Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa
File:                     pjkE6Wg26HCwdPCgPMKcR-M3xag.roa (raw, json)
Hash identifier:          7tdGZQGsJYbVIVsBrG47Qh9FBzboG39LJsf8ph+02ZI=
Subject key identifier:   A6:39:04:E9:68:36:E8:70:B0:74:F0:A0:3C:C2:9C:47:E3:37:C5:A8
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05CAB707
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa
Signing time:             Sun 10 Apr 2022 10:47:48 +0000
ROA not before:           Sun 10 Apr 2022 10:47:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97171207 (0x5cab707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 10 10:47:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a63904e96836e870b074f0a03cc29c47e337c5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:ec:8b:77:d2:17:f1:79:c3:2a:e5:b3:1d:
                    9e:2c:78:6c:cb:97:15:98:0c:47:8e:d1:56:ca:6b:
                    32:e9:74:ca:9f:46:39:23:83:73:91:20:85:69:14:
                    23:b3:47:76:83:38:54:78:dd:30:20:7c:f0:25:f4:
                    68:08:51:29:66:96:e1:4f:d3:37:73:ff:f9:d1:36:
                    40:c8:c9:cd:22:33:6f:16:fb:2a:64:ee:be:a7:5d:
                    30:3d:ed:cb:e5:4b:b4:56:ad:8c:1f:35:c9:0d:7f:
                    1f:e1:db:b4:85:63:58:ea:a0:09:88:05:7f:89:6b:
                    30:75:e1:29:83:d3:98:97:b3:f6:a0:28:f2:15:47:
                    21:09:92:71:81:ea:88:f0:93:b6:66:16:31:a3:7f:
                    4e:67:7b:6c:c1:f2:11:65:ed:0c:85:0b:20:d9:4a:
                    49:cc:36:12:b4:c8:c9:c9:9d:45:88:ed:43:e3:6b:
                    96:64:2d:e8:41:fa:03:d0:2c:33:09:d0:cb:2f:93:
                    64:d3:65:b7:67:45:70:f5:2e:df:ca:da:98:ed:83:
                    a7:2a:6f:11:cc:d8:a0:a2:33:7d:f7:87:7f:16:a6:
                    b3:a6:7e:ec:3b:b3:60:55:30:aa:36:6d:53:53:0c:
                    f8:f5:c3:e1:06:3f:0b:75:02:24:5d:05:cf:62:fa:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:04:E9:68:36:E8:70:B0:74:F0:A0:3C:C2:9C:47:E3:37:C5:A8
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:be:cb:74:6b:cf:ab:77:7b:4c:c4:48:df:52:dd:31:26:39:
         7f:49:64:36:7e:81:ad:5b:c0:5e:57:6e:82:01:35:7e:6d:50:
         17:12:82:64:af:ec:29:3e:8d:85:b3:5a:fc:cb:f9:cc:cd:a0:
         31:db:a8:53:80:f0:0a:37:b6:f9:4f:6f:af:9d:4b:54:c3:e1:
         8f:6e:cd:7d:70:b2:6b:91:bc:8d:17:73:05:57:90:00:2f:c4:
         c9:ad:46:bd:4c:c1:57:78:9a:f2:02:ed:e2:cf:ea:33:92:b5:
         a3:60:c4:c9:eb:88:62:79:3e:78:24:6a:e1:82:ff:6e:62:9e:
         8c:ff:ac:dc:8d:97:88:2c:db:8f:58:d6:6d:ed:f8:1a:c9:9a:
         b0:e3:80:66:65:11:d6:6b:7e:8a:eb:c8:db:c8:33:21:99:f1:
         7e:de:ea:3f:c7:84:32:8b:9b:65:dd:c9:30:88:2f:f4:eb:f2:
         a2:ef:7e:b3:89:c7:77:c4:a9:79:3b:33:54:f1:63:3e:81:5e:
         db:89:46:b3:d1:f6:93:e7:52:80:4a:53:db:f0:d6:50:48:e8:
         d5:36:c7:14:81:43:52:a8:0d:bc:de:1f:3f:7d:c7:9e:57:c4:
         64:a7:9d:e0:69:a7:8a:45:06:29:2f:b5:b4:2a:b1:95:3d:a5:
         49:db:6c:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBcq3BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQx
MDEwNDc0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTYzOTA0ZTk2ODM2
ZTg3MGIwNzRmMGEwM2NjMjljNDdlMzM3YzVhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWH7It30hfxecMq5bMdnix4bMuXFZgMR47RVsprMul0yp9G
OSODc5EghWkUI7NHdoM4VHjdMCB88CX0aAhRKWaW4U/TN3P/+dE2QMjJzSIzbxb7
KmTuvqddMD3ty+VLtFatjB81yQ1/H+HbtIVjWOqgCYgFf4lrMHXhKYPTmJez9qAo
8hVHIQmScYHqiPCTtmYWMaN/Tmd7bMHyEWXtDIULINlKScw2ErTIycmdRYjtQ+Nr
lmQt6EH6A9AsMwnQyy+TZNNlt2dFcPUu38ramO2DpypvEczYoKIzffeHfxams6Z+
7DuzYFUwqjZtU1MM+PXD4QY/C3UCJF0Fz2L6jOkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSmOQTpaDbocLB08KA8wpxH4zfFqDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3Bqa0U2V2cyNkhDd2RQQ2dQTUtjUi1NM3hhZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQABvst0a8+rd3tMxEjfUt0xJjl/SWQ2foGtW8Be
V26CATV+bVAXEoJkr+wpPo2Fs1r8y/nMzaAx26hTgPAKN7b5T2+vnUtUw+GPbs19
cLJrkbyNF3MFV5AAL8TJrUa9TMFXeJryAu3iz+ozkrWjYMTJ64hieT54JGrhgv9u
Yp6M/6zcjZeILNuPWNZt7fgayZqw44BmZRHWa36K68jbyDMhmfF+3uo/x4Qyi5tl
3ckwiC/06/Ki736zicd3xKl5OzNU8WM+gV7biUaz0faT51KASlPb8NZQSOjVNscU
gUNSqA283h8/fceeV8Rkp53gaaeKRQYpL7W0KrGVPaVJ22wO
-----END CERTIFICATE-----