Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HOsSk54p4VDz6n4BX5nUiEZo0xg.roa
File:                     HOsSk54p4VDz6n4BX5nUiEZo0xg.roa (raw, json)
Hash identifier:          TjQ8WrLpdrSX8VyVCBfzVZ0wFZmLMqVWwrG+5kZ6rYg=
Subject key identifier:   1C:EB:12:93:9E:29:E1:50:F3:EA:7E:01:5F:99:D4:88:46:68:D3:18
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07D98F6E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HOsSk54p4VDz6n4BX5nUiEZo0xg.roa
Signing time:             Wed 01 Jun 2022 13:41:31 +0000
ROA not before:           Wed 01 Jun 2022 13:41:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131698542 (0x7d98f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  1 13:41:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ceb12939e29e150f3ea7e015f99d4884668d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:19:98:9c:95:c2:e2:79:5b:58:3a:5e:b1:
                    18:07:f5:8c:52:c9:9a:8f:c8:f3:cd:80:b5:a8:0f:
                    8e:88:33:a6:9d:46:0f:e9:b7:91:3b:f2:cf:ac:7e:
                    00:c8:f5:bc:88:c1:a8:7c:c4:a3:d7:1c:50:82:fa:
                    8a:dc:eb:11:ae:21:44:29:88:bf:94:e1:f4:d7:7d:
                    d1:52:6c:1b:70:67:eb:4c:0e:d1:28:58:9b:6e:3d:
                    32:e9:c8:56:5d:b2:6e:42:e9:88:8f:a2:88:45:0c:
                    ff:c7:b6:23:11:fd:fc:16:22:95:cd:9e:ca:c9:67:
                    6a:29:44:60:89:71:0f:a2:4c:98:e1:9b:ad:fa:d4:
                    cb:0e:d5:71:5d:29:a7:98:af:cd:8e:12:17:16:82:
                    bc:8e:16:94:c9:82:11:b8:0f:03:a3:34:10:8c:67:
                    16:5b:13:28:08:e0:84:fb:6c:d0:64:93:84:3a:d8:
                    a8:8a:cb:7c:3b:5b:75:8e:3e:df:15:dd:50:a0:e7:
                    9b:47:1e:30:1d:68:73:c1:51:22:8b:b0:b5:21:9a:
                    b9:cc:6d:37:61:d9:c7:c4:72:2b:23:80:38:4b:b0:
                    14:04:da:bd:6f:55:64:b5:8a:bf:62:6f:d6:fe:4d:
                    d0:ff:f1:08:fb:fd:69:40:1d:23:ff:f7:95:a9:94:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:12:93:9E:29:E1:50:F3:EA:7E:01:5F:99:D4:88:46:68:D3:18
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HOsSk54p4VDz6n4BX5nUiEZo0xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:52:7e:a3:43:99:26:44:67:1c:a6:bb:99:59:a0:d7:ea:
         1f:e6:3b:bd:fa:1a:26:0f:30:9a:72:1f:32:59:0c:fd:67:b2:
         86:9c:ba:cf:10:4d:06:b1:e2:d2:4c:da:d2:ae:77:cc:c3:1b:
         ee:30:e9:19:da:c6:a0:34:ee:11:23:d4:ed:e9:4d:16:1e:46:
         c9:59:2f:3d:9a:cc:5e:34:f0:7c:ae:05:17:b0:bf:e7:5a:b3:
         2f:8f:8d:c0:e2:6b:79:30:a9:57:8b:69:bd:e8:6d:87:3f:a8:
         3e:6f:1e:90:c8:48:38:8f:98:2e:79:02:ff:d2:26:c6:9f:b3:
         56:a8:c1:1d:ec:d1:19:f3:7d:5e:7a:5c:bf:da:d9:2d:15:bd:
         5a:80:66:e9:be:b8:4a:88:b8:7c:41:19:8e:98:93:ec:51:13:
         e2:08:e0:b0:fe:e5:e7:d6:3a:c2:ef:7e:6b:6e:1e:03:72:74:
         d5:71:05:49:d3:23:0c:10:66:95:c8:73:c6:39:ab:af:35:af:
         a5:24:13:61:93:e3:4c:ff:a9:f4:ac:59:e9:be:7d:2e:47:9c:
         9d:81:0d:de:d3:2b:01:d2:cc:87:b8:7e:35:d1:ab:58:a2:7f:
         26:b0:45:b0:9f:32:63:fd:9b:04:ae:c1:b6:c6:55:5a:82:90:
         bd:25:d9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----