Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0xdy5BBhOtBcEj7qqZtXj-QszEQ.roa
File:                     0xdy5BBhOtBcEj7qqZtXj-QszEQ.roa (raw, json)
Hash identifier:          jqWExpwXh8v3br2njaeezE0G4eh5H9s4r+LO9GShf3w=
Subject key identifier:   D3:17:72:E4:10:61:3A:D0:5C:12:3E:EA:A9:9B:57:8F:E4:2C:CC:44
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08928AB6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0xdy5BBhOtBcEj7qqZtXj-QszEQ.roa
Signing time:             Wed 15 Jun 2022 12:26:44 +0000
ROA not before:           Wed 15 Jun 2022 12:26:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143821494 (0x8928ab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 15 12:26:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d31772e410613ad05c123eeaa99b578fe42ccc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:79:83:e6:b2:fc:4e:f0:d4:cf:ee:0d:69:
                    35:74:02:15:73:7b:e0:12:99:03:83:fd:ed:78:6c:
                    1d:fc:17:28:87:97:b2:ee:21:43:fe:71:85:75:9c:
                    bc:9a:61:0a:89:77:bd:84:58:54:a3:51:95:9f:52:
                    28:22:7d:cd:6d:04:61:9f:8c:4e:56:8b:a0:62:16:
                    2d:21:37:f9:a8:0c:ff:4b:03:66:f6:98:f3:77:92:
                    8d:f7:3e:6d:6c:79:d3:9f:1c:40:88:0d:0d:d0:a7:
                    43:c8:03:d5:de:e5:96:3f:cb:d0:dc:0b:9d:df:a2:
                    5b:2c:5c:ec:01:d3:2c:6f:07:de:c0:be:7f:52:06:
                    1c:2f:53:6c:d7:43:c0:18:08:19:27:bc:fb:0d:b9:
                    6f:18:91:d1:2e:a0:89:8f:e0:6b:b9:33:f8:6e:a6:
                    9e:df:cc:27:5d:4a:40:40:51:69:4d:6a:a9:6e:34:
                    c8:71:d2:98:b4:08:de:0e:0f:7e:ec:ef:db:e2:83:
                    00:5b:4d:c9:18:9c:25:9e:7e:b3:7d:29:14:14:92:
                    9a:52:5e:65:43:09:e0:64:97:51:25:7f:fc:88:5a:
                    64:57:cc:2f:40:2c:55:d9:4e:3d:49:55:14:7d:57:
                    80:10:71:79:ab:d9:71:4e:8d:45:4e:e8:62:07:31:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:17:72:E4:10:61:3A:D0:5C:12:3E:EA:A9:9B:57:8F:E4:2C:CC:44
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0xdy5BBhOtBcEj7qqZtXj-QszEQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:94:b6:69:35:c4:98:7b:dd:5c:ff:24:ab:f8:4a:18:20:9e:
         65:44:81:2d:14:e8:37:2e:ec:ef:c4:8d:c7:e5:e8:ff:83:0f:
         51:8c:3d:29:b5:78:97:c8:9f:56:24:41:da:73:50:54:a7:aa:
         b4:83:29:c8:69:55:dd:8f:4c:83:a3:ac:6d:d4:7c:30:2e:f7:
         23:81:f3:45:e3:a4:35:f2:fa:c2:5b:52:63:af:47:7a:c9:df:
         2e:39:e9:07:4d:3a:bd:b0:d3:42:d2:d6:e3:ca:c8:a2:2b:9d:
         e7:0b:3b:c1:3e:1f:a2:5a:70:30:94:f3:66:e0:aa:78:fa:46:
         c4:a3:8d:72:ec:b9:11:8b:9a:5e:c1:c5:ea:5f:41:5a:f8:62:
         f6:9c:01:d1:a3:5b:37:30:8c:1b:ca:7e:03:30:46:2f:2c:16:
         82:f0:a5:6a:d3:1b:6c:38:5b:92:a8:d5:5a:be:49:33:33:4b:
         03:8f:0a:f3:0e:5f:3b:7e:bd:03:98:bd:d3:24:8e:ce:22:ce:
         c1:9b:fe:2b:58:37:0c:7f:79:8f:37:39:fd:da:ef:aa:10:59:
         db:a3:8c:b5:15:50:19:38:ff:0a:93:e7:0f:ca:00:f2:2f:56:
         2d:84:be:c8:d1:75:5f:49:71:56:82:ca:12:94:ae:ad:30:62:
         9e:eb:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----