Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bPoiDsV0UA81ePADnDv_nrdo07s.roa
File:                     bPoiDsV0UA81ePADnDv_nrdo07s.roa (raw, json)
Hash identifier:          PnFN/fEjP00mQs7juOgRP3R7OngyUjf1Yefu8aa1yho=
Subject key identifier:   6C:FA:22:0E:C5:74:50:0F:35:78:F0:03:9C:3B:FF:9E:B7:68:D3:BB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       059AE545
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bPoiDsV0UA81ePADnDv_nrdo07s.roa
Signing time:             Mon 04 Apr 2022 16:08:34 +0000
ROA not before:           Mon 04 Apr 2022 16:08:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94037317 (0x59ae545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr  4 16:08:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6cfa220ec574500f3578f0039c3bff9eb768d3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:99:d9:08:6c:cb:de:e2:fe:17:1b:b7:d7:
                    f2:84:6d:b2:d8:50:1a:0b:55:89:e9:6f:2b:36:3b:
                    25:9c:ec:7a:94:81:11:07:e8:1a:cc:95:9a:00:e3:
                    65:00:ee:5c:88:ef:66:38:45:16:bf:89:04:c8:bb:
                    39:3e:41:e7:29:92:87:ba:c2:a4:cc:4a:86:c2:f1:
                    ec:67:43:ff:38:78:54:08:a6:db:4b:f0:8c:82:3e:
                    ef:7a:d8:b6:2c:6c:8e:e1:c6:56:3d:e2:ad:55:b2:
                    74:e0:46:5e:a4:67:88:ae:39:20:78:d9:51:9b:27:
                    c1:a2:e2:22:37:36:7b:0a:15:78:1d:2b:15:c6:a0:
                    fe:63:71:85:84:81:1c:50:3d:8e:ea:7a:a3:b0:fb:
                    88:d1:99:80:5f:81:90:66:e9:d8:2c:27:ac:d5:cc:
                    2a:45:5d:9b:22:54:d3:c4:63:7d:fb:80:05:c8:91:
                    d3:e4:6f:ac:c7:2a:8a:d0:20:1f:f9:86:42:64:a6:
                    42:90:73:57:01:f5:e1:2f:5a:06:32:9e:99:d4:a6:
                    95:3d:ac:19:26:29:42:3d:8a:fa:3c:59:8d:76:28:
                    85:bc:dd:4c:9b:80:8c:fd:49:13:09:a4:60:4d:b0:
                    b8:01:fb:89:5d:ea:f3:9f:02:f1:d6:89:9c:7a:ac:
                    dc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:22:0E:C5:74:50:0F:35:78:F0:03:9C:3B:FF:9E:B7:68:D3:BB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bPoiDsV0UA81ePADnDv_nrdo07s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         43:29:c7:30:b4:fa:36:67:8e:2e:87:57:48:2d:15:22:e5:a4:
         39:b4:13:62:01:95:0a:f4:18:f2:02:ea:34:af:4d:21:0e:bd:
         e3:10:3f:99:34:4e:67:f1:9f:8c:ed:77:80:33:86:ba:c9:d8:
         46:a7:59:dd:7f:e7:36:74:6f:be:5f:86:61:de:3c:2c:1e:cf:
         13:ac:a6:6c:b1:c8:6f:f4:50:a2:67:a9:b5:5c:6a:9f:c8:d0:
         60:65:83:7e:62:07:d3:35:37:1f:80:2c:3e:d5:bf:ff:71:8f:
         5c:b1:fc:a2:53:ec:4b:8a:1a:9f:d7:83:70:a6:64:de:18:23:
         63:e9:8d:3f:53:fd:4c:80:a5:cd:5b:3d:aa:08:0c:52:19:34:
         92:30:9b:27:ce:f8:ed:d4:69:c0:58:e1:2b:b2:26:cd:2d:10:
         89:af:88:4e:77:4f:b0:72:c1:c3:de:c1:0a:d7:c5:25:06:b1:
         d3:ae:f0:e5:94:2d:ea:67:d5:d1:c5:20:4b:aa:cb:3d:9f:dc:
         d5:49:a3:e7:eb:23:f3:8d:92:1a:ca:f1:8d:f8:e8:27:74:80:
         30:81:67:30:4d:e9:bf:b0:41:4f:1a:6b:16:54:08:2e:a3:1a:
         87:ce:cb:38:3f:1c:08:be:a8:0e:d3:54:3c:83:54:7d:cc:ef:
         47:6c:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----