Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_YuLmZ8Uh6UxLgWojSpP0KE9chQ.roa
File:                     _YuLmZ8Uh6UxLgWojSpP0KE9chQ.roa (raw, json)
Hash identifier:          1G5TozW/HlYMkERRxAvjxeNFy1R96x9cK6OfKU1x2Eg=
Subject key identifier:   FD:8B:8B:99:9F:14:87:A5:31:2E:05:A8:8D:2A:4F:D0:A1:3D:72:14
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181D49FC7123070C7EE05F3C253E8FEDB5C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_YuLmZ8Uh6UxLgWojSpP0KE9chQ.roa
Signing time:             Wed 06 Jul 2022 17:47:29 +0000
ROA not before:           Wed 06 Jul 2022 17:47:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d4:9f:c7:12:30:70:c7:ee:05:f3:c2:53:e8:fe:db:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  6 17:47:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fd8b8b999f1487a5312e05a88d2a4fd0a13d7214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d7:7b:ba:a4:27:b0:d6:7c:32:09:31:bb:6b:
                    22:dc:9a:5c:a7:41:c9:3f:bb:e4:4f:52:58:b3:44:
                    ff:06:3f:35:57:20:4e:59:09:92:6e:ef:c2:41:6e:
                    5d:bd:ab:6c:b0:66:8a:01:6e:1b:59:10:29:b2:fe:
                    75:bf:f6:1f:29:e6:06:a0:1c:24:be:23:9c:4c:9d:
                    4a:87:9e:0f:c2:86:d5:6d:b7:7c:41:c7:01:c3:81:
                    a6:3b:18:91:53:bf:d6:20:e8:f3:e1:2e:c1:06:0a:
                    25:d2:06:74:7e:98:25:e4:fc:28:b8:ca:93:ad:f7:
                    75:73:80:33:8a:90:26:2a:72:7a:2e:0a:6c:72:60:
                    5c:29:00:36:ff:8f:60:a5:29:63:3c:f2:89:06:63:
                    02:25:5f:83:6f:a0:2c:c1:50:bb:4d:bf:50:e5:75:
                    d4:c0:fe:29:5a:b4:de:7f:e4:8f:ee:78:e8:3b:f8:
                    0b:31:01:67:08:ea:72:35:7a:43:d8:c6:e9:60:41:
                    84:14:bf:90:7f:57:a4:e8:79:31:cb:4a:cd:81:47:
                    2c:ed:6b:d6:d4:fa:a0:80:35:0d:c5:fe:9d:e9:aa:
                    f9:32:71:86:e9:1e:a8:c3:fd:1b:47:95:3e:2f:ff:
                    7b:14:38:10:1d:2f:ab:00:d3:4a:5a:38:9f:f0:dd:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8B:8B:99:9F:14:87:A5:31:2E:05:A8:8D:2A:4F:D0:A1:3D:72:14
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_YuLmZ8Uh6UxLgWojSpP0KE9chQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:09:e8:0e:37:1f:44:87:9f:c5:96:da:c8:d2:16:13:44:ef:
         37:fb:89:67:ea:8b:9b:0a:9d:27:55:2e:bf:23:6b:b5:2f:ec:
         cb:dd:c4:3a:bc:43:39:cf:03:02:60:30:c6:58:94:bc:83:f7:
         2a:6e:f7:ab:2c:fd:4c:00:c5:e1:53:30:34:db:e5:c0:56:e4:
         bf:1a:7c:42:1b:4d:c5:97:71:21:69:6b:af:83:03:e5:08:0e:
         cf:d8:cd:75:1a:c1:90:4e:df:ee:b5:f9:a5:5d:16:9a:5f:df:
         02:c3:1b:e3:95:32:91:55:2b:7c:96:7e:59:33:1c:66:00:52:
         b9:d4:5b:23:09:1a:f7:f5:e7:07:09:86:5b:3f:4b:b3:59:fd:
         9d:89:13:04:1d:81:75:d0:42:1e:ab:1a:03:ad:60:6f:85:dc:
         b3:c6:f0:e0:88:9a:1f:f3:c8:3d:43:a6:93:9c:f5:98:56:f5:
         ff:a6:ec:88:46:73:e1:9f:de:e9:30:c5:28:32:d0:9b:38:ac:
         4d:2f:a5:dd:8f:95:46:26:53:40:fa:33:2e:51:94:7a:c1:a0:
         f2:f3:f7:8b:76:0a:bb:cb:ab:fb:70:66:a2:bd:cf:f1:a4:a7:
         c6:f8:42:58:c5:5b:e4:8a:02:19:c6:6c:b0:09:43:b1:88:95:
         0c:67:f3:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHUn8cSMHDH7gXzwlPo/ttcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA2MTc0NzI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDhiOGI5OTlmMTQ4N2E1MzEyZTA1YTg4ZDJhNGZkMGExM2Q3MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4td7uqQnsNZ8Mgkxu2si3Jpcp0HJ
P7vkT1JYs0T/Bj81VyBOWQmSbu/CQW5dvatssGaKAW4bWRApsv51v/YfKeYGoBwk
viOcTJ1Kh54PwobVbbd8QccBw4GmOxiRU7/WIOjz4S7BBgol0gZ0fpgl5PwouMqT
rfd1c4AzipAmKnJ6LgpscmBcKQA2/49gpSljPPKJBmMCJV+Db6AswVC7Tb9Q5XXU
wP4pWrTef+SP7njoO/gLMQFnCOpyNXpD2MbpYEGEFL+Qf1ek6Hkxy0rNgUcs7WvW
1PqggDUNxf6d6ar5MnGG6R6ow/0bR5U+L/97FDgQHS+rANNKWjif8N1qAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFP2Li5mfFIelMS4FqI0qT9ChPXIUMB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvX1l1TG1aOFVoNlV4TGdXb2pTcFAwS0U5Y2hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAl9gEMA8E
AgACMAkDBwAgAQf8AAIwDQYJKoZIhvcNAQELBQADggEBAGEJ6A43H0SHn8WW2sjS
FhNE7zf7iWfqi5sKnSdVLr8ja7Uv7MvdxDq8QznPAwJgMMZYlLyD9ypu96ss/UwA
xeFTMDTb5cBW5L8afEIbTcWXcSFpa6+DA+UIDs/YzXUawZBO3+61+aVdFppf3wLD
G+OVMpFVK3yWflkzHGYAUrnUWyMJGvf15wcJhls/S7NZ/Z2JEwQdgXXQQh6rGgOt
YG+F3LPG8OCImh/zyD1DppOc9ZhW9f+m7IhGc+Gf3ukwxSgy0Js4rE0vpd2PlUYm
U0D6My5RlHrBoPLz94t2CrvLq/twZqK9z/Gkp8b4QljFW+SKAhnGbLAJQ7GIlQxn
8/w=
-----END CERTIFICATE-----