Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jMq6romwe7NZ2zmzxu47-inSuSw.roa
File:                     jMq6romwe7NZ2zmzxu47-inSuSw.roa (raw, json)
Hash identifier:          46c1F12wDmigsIAtIAAIeEiThxXwS23vA3SbHSB/9VU=
Subject key identifier:   8C:CA:BA:AE:89:B0:7B:B3:59:DB:39:B3:C6:EE:3B:FA:29:D2:B9:2C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       092D611D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jMq6romwe7NZ2zmzxu47-inSuSw.roa
Signing time:             Mon 27 Jun 2022 17:17:32 +0000
ROA not before:           Mon 27 Jun 2022 17:17:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153968925 (0x92d611d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 27 17:17:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ccabaae89b07bb359db39b3c6ee3bfa29d2b92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:45:9b:6b:35:7b:95:55:a2:34:79:9f:f2:
                    58:f9:70:20:24:77:e5:f7:e5:ed:95:93:65:01:75:
                    27:c5:ba:7c:fe:ef:15:9f:f9:04:0b:92:c8:05:05:
                    d1:f3:2f:88:4a:28:61:30:4c:e7:88:5a:cb:0d:cd:
                    92:61:4a:a3:e8:68:78:af:a9:d2:ab:8a:9a:32:8a:
                    1c:c5:63:e3:4e:af:79:09:20:14:42:89:51:d7:26:
                    97:a8:ca:5b:68:80:13:3d:0f:52:38:b7:19:87:e1:
                    6b:62:05:23:36:4f:42:8b:51:28:0b:6b:1c:82:16:
                    ce:ef:ce:43:7a:f2:68:9b:25:97:ee:d0:61:27:16:
                    d0:e4:b7:04:dd:6b:b2:17:91:94:18:c1:6b:f2:a0:
                    42:2d:8d:bb:9c:4f:c1:e6:5e:88:64:f5:bd:d5:3f:
                    ce:af:7a:60:cc:43:ae:4a:b2:f2:84:70:98:a2:90:
                    f7:7a:be:80:5d:88:28:6c:2b:2c:c1:4a:4b:c7:c1:
                    f0:ea:02:c0:d7:0f:e6:c8:30:b4:95:71:f5:0f:ed:
                    ad:73:96:a4:69:7d:bb:b8:09:32:ec:62:21:40:66:
                    c3:d7:f3:44:ee:93:82:85:79:2b:7c:a1:d5:7d:8b:
                    2c:e9:64:41:9d:90:1a:d4:9c:92:eb:53:3c:9e:8f:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:BA:AE:89:B0:7B:B3:59:DB:39:B3:C6:EE:3B:FA:29:D2:B9:2C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jMq6romwe7NZ2zmzxu47-inSuSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:08:79:34:6a:b8:b9:ed:3f:54:4c:6a:c2:33:55:c5:4d:1d:
         ad:18:f2:85:84:c3:d2:e8:0c:56:b0:a1:97:57:31:bb:c4:e9:
         61:31:ee:81:f8:f4:f8:d1:87:86:31:d2:7e:d9:f2:98:28:ab:
         df:8b:6c:37:80:09:9a:21:7c:d5:3d:3b:85:58:ff:e6:39:b6:
         95:f5:9b:5f:13:1d:bb:a4:06:ab:6b:8e:c0:1f:70:48:95:43:
         91:9a:ce:32:07:9e:17:54:22:44:5e:c2:ed:a2:41:a5:e5:84:
         7d:ef:aa:15:3d:34:ce:8c:1c:5d:f0:17:57:19:31:e9:a5:fb:
         c3:b9:06:57:53:ad:66:bb:3b:d8:83:40:65:a6:62:3a:ca:7f:
         f4:26:b7:20:26:2c:1e:3c:5f:df:6e:f0:65:8c:c9:92:f2:1c:
         75:88:c1:9b:bf:44:ba:f0:3e:31:29:96:f6:9f:09:1c:a4:de:
         84:54:1a:64:19:df:21:05:b4:3c:26:e7:55:20:50:3f:41:ba:
         51:e8:6e:a1:3f:ff:45:51:70:e4:0d:8f:d3:a1:a4:9c:cc:ce:
         56:87:75:23:dc:da:d1:a3:eb:46:d4:cb:29:fb:c1:06:a2:d8:
         50:4e:74:1c:5d:08:08:f8:9a:1a:8d:81:77:da:c3:3b:11:12:
         37:c6:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----