Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LblOxYK4EyFZtpZ7E-rGjg9qNug.roa
File:                     LblOxYK4EyFZtpZ7E-rGjg9qNug.roa (raw, json)
Hash identifier:          WUh50I+Ik/wWd1s08RZQyYtVdey+HGYJtnI6BdeyiUc=
Subject key identifier:   2D:B9:4E:C5:82:B8:13:21:59:B6:96:7B:13:EA:C6:8E:0F:6A:36:E8
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04842D02
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LblOxYK4EyFZtpZ7E-rGjg9qNug.roa
Signing time:             Sat 26 Feb 2022 04:36:56 +0000
ROA not before:           Sat 26 Feb 2022 04:36:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75771138 (0x4842d02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 26 04:36:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2db94ec582b8132159b6967b13eac68e0f6a36e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:4f:a6:c8:ef:fe:4c:59:88:0a:2f:a6:31:
                    6d:d6:94:cd:81:2e:d6:7d:08:a6:c4:d3:c6:68:63:
                    d2:f5:96:b6:bc:1d:33:d2:a8:ba:e8:d2:ec:33:ae:
                    52:87:93:c5:9f:0b:5b:e0:64:32:0f:7e:68:90:ee:
                    62:3a:65:ef:7e:21:ac:f7:fb:0d:cc:83:0c:e7:18:
                    b6:20:ba:8d:47:57:9d:ca:3a:ce:e6:f3:03:27:f5:
                    46:ba:85:1b:da:e8:9f:c2:aa:63:ca:a2:07:90:6c:
                    54:c2:f0:b6:c3:af:28:fb:26:fe:a1:c8:b8:ee:99:
                    ef:3a:8c:91:12:95:ed:aa:af:b9:80:b4:95:26:f7:
                    81:aa:ee:0f:bc:cb:76:93:6c:0b:5a:e3:88:5e:6d:
                    db:0d:aa:57:fa:14:6c:ca:44:67:75:6c:cb:2c:a1:
                    b4:75:7f:5c:34:53:3e:f4:bb:23:00:25:50:fb:c0:
                    19:00:f0:c7:55:2d:10:8b:8c:21:33:c3:62:e1:25:
                    2a:b4:66:84:de:6c:d6:cc:51:d1:b9:33:62:6f:1f:
                    e3:8a:39:f8:e2:dc:3d:59:70:46:cb:03:04:33:2d:
                    82:90:62:3c:63:97:45:b8:22:4e:f5:f9:25:5a:74:
                    53:b9:23:26:52:e4:99:e5:dd:e7:94:fb:8b:02:48:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B9:4E:C5:82:B8:13:21:59:B6:96:7B:13:EA:C6:8E:0F:6A:36:E8
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LblOxYK4EyFZtpZ7E-rGjg9qNug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         47:df:78:85:f2:e3:c1:8f:ea:90:b1:0c:29:bd:5b:14:8f:4c:
         a6:11:73:b9:a2:b0:4c:74:0f:d8:e5:31:8a:8b:6b:b3:69:d6:
         19:69:9a:2a:4f:e1:5d:c7:08:2b:2d:24:c6:d5:ed:25:9c:08:
         7a:ce:bb:e3:46:c3:0e:d8:26:a3:bb:57:93:1a:c6:98:8e:42:
         09:5b:8c:f7:b8:c3:30:58:b5:c2:47:4e:91:2d:4e:66:1d:34:
         77:00:a0:26:34:f4:32:dc:6b:c8:18:8f:dd:3c:c0:89:d9:bc:
         be:c3:ab:84:09:31:d5:64:d9:90:68:76:eb:f2:f2:1e:bb:8c:
         d0:9a:8f:4f:c7:7c:82:7d:26:b4:3e:a1:c9:a4:69:62:e2:38:
         29:d2:47:41:58:8b:46:43:72:24:14:d6:da:3a:4b:7f:03:2c:
         b6:aa:d0:c2:37:ef:0a:7d:bc:28:a5:64:3c:93:01:4e:86:49:
         a5:0f:2f:ae:38:fd:a0:12:47:5c:e3:3e:2b:91:47:50:d5:e2:
         25:a9:14:e1:2d:81:36:1c:fb:1b:08:98:c8:d1:10:f0:41:a8:
         9e:15:8f:7f:e7:75:c1:bb:b5:d6:65:06:ba:3c:63:9d:95:1f:
         4a:79:3b:13:5a:90:8c:30:52:24:ea:2c:a6:ce:a7:4c:91:48:
         54:53:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----