Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbUvX46z4veyaP6mprqmLinHnh8.roa
File:                     rbUvX46z4veyaP6mprqmLinHnh8.roa (raw, json)
Hash identifier:          NclC/pbbSsfXLYn3K1CoN+6OM+aQ6xJe8Iu4D4HBxUQ=
Subject key identifier:   AD:B5:2F:5F:8E:B3:E2:F7:B2:68:FE:A6:A6:BA:A6:2E:29:C7:9E:1F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05A58006
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbUvX46z4veyaP6mprqmLinHnh8.roa
Signing time:             Wed 06 Apr 2022 04:54:27 +0000
ROA not before:           Wed 06 Apr 2022 04:54:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94732294 (0x5a58006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr  6 04:54:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=adb52f5f8eb3e2f7b268fea6a6baa62e29c79e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:e3:d8:b9:99:7e:db:01:08:27:36:9c:99:
                    68:b1:4b:a4:d1:95:64:1b:58:1c:e5:c9:c2:00:c6:
                    e3:a2:94:5e:14:af:eb:b3:bf:8c:5f:a7:7b:fa:09:
                    a0:ba:bd:82:2d:9f:59:bb:71:b6:c0:07:56:11:eb:
                    e5:dc:57:99:e7:3c:7e:a7:4b:56:4a:e9:55:e4:a2:
                    b8:5a:b1:d6:55:66:1c:20:26:89:75:f7:6a:99:c0:
                    d3:e0:f2:35:3f:17:34:af:83:4b:af:c4:d4:28:83:
                    c2:2f:0b:16:9f:fb:82:75:31:8b:40:e3:39:de:c7:
                    5b:2e:cd:0a:3b:08:a9:f8:ec:28:b1:73:84:26:fd:
                    d1:47:82:92:90:d8:af:39:fb:15:df:e9:5d:cc:c2:
                    60:4c:4f:14:89:90:f6:f7:08:4c:a6:3b:a1:77:b4:
                    7b:56:81:1f:60:3f:db:f2:39:b8:2d:60:c1:1a:ba:
                    35:27:f7:42:0f:75:6c:97:6f:52:57:30:7d:82:69:
                    b8:99:14:a2:02:3d:a0:1a:a6:ac:5e:2d:cc:c6:89:
                    8b:1f:2c:85:68:03:a0:52:c9:03:bd:2f:e4:5b:05:
                    42:92:c4:5c:5b:86:ec:05:b4:75:fd:85:4c:aa:e4:
                    b3:ac:5f:84:4f:d2:b1:c2:6b:24:93:e7:ff:f4:ae:
                    6c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:2F:5F:8E:B3:E2:F7:B2:68:FE:A6:A6:BA:A6:2E:29:C7:9E:1F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rbUvX46z4veyaP6mprqmLinHnh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:ac:d7:5c:a3:73:96:4f:45:a5:f3:43:15:c4:f3:3e:16:
         21:de:e2:ad:75:99:2d:87:65:31:55:86:4a:a9:d4:94:b1:5a:
         80:dd:8c:ea:cf:eb:85:3e:40:c2:4e:d6:29:3b:64:ab:f9:aa:
         75:de:56:42:80:a1:91:7c:e4:17:79:df:b0:20:1c:d3:7c:36:
         1c:4a:50:10:51:80:0d:1d:3d:0e:84:82:de:47:19:10:38:97:
         85:1c:5c:2d:8b:0e:f0:d4:32:df:30:40:c5:0c:a3:09:e7:1e:
         d9:11:8c:1c:5f:ee:0d:93:86:54:c1:45:39:0e:e6:17:be:73:
         d3:d9:70:a7:e3:24:5c:d9:01:2f:02:14:b7:84:ec:33:0d:42:
         31:d4:c9:6e:d8:24:3d:8a:ee:a9:a6:e1:50:fd:de:31:95:78:
         8e:06:b5:6d:2c:1d:25:f1:98:6f:25:09:a4:ce:85:c7:f3:4e:
         78:0e:f3:94:f3:20:aa:84:eb:98:4e:ef:b5:9d:2d:3b:3d:7d:
         b2:76:f5:a5:78:d4:31:ad:04:16:cf:34:49:18:41:d3:d5:09:
         6f:52:4c:7b:4e:48:81:4d:d2:ec:27:09:ae:62:a0:18:00:42:
         a3:0f:09:52:19:30:09:1a:49:44:50:af:85:3f:53:4b:d5:4c:
         95:a7:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----