Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fcJO0sR0Z7QT40goRJCBNCZ0qQ.roa
File:                     0fcJO0sR0Z7QT40goRJCBNCZ0qQ.roa (raw, json)
Hash identifier:          rMdYXLGcPb4SL+y4tWMrASQQJX0NJ+mk1NTJnaLAhFM=
Subject key identifier:   D1:F7:09:3B:4B:11:D1:9E:D0:4F:8D:20:A1:12:42:04:D0:99:D2:A4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03B5FBEA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fcJO0sR0Z7QT40goRJCBNCZ0qQ.roa
Signing time:             Sat 29 Jan 2022 16:31:30 +0000
ROA not before:           Sat 29 Jan 2022 16:31:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62258154 (0x3b5fbea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jan 29 16:31:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1f7093b4b11d19ed04f8d20a1124204d099d2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:f3:f9:e1:40:0d:89:37:23:d8:bd:25:5e:
                    82:ef:ee:72:2a:eb:e3:46:8e:ef:00:4b:cc:d4:ef:
                    92:83:72:4f:c4:7d:b4:2f:f8:d1:70:39:5c:3f:d1:
                    6d:59:4c:c3:de:cc:44:87:14:bc:6d:07:c9:e5:36:
                    e9:96:50:46:7d:dc:94:d9:cf:3e:92:56:06:3c:10:
                    c5:90:bf:00:ea:46:3f:42:27:ca:0f:19:43:c9:32:
                    76:5d:29:d7:a2:17:44:99:98:c2:ff:15:ce:9c:03:
                    ea:44:ba:be:84:13:e0:d0:d8:df:f1:68:d7:0d:a2:
                    b4:60:7c:09:7f:06:2c:b9:d5:db:60:3e:d4:a8:68:
                    93:14:04:97:fe:fc:5e:9b:c2:f3:ba:8e:9a:81:97:
                    81:4d:07:3a:7a:7b:c9:41:3c:6f:43:35:6b:63:0b:
                    c3:bb:50:f9:ca:d9:ca:dd:27:92:1f:c3:32:7a:d3:
                    d1:87:4c:fb:97:ac:e4:56:62:1f:75:ba:a6:7b:63:
                    d7:ca:b9:47:7c:4b:e8:b3:e0:19:45:0a:24:bc:52:
                    0c:47:ec:0f:2c:69:c0:a5:14:75:e1:98:94:f3:0c:
                    8e:77:f3:11:52:bc:86:3b:1b:43:fb:cf:30:6d:93:
                    01:6f:78:5b:71:6f:c9:64:1e:26:5a:81:50:39:3b:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F7:09:3B:4B:11:D1:9E:D0:4F:8D:20:A1:12:42:04:D0:99:D2:A4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fcJO0sR0Z7QT40goRJCBNCZ0qQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:61:17:ef:76:51:c3:31:d1:4a:95:73:a1:3a:96:c5:83:
         6e:77:c5:15:d3:a6:be:ff:11:df:e1:ed:ab:05:c4:e7:16:fa:
         d5:ba:2a:b2:b9:b9:fc:70:9e:04:6d:f9:df:ba:a3:6e:93:d9:
         af:40:28:7e:6a:fe:e5:70:e2:63:f3:4c:e8:b5:99:09:5a:8b:
         95:70:72:8d:1d:dd:3f:9b:cf:89:09:ea:df:96:70:75:4f:7b:
         70:99:fc:9c:f9:08:0f:c5:01:24:43:3c:02:fc:e8:25:09:3c:
         d7:24:01:a3:ec:26:bc:d1:d3:ce:df:1d:c2:11:9d:08:f5:15:
         f9:0d:64:64:7b:bc:ca:48:0b:ec:5e:e2:e1:d7:70:90:03:88:
         a1:0e:1e:c0:34:f3:20:14:36:c0:9e:b0:f0:f3:06:e7:5e:2f:
         6a:ff:25:d1:56:fa:2b:fc:1c:1b:4d:44:92:8f:de:3b:aa:07:
         25:f4:8c:c7:87:04:90:a9:da:31:69:d4:6c:d5:44:43:10:c4:
         a8:bf:9c:5b:e8:fc:b2:f6:8b:17:29:ed:79:a1:99:2b:28:fe:
         1c:93:23:8f:22:e3:f7:d8:6d:63:19:5f:88:a9:34:a7:e2:b5:
         5c:ad:47:ee:fd:b6:dc:a1:0a:90:36:1e:51:68:5a:9b:68:22:
         34:5e:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----