Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mCvWVfX-QmWuF2tNs7_l5-A0mWQ.roa
File:                     mCvWVfX-QmWuF2tNs7_l5-A0mWQ.roa (raw, json)
Hash identifier:          N7U5bTCWJog6p04pXIvOG9TCpiLeC6rDeNxr1tHcJvU=
Subject key identifier:   98:2B:D6:55:F5:FE:42:65:AE:17:6B:4D:B3:BF:E5:E7:E0:34:99:64
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       09541ECB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mCvWVfX-QmWuF2tNs7_l5-A0mWQ.roa
Signing time:             Thu 30 Jun 2022 04:51:02 +0000
ROA not before:           Thu 30 Jun 2022 04:51:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156507851 (0x9541ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 30 04:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=982bd655f5fe4265ae176b4db3bfe5e7e0349964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:d1:d1:8c:ba:27:62:3d:86:5d:8f:bb:5a:
                    6a:52:b1:0b:76:5c:07:9e:1f:12:43:0a:1c:b3:81:
                    24:39:04:41:a9:60:a0:ce:cc:58:54:10:30:cb:92:
                    55:70:51:90:88:cd:e0:ac:e2:a7:c2:9d:59:b0:f8:
                    fa:f9:78:f9:70:aa:27:95:04:8e:1d:47:1f:f9:4c:
                    c2:bb:d5:22:87:21:fc:ef:f3:61:6c:ee:d5:08:8e:
                    98:4d:84:12:2d:49:78:fa:5a:ba:9e:23:f1:d3:45:
                    6e:af:b0:7d:be:ef:f8:43:79:32:48:5c:13:fb:cf:
                    95:7b:8a:3f:75:91:ef:dd:b1:4c:db:f9:b6:03:ad:
                    9b:8b:c0:d6:20:8c:dd:d2:4e:21:56:ed:97:bd:69:
                    13:54:ab:a8:5c:12:f8:94:71:03:bb:6d:f4:38:f6:
                    9d:71:11:82:42:ad:9d:11:89:94:0e:1c:5d:ef:64:
                    05:b3:5b:0f:6d:3b:b5:fe:8a:e4:6f:55:76:83:62:
                    d1:2e:35:3f:29:00:24:9a:51:37:87:29:ce:f5:9a:
                    d0:05:38:eb:09:1a:42:ca:ac:32:b9:b8:23:10:73:
                    7f:f6:2e:4d:94:43:2a:90:a5:ff:d2:0a:14:58:24:
                    49:6a:4c:98:17:55:3a:48:ee:64:06:2a:4a:a6:84:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:D6:55:F5:FE:42:65:AE:17:6B:4D:B3:BF:E5:E7:E0:34:99:64
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mCvWVfX-QmWuF2tNs7_l5-A0mWQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:8b:95:71:38:7b:2a:89:fc:89:f1:5a:72:da:04:ef:52:95:
         ab:ea:25:8f:6a:49:f9:fa:6b:14:fd:c7:e7:67:ea:83:91:57:
         62:18:6d:b3:0a:8d:cc:0d:ab:58:d2:2c:58:2c:a3:9f:9d:9d:
         9d:95:27:ea:d6:7d:a7:73:37:7a:6a:5c:31:be:cc:82:af:6c:
         cd:d7:4b:d7:43:84:31:30:bf:fe:d4:3e:ce:2e:ed:af:04:e6:
         0d:3b:9d:83:60:af:0a:ad:9f:ad:05:a7:d4:5c:db:8c:e8:12:
         3d:e8:f1:bf:e6:4e:88:e1:f6:a6:20:4e:31:f3:23:52:43:4f:
         62:95:7b:44:84:a4:f1:8d:e3:f7:58:ee:6b:78:d7:1c:e3:6d:
         45:86:39:d0:ad:11:1b:71:41:15:1a:99:e2:e7:25:24:6c:81:
         8b:6f:93:d8:4e:a9:c4:4a:f1:df:35:ed:17:58:33:09:7b:b2:
         97:73:d3:12:16:fc:fc:2e:bd:7e:81:91:32:80:6e:fe:d7:95:
         c8:98:57:5f:25:f2:3d:a7:31:c0:a7:02:69:01:d7:b4:75:c3:
         a3:54:46:d2:db:a3:7c:6a:7d:f9:ca:5c:65:4b:98:70:e1:b4:
         a6:c5:4e:31:c6:9b:70:15:d9:90:51:9f:f7:e4:6f:b5:0f:ab:
         df:72:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----