Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ngy52MuzuFyjNqViUU_VtncKH3U.roa
File:                     Ngy52MuzuFyjNqViUU_VtncKH3U.roa (raw, json)
Hash identifier:          VPCgX89QV68fXN4WYXGcbBPvS4sCgPvl2yI3GvcFGsI=
Subject key identifier:   36:0C:B9:D8:CB:B3:B8:5C:A3:36:A5:62:51:4F:D5:B6:77:0A:1F:75
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07E69B41
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ngy52MuzuFyjNqViUU_VtncKH3U.roa
Signing time:             Thu 02 Jun 2022 13:16:21 +0000
ROA not before:           Thu 02 Jun 2022 13:16:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132553537 (0x7e69b41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  2 13:16:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=360cb9d8cbb3b85ca336a562514fd5b6770a1f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:47:56:a3:8c:b7:7a:40:88:9c:74:90:be:
                    71:f1:e5:86:e6:e4:e2:a3:f9:38:4f:9c:a5:be:c5:
                    ce:76:29:83:a3:27:9d:84:60:3c:b9:fb:02:26:eb:
                    aa:e1:39:26:df:74:50:36:fd:0a:d6:f4:a8:55:e2:
                    80:a1:f6:55:02:f1:b0:89:d8:f3:93:97:8d:26:86:
                    1e:8e:86:bd:d9:30:5f:cd:33:4a:e5:ca:fa:db:0b:
                    66:96:c8:3d:58:1b:f9:cb:ae:c2:0d:48:d4:09:1e:
                    7d:f1:01:b2:d9:1e:d2:da:ad:96:24:8a:e4:6e:50:
                    71:aa:9d:53:db:97:3a:8f:0e:b2:7e:1d:b7:8f:e8:
                    d2:50:37:3f:7a:29:ea:9b:ad:8c:97:b4:ee:30:0b:
                    f9:e5:95:7d:e9:b4:3b:c9:ca:c9:e1:17:2e:f3:d4:
                    76:bd:ee:60:d6:29:49:88:d8:a3:8e:ec:cd:01:6d:
                    77:1f:d0:c4:aa:9f:fe:61:73:48:c0:65:74:17:25:
                    ac:99:ee:32:dd:f4:56:1d:75:d4:5c:2f:a3:84:1d:
                    c5:21:ff:f5:3b:f8:0e:09:ff:06:97:71:0f:0e:38:
                    ff:7d:1b:26:ff:f4:0d:69:37:e3:42:b8:f7:98:86:
                    84:0b:f3:d2:b1:81:44:e2:ab:91:e7:c1:6e:f1:e9:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:B9:D8:CB:B3:B8:5C:A3:36:A5:62:51:4F:D5:B6:77:0A:1F:75
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ngy52MuzuFyjNqViUU_VtncKH3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:49:45:24:7f:5c:f1:42:0a:12:86:9e:1c:44:3b:33:6b:
         86:64:7e:8f:a3:7a:67:a4:a9:9c:b1:e2:2e:5d:5a:49:c9:a9:
         59:c4:96:3a:7b:1b:f5:2a:de:df:e0:08:6f:88:39:0e:d6:4b:
         97:ee:02:d1:61:52:d8:a6:55:33:1a:55:dc:fc:90:5f:e8:84:
         8e:51:bc:8b:4a:e7:72:e0:ae:81:58:71:02:35:70:44:76:83:
         22:90:52:3a:e2:97:ff:80:df:9d:c4:b2:07:d6:46:43:f7:33:
         74:0f:a5:f3:c5:90:ec:ba:77:80:aa:33:bf:e4:97:d4:15:8b:
         3e:66:8d:40:39:c9:0d:e8:a2:d2:c4:d1:8c:ff:55:03:4f:28:
         fc:a3:b6:3a:7b:c8:6f:14:f9:17:03:f2:10:11:5d:a4:ec:07:
         00:86:ba:18:27:10:21:96:5b:c2:7d:b2:ac:f7:aa:2f:24:2e:
         49:40:e7:6f:8d:95:13:0f:a3:ef:10:cb:3d:0b:24:a2:80:d9:
         e0:20:e8:f8:87:80:f4:a9:2b:45:5d:9c:1b:f7:1c:31:20:68:
         f0:fc:6d:f3:43:1c:28:66:1d:46:7f:e1:51:b5:a0:5f:b7:db:
         a8:42:fc:4e:16:71:cc:88:4e:c6:14:fb:ab:11:eb:70:b3:1e:
         47:b9:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----