Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d9y7xXKnIss4sl8wUebqKp-jyNw.roa
File:                     d9y7xXKnIss4sl8wUebqKp-jyNw.roa (raw, json)
Hash identifier:          1fr5Ruj5JzzplmMkz0lH7yZyu3gycyoMKKyKJrZ07hs=
Subject key identifier:   77:DC:BB:C5:72:A7:22:CB:38:B2:5F:30:51:E6:EA:2A:9F:A3:C8:DC
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       076F7D21
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d9y7xXKnIss4sl8wUebqKp-jyNw.roa
Signing time:             Tue 24 May 2022 13:38:13 +0000
ROA not before:           Tue 24 May 2022 13:38:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124747041 (0x76f7d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 24 13:38:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77dcbbc572a722cb38b25f3051e6ea2a9fa3c8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:da:29:ba:40:f6:18:f2:11:48:93:45:28:
                    64:81:73:b7:cd:e5:47:e8:02:ec:60:db:e0:a3:e7:
                    44:04:0d:92:ad:5a:dc:34:a0:d0:8a:df:9a:11:31:
                    26:59:69:e6:70:87:1c:c9:6b:d9:1d:0e:37:5e:6b:
                    63:33:33:4f:e7:f2:a7:56:6f:74:aa:3d:e0:a7:24:
                    c4:99:ac:c5:0b:84:da:6f:11:f1:98:81:07:2f:7b:
                    c8:96:a9:72:11:70:da:64:92:44:e0:7c:bc:80:e6:
                    35:c5:65:d2:8d:1b:9f:ff:c9:18:ed:bf:da:9e:cc:
                    bd:bd:ec:dd:5e:f4:3b:0b:9c:7b:b4:c1:a8:a9:5d:
                    e3:f7:8d:ea:e7:43:58:46:86:02:f2:47:6c:cf:32:
                    f0:b2:50:30:f9:e9:9a:24:27:ce:53:43:10:7c:98:
                    54:b5:b4:ae:e3:64:00:b0:61:00:ba:fc:56:58:42:
                    1b:66:46:33:22:8e:ff:ee:fc:6b:f9:50:d0:d2:c5:
                    31:d2:aa:ac:33:65:64:da:cd:97:59:63:ee:eb:6f:
                    b2:7c:b6:be:50:39:2d:89:3d:ac:68:75:f3:93:a0:
                    d1:11:ff:27:0e:b2:b8:7f:6f:c4:32:74:47:10:b5:
                    16:ee:11:3d:19:a2:4b:48:de:f6:1a:87:81:79:e8:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:BB:C5:72:A7:22:CB:38:B2:5F:30:51:E6:EA:2A:9F:A3:C8:DC
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d9y7xXKnIss4sl8wUebqKp-jyNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:f2:80:6c:10:b5:93:c8:35:99:9a:8f:b2:b6:e9:39:21:
         95:5f:9c:ac:20:61:89:ff:f4:d5:34:fa:59:ee:e3:2a:1c:9c:
         75:c8:a8:df:a3:2d:96:2d:75:4d:d8:03:1d:31:2b:e5:39:2c:
         ae:23:0e:99:39:3f:61:5e:13:9a:d8:b0:6f:e1:d5:46:43:54:
         03:30:4b:35:e2:c8:58:9c:d3:a0:dd:6f:50:f1:73:71:bd:22:
         63:51:60:55:e2:d7:6a:1b:9b:82:e7:84:e6:17:b2:d3:ab:fe:
         67:4d:5e:a3:9a:51:10:39:74:87:b5:8d:e3:5c:06:e0:15:4e:
         52:c7:d7:15:e1:0b:08:64:21:d4:54:8a:64:60:99:31:a2:28:
         4a:02:dd:27:91:d2:3d:79:ad:80:fd:2f:23:21:f9:22:06:bf:
         fd:f7:83:52:b1:3d:03:df:51:10:0d:3a:22:62:03:a8:d7:f8:
         54:53:17:ad:fd:89:76:3d:75:5b:96:23:e4:f4:17:e1:5e:d2:
         06:0c:28:79:3e:d0:7a:39:b2:02:16:72:d6:6e:84:a5:54:02:
         60:d8:02:01:58:36:b4:8f:ca:78:bf:64:e9:eb:12:4f:d5:dc:
         26:b1:14:76:d9:bc:2c:d4:31:62:a7:ab:c3:11:2a:03:21:9e:
         ce:08:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----