Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wk7DfDfikLBtQbXj8WcVnAoMaVg.roa
File:                     Wk7DfDfikLBtQbXj8WcVnAoMaVg.roa (raw, json)
Hash identifier:          Uju4jJIK7EoBtKPalzSU0o3Jws8ddguaR0+TWcRucDg=
Subject key identifier:   5A:4E:C3:7C:37:E2:90:B0:6D:41:B5:E3:F1:67:15:9C:0A:0C:69:58
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       085F3237
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wk7DfDfikLBtQbXj8WcVnAoMaVg.roa
Signing time:             Sat 11 Jun 2022 17:08:02 +0000
ROA not before:           Sat 11 Jun 2022 17:08:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140456503 (0x85f3237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 11 17:08:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a4ec37c37e290b06d41b5e3f167159c0a0c6958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fd:71:a7:62:c4:64:6a:55:1d:8c:79:20:b7:
                    fc:a3:91:f1:47:30:7b:ca:dc:5b:13:67:5d:ef:3b:
                    ab:b9:78:a3:f5:9b:54:90:61:50:14:f1:95:59:f8:
                    7e:80:04:bb:94:80:2b:8e:18:66:37:ea:d4:21:6c:
                    87:40:36:e9:45:56:16:42:59:b0:b7:2e:0d:ea:5c:
                    98:bd:1e:3c:5d:24:75:c5:aa:52:95:6f:54:2f:5d:
                    05:e1:d9:5c:5c:97:07:2a:db:99:b3:a4:f1:fa:20:
                    17:ec:7b:e4:f1:21:52:d5:4a:32:66:77:85:9b:76:
                    22:f8:07:89:50:4f:78:88:85:16:8c:53:0a:f9:11:
                    a1:3f:00:01:5f:e9:96:f8:90:09:ba:52:13:98:cb:
                    32:8b:6b:8f:a5:06:75:53:69:95:35:42:cc:e9:18:
                    d7:d1:b1:9e:5c:1c:1f:d5:a4:ca:f7:49:6d:e2:7e:
                    48:05:30:71:cd:0e:db:17:97:46:b1:00:a9:e8:c1:
                    59:a7:0a:92:7a:09:49:3e:4c:aa:79:26:b6:db:3d:
                    e4:53:a0:e0:aa:f5:fb:d9:c3:55:aa:19:2a:22:03:
                    02:15:5a:87:33:eb:b4:eb:0e:13:fa:bd:9f:1f:e0:
                    1b:c6:7d:e6:e1:f8:75:48:a2:3f:e0:db:3a:28:29:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:C3:7C:37:E2:90:B0:6D:41:B5:E3:F1:67:15:9C:0A:0C:69:58
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Wk7DfDfikLBtQbXj8WcVnAoMaVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:43:44:33:bd:fe:0f:f3:8f:a3:cb:bb:04:32:ee:ab:0d:57:
         eb:b5:23:32:94:e4:fa:d6:84:e2:6f:53:7f:3f:ed:2c:f0:6c:
         d0:53:8e:dc:5f:97:f1:ca:a2:55:ea:99:d1:c4:4c:20:c7:9c:
         48:a7:7f:71:6e:5a:28:83:e3:73:5d:60:19:0c:36:c8:c4:19:
         da:78:f5:f2:d0:ee:52:ae:85:1a:32:c0:dc:8e:23:ac:f6:52:
         7a:56:1c:68:88:d1:85:e4:1b:2c:4d:f8:79:65:f6:75:fc:80:
         94:8f:11:9c:fe:bc:7a:9a:46:4a:bd:d6:9c:30:0c:bb:0f:c3:
         b2:c0:d5:99:54:b5:e3:51:da:5e:74:88:f3:79:31:53:66:93:
         de:e3:c0:b8:8e:2e:91:c1:3c:76:9c:ba:ca:d5:b6:d0:13:1f:
         8a:85:ae:28:fe:a6:4f:1c:91:d3:23:16:75:32:be:33:03:16:
         51:56:23:36:54:d5:0f:42:0b:78:a2:48:64:9e:2d:64:55:00:
         5c:d2:91:20:65:cc:e5:c8:b0:dd:7a:c0:3a:bc:9a:f5:0f:a1:
         7d:73:93:93:9e:26:9c:e1:1b:b0:c8:e2:ee:f7:a3:a9:c9:58:
         ee:06:21:5b:cb:33:66:09:5a:60:41:1a:08:e8:ae:a9:6c:cd:
         60:66:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----