Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ot8v1Rrb5svllritZITGRdAoO0s.roa
File:                     Ot8v1Rrb5svllritZITGRdAoO0s.roa (raw, json)
Hash identifier:          lmrMIIOdjETzBz5zkYRfLgTOrxs3zhkusvIOIlXtA4s=
Subject key identifier:   3A:DF:2F:D5:1A:DB:E6:CB:E5:96:B8:AD:64:84:C6:45:D0:28:3B:4B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08ADDA67
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ot8v1Rrb5svllritZITGRdAoO0s.roa
Signing time:             Fri 17 Jun 2022 17:19:44 +0000
ROA not before:           Fri 17 Jun 2022 17:19:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145611367 (0x8adda67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 17 17:19:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3adf2fd51adbe6cbe596b8ad6484c645d0283b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:81:bc:49:f8:a4:f6:05:20:7e:70:63:6f:
                    b9:bb:f4:d6:18:e0:fc:54:b2:3c:ee:09:1a:c9:dc:
                    21:a5:38:ec:5a:66:68:5a:1c:7c:e0:14:af:c0:9f:
                    a8:fc:de:cf:61:23:6f:ce:e5:23:47:ff:91:6f:50:
                    e4:15:4d:c9:7f:7e:32:fb:6f:9a:37:29:fd:71:18:
                    cb:fb:ae:6c:64:e8:fe:e4:3f:90:0d:63:35:2c:3d:
                    04:31:4b:f2:6f:fa:12:e1:54:52:8b:c7:ba:c3:bb:
                    5e:d9:55:f4:fb:c6:23:a3:7c:85:ee:8f:07:9b:74:
                    c3:ec:7d:ce:c2:d6:e2:2c:2c:fa:87:c9:e1:f2:9c:
                    d5:99:b8:7a:63:88:6f:e3:4b:b4:b0:6d:7a:28:88:
                    d1:36:42:d4:9e:84:e9:8e:45:b9:a9:75:17:72:2a:
                    3a:d0:97:17:31:44:fd:fc:6d:7b:27:e3:9e:23:38:
                    e2:42:99:0e:fa:e8:44:cd:bb:d4:0b:c2:15:c7:36:
                    0e:85:11:1e:5d:d0:f7:7e:42:80:8a:d8:7f:b2:64:
                    a5:ff:13:5a:67:4c:07:64:e9:fc:a5:01:09:40:3c:
                    e7:69:41:a0:34:b5:8f:3c:b6:3c:90:00:95:0d:03:
                    33:24:9c:03:18:64:47:d9:aa:ad:02:74:f4:ab:6b:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DF:2F:D5:1A:DB:E6:CB:E5:96:B8:AD:64:84:C6:45:D0:28:3B:4B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Ot8v1Rrb5svllritZITGRdAoO0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:18:a3:08:36:2e:fe:24:c9:c9:59:32:7e:b3:b0:d8:6b:
         6b:93:18:c6:61:67:f8:19:f4:13:fe:4f:15:2e:1e:3f:50:ef:
         cc:52:95:11:cc:9f:3c:b9:e1:3e:80:18:f7:cd:e7:67:79:61:
         af:83:9a:10:ac:b9:ea:8d:a6:54:99:1b:67:ae:a0:ac:ad:e6:
         b4:b2:23:cd:57:4c:df:4d:3f:94:e0:d9:c5:80:a5:b8:e3:00:
         57:59:6f:32:12:6e:bd:9c:7a:3c:e1:ef:b0:f1:d7:49:49:6b:
         bc:4b:c0:8a:c4:98:2b:f7:93:b2:0c:58:29:d6:86:b3:82:b6:
         ea:28:06:57:cd:78:d7:ce:18:14:11:bc:55:91:c1:73:c0:f1:
         1f:8c:6e:27:82:8d:cc:0d:66:7e:e3:64:3e:e0:34:dd:55:cb:
         7b:51:eb:e9:bd:57:85:0d:9d:c6:c7:d2:5e:77:ed:48:a4:a7:
         1c:0c:f8:f5:48:d4:14:2b:3d:85:4c:f4:ae:da:d7:71:71:22:
         64:69:cc:ff:e3:ae:09:f7:41:07:72:9b:0d:70:a3:0d:45:19:
         3b:98:6a:14:7b:5c:d8:7f:bd:1b:2d:ce:03:96:a8:4d:46:b9:
         a6:41:b8:81:59:a4:11:b7:c9:ee:53:e7:b7:e4:4f:a2:8a:97:
         04:29:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----