Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ORCkSzCp_R2p1ZjVGX6_ZxLTxVw.roa
File:                     ORCkSzCp_R2p1ZjVGX6_ZxLTxVw.roa (raw, json)
Hash identifier:          CRyUSpiWK5WvvxoCIEz3twAh6vk6YPF00JJhbycQ+8s=
Subject key identifier:   39:10:A4:4B:30:A9:FD:1D:A9:D5:98:D5:19:7E:BF:67:12:D3:C5:5C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07A4D5D0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ORCkSzCp_R2p1ZjVGX6_ZxLTxVw.roa
Signing time:             Sat 28 May 2022 13:45:30 +0000
ROA not before:           Sat 28 May 2022 13:45:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128243152 (0x7a4d5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 28 13:45:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3910a44b30a9fd1da9d598d5197ebf6712d3c55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:83:97:df:09:a8:2b:a4:1e:a5:b0:6e:f6:
                    3e:ca:a3:f2:d7:c5:08:ca:67:04:de:2b:dc:7e:a7:
                    e8:c9:5f:42:6f:94:18:98:f1:9d:d7:b4:90:9c:6a:
                    3c:7e:42:74:f8:83:03:fb:7a:57:a0:27:73:03:48:
                    da:75:2e:4b:5b:21:ac:47:19:92:ce:8c:53:34:59:
                    38:7e:6a:db:f3:fb:1a:b3:52:f5:67:62:88:87:41:
                    4f:b5:dd:8f:3c:a6:89:56:0e:a1:22:e4:06:fb:71:
                    ec:4e:c8:7c:d3:70:56:71:06:25:f4:9c:ff:10:cc:
                    86:e9:7d:6f:35:bc:04:b2:10:1b:9f:2f:d2:8f:40:
                    0a:6d:a0:02:df:fa:a7:46:83:80:39:da:1a:74:f8:
                    5f:45:3a:f2:bd:75:c0:4d:29:d4:cb:d3:70:7c:9e:
                    3a:e5:57:20:d0:c8:22:28:3f:8e:d5:81:49:ba:84:
                    8b:e1:5c:be:c0:ed:6f:27:f4:98:64:ed:7f:be:6b:
                    ee:07:cd:40:38:7b:00:64:ff:32:c8:3e:87:ea:96:
                    a8:2f:b7:9d:60:d2:44:ec:45:96:b8:78:30:ef:99:
                    b9:c7:32:6e:bd:0a:f6:67:29:4d:60:28:38:57:aa:
                    a5:d8:ec:0a:d3:69:a3:bb:d7:b3:78:eb:95:3f:92:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:10:A4:4B:30:A9:FD:1D:A9:D5:98:D5:19:7E:BF:67:12:D3:C5:5C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ORCkSzCp_R2p1ZjVGX6_ZxLTxVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:6f:b5:25:f8:a7:7d:18:e4:e0:fc:8d:95:64:71:eb:e7:bd:
         03:7b:5b:3c:ca:9e:64:24:a2:b4:a9:57:1f:0b:ee:bb:34:89:
         3c:88:6f:c0:5b:10:68:12:73:b9:28:68:74:77:7d:02:15:19:
         73:b7:04:5c:eb:c8:c8:5d:24:85:a3:21:2d:81:c2:87:9d:64:
         48:a8:25:1d:a3:2e:02:b9:70:c5:00:73:22:cd:48:62:ea:3c:
         f0:84:52:07:65:ab:6d:5a:82:2c:0d:39:6e:cf:27:cc:8b:48:
         d5:40:63:c0:b3:da:48:fc:21:5c:a4:3e:43:86:db:4b:f3:5d:
         c3:aa:69:22:63:9c:5e:fe:73:34:db:2a:0d:b7:ad:c5:17:16:
         23:b4:66:b2:c8:9c:1d:18:65:66:b3:e7:95:54:2b:2b:7f:0b:
         ea:bd:68:3b:55:fc:2d:59:06:74:09:2d:1b:f5:37:7a:98:59:
         93:d3:16:54:e4:8b:44:51:0b:60:6d:9c:41:5c:86:e9:1b:87:
         a8:eb:c4:93:ba:cf:84:f9:c4:6b:64:3f:f7:ee:bf:c2:8b:a8:
         15:ab:86:06:2b:21:ce:30:c1:0a:3b:21:84:67:9c:f2:47:8f:
         eb:b0:96:30:f1:9e:dc:65:21:0c:32:0c:04:9a:ad:dd:41:3c:
         3a:26:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----