Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/muE10RjXcfVpd3HW7lz6gDXH8fQ.roa
File:                     muE10RjXcfVpd3HW7lz6gDXH8fQ.roa (raw, json)
Hash identifier:          IzMTJmIG76XuYsCU8wWApf6suclT+f2iHTnHx/EXBEU=
Subject key identifier:   9A:E1:35:D1:18:D7:71:F5:69:77:71:D6:EE:5C:FA:80:35:C7:F1:F4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0728C4E1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/muE10RjXcfVpd3HW7lz6gDXH8fQ.roa
Signing time:             Thu 19 May 2022 14:58:27 +0000
ROA not before:           Thu 19 May 2022 14:58:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120112353 (0x728c4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 19 14:58:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ae135d118d771f5697771d6ee5cfa8035c7f1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0f:44:98:e9:3c:f5:58:43:5c:ec:c7:4d:8d:
                    c4:f8:dc:05:ec:b0:16:59:1f:17:2b:89:29:91:98:
                    4a:a8:2d:af:e4:c8:e2:d6:18:d3:2a:81:5b:ce:50:
                    f5:f8:a8:df:df:4e:48:ac:74:3d:39:8e:e4:10:e6:
                    61:b2:17:af:f7:02:ef:4b:1b:b5:2a:98:98:6c:50:
                    a9:7c:c1:2e:34:65:69:2c:8a:01:78:cd:27:b5:0f:
                    0e:2e:46:58:f7:50:e4:a3:31:57:cf:d7:d5:11:1f:
                    57:ce:27:2a:42:1a:f4:80:d8:03:90:23:99:cb:f7:
                    eb:fc:1d:34:3a:46:05:31:fa:2e:0e:9f:09:25:4d:
                    23:b3:0c:3d:3a:ca:b3:06:a9:d7:8a:6b:88:bb:96:
                    73:d7:6c:b8:6b:76:5c:83:f0:b4:9d:1a:b8:7d:e0:
                    60:26:e7:fa:d6:c0:81:47:ab:62:9a:9f:f4:db:32:
                    2d:45:6b:89:c2:f9:a7:c1:78:ca:88:90:56:96:a6:
                    17:4e:49:53:d4:a2:5e:46:95:97:8a:c5:6f:23:13:
                    ba:4e:04:da:aa:46:3d:20:20:e9:9f:72:4b:d7:e8:
                    cf:b7:0d:dc:39:19:81:eb:34:86:42:9a:75:3a:7c:
                    f9:8a:7d:03:68:f9:14:da:83:76:66:0f:30:a5:d0:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:35:D1:18:D7:71:F5:69:77:71:D6:EE:5C:FA:80:35:C7:F1:F4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/muE10RjXcfVpd3HW7lz6gDXH8fQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:c0:21:d5:b1:b6:25:48:8d:30:12:d8:0b:50:44:a1:be:
         67:05:4b:93:7e:41:03:8c:79:64:2f:75:43:4f:89:a7:f6:85:
         bd:73:57:f8:93:74:8f:c0:9b:5b:88:3e:cb:b1:34:e7:bd:b4:
         8a:cf:8e:ac:56:f1:60:52:f0:3f:b5:06:fe:39:59:1f:cb:03:
         9c:08:cb:c1:45:36:66:85:b5:ce:8d:92:56:e7:80:c9:c4:0e:
         a0:c2:e9:02:75:af:0f:c0:28:12:0b:06:af:a7:9b:c2:f1:78:
         33:0d:04:b2:b8:07:52:5a:c7:a7:b5:8e:33:92:9d:de:4b:3c:
         35:68:84:36:98:eb:9a:c5:63:d9:60:24:95:23:33:35:31:83:
         8f:27:da:6c:ae:fe:9a:82:9b:ad:65:1c:54:26:ee:f2:5a:62:
         a3:b5:ff:cd:ed:58:4f:d7:77:fc:41:8d:be:30:f6:fd:1d:7a:
         32:c1:4a:56:d8:ba:96:7f:0d:c6:d9:3f:28:4e:6d:18:bb:81:
         ea:29:fd:ca:5c:e7:da:32:c7:44:7f:7a:1e:be:e7:a0:bc:2c:
         76:bf:00:6a:5f:52:31:99:d6:45:a6:ff:32:b0:ee:54:1b:62:
         77:9d:1a:cc:a3:c4:43:84:6c:31:cd:5e:75:ed:16:0c:7c:13:
         bc:59:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----