Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kGH62LfxjRQCt0gp-V01cD5JLE8.roa
File:                     kGH62LfxjRQCt0gp-V01cD5JLE8.roa (raw, json)
Hash identifier:          MNS4BKydnL5xGT/+t74pVHNmzFPaQy0RPPmuEAbw4NU=
Subject key identifier:   90:61:FA:D8:B7:F1:8D:14:02:B7:48:29:F9:5D:35:70:3E:49:2C:4F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03F685B0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kGH62LfxjRQCt0gp-V01cD5JLE8.roa
Signing time:             Mon 07 Feb 2022 16:26:37 +0000
ROA not before:           Mon 07 Feb 2022 16:26:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66487728 (0x3f685b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  7 16:26:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9061fad8b7f18d1402b74829f95d35703e492c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:f3:0e:9e:6c:87:1a:9c:54:df:d5:45:e3:
                    d5:c6:04:13:ce:a2:d9:2c:d2:0e:cb:2a:1d:db:8a:
                    7f:c3:da:44:40:f7:54:a2:f9:40:5c:36:0e:eb:f7:
                    54:b5:8f:73:b3:a8:02:1d:88:ba:8b:2a:9c:cb:69:
                    ea:6f:8e:2b:ad:60:fc:39:e0:35:57:34:ad:48:ad:
                    73:53:3f:f8:2f:e7:6f:04:46:e4:c7:bd:23:ce:ca:
                    d4:8c:2f:c4:08:ec:b1:be:b5:3d:e7:3a:c1:6c:56:
                    3e:9d:8e:e1:fa:51:67:d4:2f:ce:67:ab:2c:a7:52:
                    62:ae:67:a7:aa:64:78:74:7c:96:34:8d:70:20:40:
                    51:5c:4a:33:7f:be:c5:ee:47:56:03:21:f6:af:2b:
                    8f:cf:73:1e:28:21:f9:93:c5:08:16:16:1f:81:56:
                    6f:bb:05:31:2f:42:d0:9d:9b:bb:4f:2b:9d:0d:9e:
                    dd:b2:f9:73:80:3d:f5:16:7d:25:9b:3c:02:c6:68:
                    5a:2b:70:6a:14:bf:68:7a:e9:88:7c:bf:4b:79:88:
                    a4:9f:b8:ca:c7:85:e2:68:61:e9:05:50:2f:d0:1c:
                    62:61:9c:b8:e7:c7:21:2f:18:5e:93:c8:6b:ff:f8:
                    b8:4b:b1:cf:8c:a7:73:36:cc:e4:e4:71:08:d1:84:
                    c5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:61:FA:D8:B7:F1:8D:14:02:B7:48:29:F9:5D:35:70:3E:49:2C:4F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kGH62LfxjRQCt0gp-V01cD5JLE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:74:26:36:4d:ef:00:f2:bd:36:ce:2b:0f:ef:2e:b3:84:
         c1:25:72:67:8c:f6:29:d1:27:9b:6e:db:d9:0c:f2:fb:77:5c:
         48:e2:67:b6:83:38:01:15:90:49:60:65:73:47:19:2a:27:d6:
         a4:ab:d1:3c:24:e5:11:de:37:17:b6:65:37:9c:e9:e1:61:f1:
         14:3b:ef:49:5a:88:4f:87:8a:8f:14:e7:5f:52:fa:54:88:8e:
         96:27:5d:4d:ce:a9:77:76:8e:2c:6a:38:de:b4:11:b7:f1:bb:
         75:5a:00:27:56:90:d1:dc:58:64:02:73:94:be:6a:e5:f3:8c:
         55:f0:c7:96:75:94:63:9e:4b:f3:13:aa:f6:9a:5c:1d:c1:0d:
         ce:e6:94:39:61:8b:31:2c:60:f7:fc:cc:be:20:df:06:82:be:
         e7:8d:5c:2d:a7:95:ab:3f:35:e6:4e:4a:3f:ba:ba:a8:5b:ab:
         7a:11:4f:39:d0:79:ac:a9:7a:58:cb:c4:5c:e3:4e:fe:83:8e:
         08:c1:ad:0e:0b:3b:6a:19:32:ba:58:eb:56:a9:70:b1:42:a0:
         b2:46:8a:a1:8c:62:bd:8c:bb:36:f8:32:68:dd:f0:95:d7:54:
         1c:7d:24:76:ed:f5:e2:a7:8f:cc:d7:8f:91:2d:08:ce:59:41:
         e4:90:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----