Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p1Jv_r1LIXNYnah41FUwHnF5k84.roa
File:                     p1Jv_r1LIXNYnah41FUwHnF5k84.roa (raw, json)
Hash identifier:          wDDhWSe14H5oCv7X77S3bmX8AsLUfsqWcjbsOaIjKlA=
Subject key identifier:   A7:52:6F:FE:BD:4B:21:73:58:9D:A8:78:D4:55:30:1E:71:79:93:CE
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06111A70
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p1Jv_r1LIXNYnah41FUwHnF5k84.roa
Signing time:             Wed 20 Apr 2022 06:35:44 +0000
ROA not before:           Wed 20 Apr 2022 06:35:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101784176 (0x6111a70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 20 06:35:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7526ffebd4b2173589da878d455301e717993ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:1a:6b:24:4d:bc:4f:35:22:4e:f8:4b:23:
                    1c:e2:42:7e:99:e6:ba:ea:2c:4b:35:1f:5a:8c:34:
                    6f:96:51:ba:12:9f:fd:6f:9f:ea:84:a3:81:3c:ce:
                    b6:b0:fb:20:b3:6c:71:99:fb:49:b5:3f:b4:9a:61:
                    fe:ca:53:9b:cf:50:9b:f3:3d:2e:72:51:c0:3f:cd:
                    b2:a0:53:73:b2:42:22:65:bd:b7:bc:e5:e2:0b:04:
                    dd:e5:f8:45:13:0e:d5:6f:17:1b:21:e5:15:82:2d:
                    96:7c:b6:84:90:41:79:97:8e:97:9d:74:e0:ae:76:
                    a1:80:8c:2b:55:81:fe:47:10:9a:56:d5:00:24:a5:
                    c2:15:55:2b:e8:02:82:b1:10:12:af:81:53:9c:c8:
                    b4:a8:dc:e2:5f:d7:03:f3:e7:76:6f:0e:21:57:1f:
                    d7:e2:cd:0e:67:c3:d7:f9:80:26:96:ed:67:e2:d5:
                    0b:83:96:79:e3:47:4b:7a:f7:dd:06:04:4f:65:fd:
                    18:5c:54:c5:9c:5c:0e:53:34:21:c8:a4:7d:dc:3a:
                    6e:04:47:94:79:15:2a:b3:88:b4:56:53:15:c4:a6:
                    a0:e0:6a:b0:e4:55:f8:d5:63:2c:2c:72:21:71:cf:
                    3d:1f:3c:68:e9:27:99:b2:b1:7d:6b:0c:72:b8:e9:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:6F:FE:BD:4B:21:73:58:9D:A8:78:D4:55:30:1E:71:79:93:CE
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p1Jv_r1LIXNYnah41FUwHnF5k84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:62:f2:3b:bb:b2:07:17:97:ac:c6:e2:ef:14:e1:3f:38:5e:
         5f:33:ec:31:36:da:fc:11:8e:fa:22:ff:48:23:1e:7b:91:c0:
         2d:eb:04:76:b2:cd:be:de:24:09:a9:60:b6:03:a6:e0:04:90:
         c6:67:29:c0:ba:04:be:5b:0e:ec:28:3d:33:d1:25:89:e7:10:
         ac:ef:bc:a9:bd:62:39:b0:44:98:9d:ab:34:1b:14:53:74:b0:
         c1:4f:f3:f8:aa:86:ca:11:ef:a2:66:95:99:ce:4c:eb:0c:c2:
         0b:7f:4c:3a:6d:76:7e:1a:e1:04:e1:e9:d7:00:08:1d:85:0f:
         01:1c:ea:2c:72:3f:24:16:3d:6f:d4:17:c9:dc:a7:62:98:8e:
         03:ba:68:47:1d:18:ab:17:ff:5a:44:9b:45:d9:7b:75:48:75:
         7e:be:f4:51:7e:bf:bb:62:a5:9b:26:5b:f3:d6:c4:99:ea:a9:
         e5:1c:a8:63:6a:1e:27:c9:83:37:d9:b3:88:0b:70:ec:f2:36:
         cc:ba:2a:b8:47:fa:0c:8b:ea:15:a0:ab:87:dd:14:ef:b0:a6:
         5c:25:1d:0d:ab:80:ee:0e:24:9a:bd:93:c6:78:e5:34:9e:62:
         d5:37:cc:28:db:73:59:f2:57:2e:63:33:6c:4c:0b:87:0d:10:
         cd:41:11:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----