Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Zm2dOI0bxrYwCurZ-Mf8PSdiA-c.roa
File:                     Zm2dOI0bxrYwCurZ-Mf8PSdiA-c.roa (raw, json)
Hash identifier:          2aGLICEOrAcI/Wi7sMm0Twqpx48jt+BIhazuRwIOcAE=
Subject key identifier:   66:6D:9D:38:8D:1B:C6:B6:30:0A:EA:D9:F8:C7:FC:3D:27:62:03:E7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04835C8C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Zm2dOI0bxrYwCurZ-Mf8PSdiA-c.roa
Signing time:             Sat 26 Feb 2022 01:31:28 +0000
ROA not before:           Sat 26 Feb 2022 01:31:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75717772 (0x4835c8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 26 01:31:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=666d9d388d1bc6b6300aead9f8c7fc3d276203e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:52:4d:68:72:b2:3d:a6:8a:e0:82:30:da:
                    4f:8b:a1:98:e0:d4:ee:a2:fe:23:fc:a4:e4:04:a9:
                    9a:b5:a6:df:b9:a1:27:1c:db:76:57:f0:83:79:69:
                    8e:16:19:16:e3:9e:f6:e1:1b:4a:1e:72:94:e6:6d:
                    18:50:d0:f1:94:3d:42:e7:35:71:b6:b0:b7:77:94:
                    ab:d4:b8:20:9b:95:10:51:a0:72:a9:e4:27:c6:d7:
                    df:fc:14:b8:4e:78:9a:fc:47:69:ad:b7:6a:b3:64:
                    4f:dd:66:8b:74:d9:0b:1d:21:3f:9c:32:fa:d8:00:
                    11:15:14:27:a1:45:5c:9b:bd:1d:d1:01:f2:2b:07:
                    31:9d:ee:24:d6:03:8f:a6:9d:46:75:6d:d4:a4:35:
                    2e:35:b7:e1:d0:36:60:c0:aa:e4:b2:bc:a5:e1:aa:
                    88:7b:a3:0a:86:54:54:2e:1e:17:cc:7d:27:0e:39:
                    7c:dd:72:7b:ad:93:dc:aa:cd:d7:4f:dc:35:26:3f:
                    e5:05:5c:38:c0:c6:3d:4c:0e:e1:78:cf:ef:ba:e1:
                    41:2d:5e:c1:b2:93:c8:b1:37:28:f9:82:ce:a5:02:
                    14:59:33:20:3d:99:7b:9c:4f:ae:0c:33:63:a1:97:
                    ce:5e:18:c7:79:fd:fb:87:17:32:7c:6d:b0:bf:ac:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:9D:38:8D:1B:C6:B6:30:0A:EA:D9:F8:C7:FC:3D:27:62:03:E7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Zm2dOI0bxrYwCurZ-Mf8PSdiA-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:c1:c4:c2:b3:02:b7:3d:cb:55:59:3e:d8:b2:ac:e0:5b:
         00:42:46:3a:01:d0:de:35:d5:31:6f:af:b8:5f:9b:f4:8e:e3:
         8d:08:13:75:b8:a2:c1:bf:4e:c7:67:8d:c9:a9:ef:0a:3d:b9:
         b9:0d:09:8e:38:05:48:57:c4:e7:e7:a4:56:8f:46:a0:8a:2b:
         32:d1:97:92:02:e8:97:24:06:4a:77:59:d9:9a:93:08:e5:30:
         21:cf:ba:94:54:6b:5b:db:95:78:7d:96:35:be:28:24:15:12:
         97:33:42:f9:d2:95:db:0e:53:af:9a:b0:bb:cf:00:1c:7f:b0:
         5b:9a:0d:04:9d:24:63:80:3c:3f:e3:86:60:9c:c7:0e:2f:ce:
         79:e2:c4:7a:be:a0:0a:79:28:3c:b9:3c:16:be:0f:ef:85:11:
         c9:1e:5a:a5:32:c7:27:c0:72:5b:30:e4:01:c5:fe:5b:fe:04:
         7f:5e:cc:64:e7:25:78:26:d0:cc:a2:a2:c6:ab:e5:27:42:5d:
         c3:c8:d2:ce:15:05:42:91:d4:18:7f:91:9a:c7:86:8b:76:cc:
         d2:be:20:e3:fd:d2:d6:36:e7:ca:f7:6b:f9:5f:28:a9:20:ce:
         fb:3c:ac:56:8c:4a:19:a5:b4:7b:bb:92:db:f4:b7:2f:da:70:
         b5:3c:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----