Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/eQ803DDRQuw1_hCcQ83xkE1Fbm4.roa
File:                     eQ803DDRQuw1_hCcQ83xkE1Fbm4.roa (raw, json)
Hash identifier:          xqXR6y5+oYB/EMgiRdajYVmXGoFLgLFPMph7ysj1SRQ=
Subject key identifier:   79:0F:34:DC:30:D1:42:EC:35:FE:10:9C:43:CD:F1:90:4D:45:6E:6E
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       065A30C1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/eQ803DDRQuw1_hCcQ83xkE1Fbm4.roa
Signing time:             Fri 29 Apr 2022 14:48:06 +0000
ROA not before:           Fri 29 Apr 2022 14:48:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106574017 (0x65a30c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 29 14:48:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=790f34dc30d142ec35fe109c43cdf1904d456e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:f4:65:39:a1:d1:7b:23:2d:54:f5:9e:64:
                    76:37:6c:b3:f0:35:13:c5:31:b1:b5:4f:0b:84:09:
                    2c:49:be:52:5e:86:ca:ef:23:72:2e:9f:b2:2c:49:
                    3c:10:44:79:09:33:94:82:f8:27:0d:06:16:b0:e5:
                    20:60:e9:2a:14:7f:cb:e1:da:86:92:68:68:fa:0c:
                    01:1c:46:e8:20:8f:e3:3e:21:c2:45:c5:1b:1a:9d:
                    21:69:1a:81:85:6b:92:5c:fb:24:59:62:68:dc:6a:
                    5f:2c:1d:e2:18:a9:d8:4b:7f:9a:4a:e8:5b:07:82:
                    bd:bc:ff:ae:c6:de:6f:28:03:ae:55:f2:60:14:36:
                    8f:16:fe:c0:e9:cc:8b:02:e0:90:09:4e:63:7d:7f:
                    46:a0:ed:1b:73:72:44:7b:85:a4:90:70:dc:c6:24:
                    63:82:14:a7:56:28:1e:42:f7:1b:04:46:44:43:23:
                    5e:c5:c3:22:58:b8:a2:28:74:c8:dd:ce:e6:83:f7:
                    77:d3:29:52:dd:62:f2:58:fb:7d:0e:9e:9d:92:67:
                    91:76:fc:90:c9:5f:a1:28:a4:43:ec:cc:2b:e8:4f:
                    bf:d1:d7:30:5f:03:39:ef:dc:a9:a5:ec:fe:49:a7:
                    8d:93:95:17:e2:e9:a5:8f:cb:65:f8:98:8f:83:a1:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0F:34:DC:30:D1:42:EC:35:FE:10:9C:43:CD:F1:90:4D:45:6E:6E
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/eQ803DDRQuw1_hCcQ83xkE1Fbm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:64:a8:f4:71:91:25:c6:96:8a:76:2e:01:28:70:1d:d0:
         6e:ea:0d:f6:f6:7e:cc:a6:c9:85:44:8e:b0:71:43:c0:be:a2:
         2d:16:0f:57:95:de:2b:e3:8c:03:33:13:6b:1d:4f:1c:ef:60:
         80:3d:7d:c1:bf:8e:54:6b:9c:5a:1d:4a:40:50:45:f8:8a:e2:
         8f:b8:b7:79:c7:60:eb:60:0d:9a:0a:d6:66:ea:8f:fb:cf:14:
         b9:b9:f2:a5:a6:b3:d4:0d:e0:16:64:15:2b:63:73:98:c0:4b:
         e2:6d:df:76:a8:cd:82:2c:30:63:7e:ca:5c:59:ed:3c:87:6c:
         24:43:9e:bf:25:ec:67:c3:de:2c:4a:00:69:a3:38:52:ad:23:
         d4:c6:3c:86:d2:14:2f:b3:c4:f9:6c:c0:87:02:78:a4:33:a0:
         b8:4f:39:43:36:40:3f:c6:ff:22:d1:77:2a:ba:a9:5f:bf:97:
         09:2f:60:76:91:2d:ec:73:a9:20:2c:c0:60:22:88:23:45:3c:
         43:ba:ef:94:75:49:14:a9:4f:ad:53:05:7e:53:85:05:a8:0f:
         0f:5b:3b:e0:b8:bc:c1:eb:53:a4:19:39:5f:85:c1:92:cb:bc:
         e7:f7:e7:1c:ee:ed:d6:49:50:b4:b3:92:6c:63:9c:74:39:fa:
         1e:92:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----