:48:25:ff:07:21:4f:3e:5c:8d:92:0b:0a:27:eb:d4:
         cd:e2:d9:c1:f4:e1:25:f2:c1:87:09:22:54:63:98:52:7f:f3:
         22:ce:f2:eb:84:21:43:df:0b:2c:dc:8b:3b:de:84:56:70:0d:
         ec:45:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----