Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NPaWArHYA9zp9yE_lkstEt4l66E.roa
File:                     NPaWArHYA9zp9yE_lkstEt4l66E.roa (raw, json)
Hash identifier:          jwTV/xqWGFH65vkac85Ts+StXxHRjU2+X97iV8nU1js=
Subject key identifier:   34:F6:96:02:B1:D8:03:DC:E9:F7:21:3F:96:4B:2D:12:DE:25:EB:A1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0465B56F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NPaWArHYA9zp9yE_lkstEt4l66E.roa
Signing time:             Mon 21 Feb 2022 16:55:51 +0000
ROA not before:           Mon 21 Feb 2022 16:55:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73774447 (0x465b56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 21 16:55:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34f69602b1d803dce9f7213f964b2d12de25eba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:ca:ba:82:da:cb:c5:11:88:5b:b7:bd:a6:
                    48:26:30:73:07:ff:8e:0d:8a:7b:27:e4:fa:ae:f8:
                    96:04:a9:07:62:f9:95:06:7b:96:90:35:41:e6:10:
                    f3:b4:a3:be:04:eb:db:19:0f:f2:51:7e:9a:d2:13:
                    11:e1:dc:22:1f:98:ce:c5:9b:7b:bf:98:96:7e:3c:
                    5d:36:9a:ad:31:f4:88:82:15:72:cd:89:ce:2d:8b:
                    18:3e:36:ac:2a:97:f7:a5:72:e2:ae:7e:ae:dc:b2:
                    d8:e6:4c:4f:0a:c1:ff:7f:26:13:f3:34:46:dc:ac:
                    f7:c7:2c:26:69:5d:be:3c:e0:11:21:0d:2d:36:bb:
                    71:c8:e8:ac:06:94:fa:b9:3c:dc:2e:6e:7e:2d:c2:
                    c3:7c:8b:96:73:58:85:62:69:87:70:a6:73:39:2b:
                    17:0e:c1:f1:3e:70:ea:37:72:9f:68:16:f9:f5:a7:
                    bc:63:3c:dd:e2:8b:21:0f:8b:14:94:8d:68:87:6c:
                    45:3e:3a:a9:e1:f9:71:4e:ab:12:8c:51:c8:af:1f:
                    59:be:22:be:98:e5:64:e4:45:4f:51:30:4c:c8:7d:
                    4e:fe:52:78:86:3f:94:9c:53:3f:e9:3a:a8:32:eb:
                    db:7e:3e:17:d0:75:b6:07:d5:0e:b2:55:7e:d5:0d:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F6:96:02:B1:D8:03:DC:E9:F7:21:3F:96:4B:2D:12:DE:25:EB:A1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NPaWArHYA9zp9yE_lkstEt4l66E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:cb:de:b9:dc:3d:28:d4:5e:1c:42:7c:49:44:51:06:84:
         c7:3d:d6:1e:35:a6:fe:1e:b2:20:9c:f2:c2:ea:44:f7:31:9e:
         53:59:cd:a7:ff:cd:78:9a:c1:75:e8:4c:09:96:e2:86:e9:7f:
         69:20:cb:fd:df:80:23:31:ca:d5:39:da:9f:b6:bd:11:1b:4a:
         51:cb:9e:38:a0:32:98:5e:b1:f1:fa:ea:de:75:a9:be:dc:73:
         27:62:89:02:f2:93:a4:59:87:0d:d0:11:bd:ed:e8:cf:d0:d5:
         d2:37:16:28:32:b1:15:8d:04:e6:fa:01:9b:90:d0:ca:cd:a7:
         5e:1f:e5:71:b2:5f:88:c0:96:59:f3:74:70:58:32:83:f3:64:
         fe:50:3a:8c:69:3b:0f:26:00:d5:6c:96:56:45:8e:bb:f8:8f:
         74:a8:04:bf:fc:77:8c:f2:87:88:e7:fb:19:cb:52:11:df:38:
         c1:4e:1f:4e:22:51:3f:4c:b6:72:9c:cc:7f:f0:2d:48:b5:36:
         8d:dc:81:b3:15:e6:76:c1:9a:45:43:69:25:56:08:65:f8:5c:
         de:46:93:3e:db:39:0d:43:36:b5:d6:9b:d1:70:73:d7:3b:d3:
         a6:17:48:57:03:81:56:d3:da:fd:d9:2d:98:7f:71:2d:11:20:
         c4:11:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----