Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jpwqEDPy1t59CNDUWy3VKPTZL5s.roa
File:                     jpwqEDPy1t59CNDUWy3VKPTZL5s.roa (raw, json)
Hash identifier:          +ENn2ID16JNcVtHJ33WwPCM1lGekK1uCY8LgP+0m9ms=
Subject key identifier:   8E:9C:2A:10:33:F2:D6:DE:7D:08:D0:D4:5B:2D:D5:28:F4:D9:2F:9B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05438E0D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jpwqEDPy1t59CNDUWy3VKPTZL5s.roa
Signing time:             Tue 22 Mar 2022 17:32:34 +0000
ROA not before:           Tue 22 Mar 2022 17:32:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88313357 (0x5438e0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 22 17:32:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e9c2a1033f2d6de7d08d0d45b2dd528f4d92f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:f6:b5:9c:4a:a5:02:5a:c9:13:1b:90:c0:
                    6b:48:a1:12:e6:60:64:1c:91:30:f7:75:dd:73:ca:
                    79:f4:32:c5:90:5a:1c:6c:44:85:1e:64:9c:7f:ed:
                    e6:51:2c:91:c0:35:f5:ae:19:d6:af:74:0f:12:f4:
                    38:8d:84:eb:94:de:1c:89:9a:32:7e:02:66:00:c1:
                    81:61:5a:70:22:88:a4:68:91:37:e6:41:c6:de:6e:
                    c7:b5:14:c3:af:aa:f8:a5:04:ad:46:e5:ac:6d:52:
                    7c:43:28:d2:64:92:c4:b1:94:e1:21:b1:13:d3:24:
                    11:cf:9f:1d:77:18:8f:1b:a2:97:56:09:e3:06:71:
                    8a:61:bd:0d:ba:cc:c7:27:c8:ee:ae:da:06:02:66:
                    e8:35:5d:d2:85:c9:ea:e2:3e:38:9d:6b:05:32:ec:
                    2e:b4:aa:16:3a:a0:38:d8:fe:8e:26:25:5a:35:c5:
                    67:dd:83:c8:06:57:8a:aa:37:24:4b:96:60:32:c3:
                    f9:8d:3a:01:2b:b0:5c:a4:39:3d:96:2b:59:ef:e0:
                    48:87:a1:32:ce:7d:c9:d9:2c:8b:3d:5f:8b:9a:1d:
                    84:f2:88:23:c5:0e:c3:d3:a9:bb:3c:34:05:b9:70:
                    90:a6:f1:d6:35:58:05:16:63:12:c0:75:c9:ac:a1:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:2A:10:33:F2:D6:DE:7D:08:D0:D4:5B:2D:D5:28:F4:D9:2F:9B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/jpwqEDPy1t59CNDUWy3VKPTZL5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:32:85:12:c6:d8:5f:45:23:64:12:8f:71:f5:80:4a:db:
         55:82:77:25:af:c4:4a:a6:9d:8e:93:31:15:6b:89:3b:ed:4b:
         5f:98:3c:79:79:d0:c3:cf:16:09:73:63:0a:35:da:5e:b1:cc:
         9a:3f:57:46:02:b6:ee:68:01:16:7a:a5:96:37:e9:f3:49:f8:
         0a:84:35:95:9e:ee:f5:3c:16:a4:11:2a:06:52:00:9c:0c:cb:
         56:c4:74:90:d4:2f:85:90:ec:a3:b9:d5:9e:9c:e7:e2:d8:53:
         1a:ec:c0:17:e6:fa:f1:68:ea:08:e4:fa:41:4d:50:cf:bb:25:
         bc:95:8e:72:3d:ca:87:fb:dd:79:61:07:96:2f:47:7b:02:7e:
         2e:20:a8:71:e8:c5:e7:b0:91:7e:65:69:e6:6e:ed:c5:82:11:
         00:20:2c:c0:ef:e0:15:ed:bc:b8:84:57:56:b7:67:c9:e3:a8:
         1d:b0:d0:9a:f4:d7:6b:3a:2d:e9:79:af:9a:85:d5:23:1c:d9:
         08:4a:dc:10:fa:df:1d:e6:5a:e9:5e:63:63:17:a2:f9:a5:70:
         0f:52:66:a1:2a:ae:94:a5:0e:7e:88:34:19:af:a2:e0:78:1d:
         10:66:6a:d9:b7:da:a9:66:a2:21:22:2d:bf:76:eb:f7:66:e0:
         1f:e4:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----