Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hBveoUct7zkwfUjzC0NXFHUdn48.roa
File:                     hBveoUct7zkwfUjzC0NXFHUdn48.roa (raw, json)
Hash identifier:          95KTyu0rq8X46IZV2IwE96jSiu2gs1jw+1F0+OHZymY=
Subject key identifier:   84:1B:DE:A1:47:2D:EF:39:30:7D:48:F3:0B:43:57:14:75:1D:9F:8F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0871E755
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hBveoUct7zkwfUjzC0NXFHUdn48.roa
Signing time:             Mon 13 Jun 2022 14:25:44 +0000
ROA not before:           Mon 13 Jun 2022 14:25:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141682517 (0x871e755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 13 14:25:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=841bdea1472def39307d48f30b435714751d9f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:4c:47:74:bb:24:0a:1f:4d:74:45:3e:30:
                    52:94:c5:23:f2:76:7c:35:12:d8:40:e5:9d:a8:ed:
                    e6:bc:b5:57:39:c7:d1:55:4e:21:00:86:47:48:8b:
                    5c:59:dd:86:5e:ac:15:0a:5c:33:d4:78:13:fc:5b:
                    d7:82:20:e3:39:f2:0d:c5:1a:01:66:e6:83:98:be:
                    a5:00:e0:b2:de:f1:d8:11:8d:b7:40:ef:5f:e0:cd:
                    c6:b4:e1:14:ab:2e:75:7f:82:38:63:f2:65:da:a8:
                    23:e3:bd:0f:76:13:19:72:75:31:68:42:cc:43:6b:
                    50:11:c4:a0:e7:10:38:af:96:96:a1:c7:57:79:54:
                    46:06:48:d0:1c:a7:28:2f:08:04:50:1c:f6:cd:fe:
                    3e:57:a4:64:4b:45:d2:3d:78:0f:b9:7e:a1:79:a2:
                    a8:6e:f8:12:f4:80:5d:c5:68:9d:bd:a9:d4:83:a6:
                    4c:1c:5d:2a:cf:33:2f:2e:ab:bf:63:29:31:80:c5:
                    e2:72:bc:76:24:07:11:27:91:7a:2c:eb:e8:0f:eb:
                    1e:7e:cf:21:9f:66:d6:cf:b8:e0:d3:0d:03:dc:75:
                    d2:d9:2c:e1:28:83:d3:d0:19:51:48:ae:99:fc:fe:
                    7d:a8:a5:95:ad:43:11:a1:91:8c:df:ad:45:2e:ae:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1B:DE:A1:47:2D:EF:39:30:7D:48:F3:0B:43:57:14:75:1D:9F:8F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hBveoUct7zkwfUjzC0NXFHUdn48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         86:71:68:55:26:09:92:6c:39:eb:89:cd:e9:af:70:a6:06:e9:
         ab:3c:3d:25:fd:93:67:d8:56:22:b4:80:cb:cd:fe:27:83:e1:
         f3:42:7c:33:e2:dd:a1:4d:8a:47:0c:81:04:f6:54:2a:c2:ed:
         5f:12:73:6f:83:06:be:04:90:3a:98:5e:db:26:89:9d:aa:df:
         b4:c7:82:bd:4c:83:c9:20:2b:cb:c7:21:9d:57:7b:71:0a:47:
         fe:20:0a:f8:59:7c:4a:69:80:96:d6:30:01:e0:89:34:c5:e6:
         b0:d9:71:9a:b2:06:e0:ed:37:59:9d:c2:74:77:d4:5f:51:7b:
         84:84:e2:7b:cd:6c:be:f0:05:b4:4a:4f:12:29:5c:b7:08:97:
         c0:07:9f:70:c6:1d:cf:70:58:61:32:2c:6b:9a:a4:fe:4f:9b:
         d2:07:ac:ca:80:ac:12:29:9b:1e:b4:ec:50:f9:3c:c1:e2:50:
         d5:81:2b:6a:91:87:3c:be:17:95:8f:17:a6:54:9f:30:9e:80:
         1a:11:63:7a:8e:b7:77:95:c4:a6:7a:3e:53:57:2b:22:57:df:
         07:ad:a0:ca:21:48:e5:a6:75:0d:e5:3a:22:09:ec:66:92:52:
         5b:7e:b3:23:c0:1c:a1:53:8c:91:67:64:06:cb:54:00:41:f4:
         17:37:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----