Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OGDHrOZqFk4fTwmkfOOQHZ-xdrc.roa
File:                     OGDHrOZqFk4fTwmkfOOQHZ-xdrc.roa (raw, json)
Hash identifier:          OBM8sncHgSuzrYQV/U9acnx3AuYA0Wwc5naMtVtvK+w=
Subject key identifier:   38:60:C7:AC:E6:6A:16:4E:1F:4F:09:A4:7C:E3:90:1D:9F:B1:76:B7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       049077F8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OGDHrOZqFk4fTwmkfOOQHZ-xdrc.roa
Signing time:             Sun 27 Feb 2022 16:46:48 +0000
ROA not before:           Sun 27 Feb 2022 16:46:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76576760 (0x49077f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 27 16:46:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3860c7ace66a164e1f4f09a47ce3901d9fb176b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:68:87:01:4b:2e:07:86:25:f0:9e:9a:48:
                    d5:3c:86:75:2c:46:d3:8a:9e:03:4e:3f:a2:27:15:
                    41:44:9d:94:1e:97:42:06:b6:0b:33:56:de:90:bb:
                    85:0d:b8:f5:4f:36:7f:99:cc:25:3e:8a:a2:31:1e:
                    3a:cb:10:55:28:f7:e7:f4:89:6f:8e:da:27:89:7d:
                    b8:77:f6:84:2b:ad:10:42:90:c8:08:a2:88:af:60:
                    54:6f:ee:07:d6:1f:fe:e9:69:3f:ae:bc:a8:b7:6a:
                    5b:34:06:16:26:62:c8:d6:32:f9:e4:d1:56:52:12:
                    0b:f5:3a:98:4c:ce:dd:b8:bb:72:1b:c1:0a:74:ab:
                    8f:f7:e3:33:eb:0b:4f:ab:c8:f0:db:23:5f:d8:91:
                    bc:e5:8e:64:50:a1:e0:c2:ee:15:96:42:24:10:5a:
                    8d:b7:44:14:8d:9e:ef:cd:a1:bd:cf:e8:2c:8e:68:
                    d2:0b:65:65:c2:5e:85:df:a5:33:93:70:64:bc:d2:
                    c2:9a:9b:7e:00:2b:a4:c3:a9:a7:92:83:a5:15:8a:
                    19:c8:b3:13:13:70:3e:7a:52:c5:0a:f9:18:68:bd:
                    8a:38:96:58:92:e3:64:b0:31:7f:3b:e9:11:a8:82:
                    94:df:8d:c2:66:dc:51:73:52:77:d4:aa:ae:a4:6f:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:C7:AC:E6:6A:16:4E:1F:4F:09:A4:7C:E3:90:1D:9F:B1:76:B7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/OGDHrOZqFk4fTwmkfOOQHZ-xdrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:52:92:36:95:93:3e:f2:b9:df:55:af:04:57:c6:e8:b8:
         23:77:68:00:b7:56:89:27:f6:07:31:35:f1:d3:b1:f4:88:5f:
         47:4c:1d:89:d6:87:33:cd:10:76:4f:2d:71:79:81:ee:23:d3:
         85:e4:f7:0a:e4:9c:b3:75:25:6b:7c:a5:ed:8e:f2:c4:c5:08:
         93:f2:92:55:54:13:28:8c:73:36:b9:db:a2:52:da:44:56:97:
         fc:2f:a4:17:c2:bf:c7:a4:01:91:a7:f0:eb:45:4c:90:f4:1e:
         79:79:4c:68:78:77:2d:10:cc:6f:8f:83:3e:07:12:dc:44:e7:
         4c:9f:68:1f:9b:15:b1:75:a0:18:71:e6:39:02:a8:e9:1c:01:
         73:d8:bd:14:56:8b:44:d7:c5:08:58:99:d7:63:a9:bb:6c:3d:
         1b:a9:69:4a:6e:92:e9:aa:3b:65:86:ba:ab:b3:51:cd:02:83:
         c1:8a:87:b2:25:1d:a2:e5:b7:eb:0f:66:17:20:c3:da:ce:9e:
         fe:e1:33:a1:4a:3c:b4:14:d7:b7:ee:74:33:62:a8:5b:af:43:
         c3:fb:e5:54:be:6b:0e:4c:80:c4:6e:7b:39:94:11:15:c9:f5:
         30:11:94:50:d2:b4:07:07:1b:b6:59:67:fa:15:b4:29:e4:47:
         92:f6:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----