Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa
File:                     1-HXGgehqCH_-sy2rLicfLEkxISk.roa (raw, json)
Hash identifier:          rtQxeCd3CEsFiYDc9HG2lMCdruFIzdKhL56IcAA4KE8=
Subject key identifier:   F8:75:C6:81:E8:6A:08:7F:FE:B3:2D:AB:2E:27:1F:2C:49:31:21:29
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       067EDA7E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa
Signing time:             Thu 05 May 2022 12:59:46 +0000
ROA not before:           Thu 05 May 2022 12:59:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108976766 (0x67eda7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  5 12:59:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f875c681e86a087ffeb32dab2e271f2c49312129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fd:ec:3a:a9:2e:54:2b:85:f1:6b:c7:fa:79:
                    d9:90:5e:da:e7:fe:73:de:e8:c2:f9:94:bf:29:8c:
                    a8:28:7a:e6:27:75:96:f4:e0:98:78:57:b7:ab:0b:
                    6d:44:11:6d:f3:69:b4:c5:c7:53:69:c0:a0:45:ca:
                    02:b7:ac:ea:48:89:7a:20:8d:c0:33:6a:58:82:05:
                    d5:ef:e1:90:c8:7f:92:97:80:ba:39:a5:59:77:7d:
                    6a:6d:9e:7d:16:be:b4:79:79:6e:9d:c3:e6:81:1d:
                    96:c7:01:56:a2:51:0f:3e:d2:d0:2d:b7:90:cc:18:
                    88:41:8a:00:2b:6d:c9:0e:21:0b:84:e8:f8:18:63:
                    9b:ab:7f:b0:64:67:33:17:8a:fa:85:a1:83:a5:0f:
                    41:53:1a:f6:81:f9:04:3d:73:39:6c:a2:b3:bf:5c:
                    49:69:a6:c3:0c:3b:e6:7f:9d:b1:51:8d:db:5e:98:
                    a7:97:8a:30:0d:61:df:5c:34:98:ae:d7:e3:fa:cc:
                    7d:b8:0b:02:75:2d:39:85:1b:c6:f5:da:6d:82:04:
                    47:9e:07:59:39:3e:4c:3d:cd:f3:33:af:0d:d7:3d:
                    5a:aa:be:f3:fe:0b:52:e5:10:a5:5a:be:b7:10:94:
                    93:6c:d0:9d:ee:48:6f:c6:39:88:4d:da:c1:d4:a3:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:75:C6:81:E8:6A:08:7F:FE:B3:2D:AB:2E:27:1F:2C:49:31:21:29
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:70:a0:7f:f5:e7:f7:f0:69:2c:86:3c:40:d2:bd:90:7e:
         aa:13:d3:e5:78:0c:84:9d:e5:35:de:38:68:1b:71:a6:54:87:
         1f:05:d4:60:94:79:9c:ee:76:00:69:59:6b:d3:b5:3c:fe:e6:
         8e:fd:43:75:32:b1:0a:97:89:e2:2b:fa:c7:b3:37:89:dc:64:
         dc:88:66:a9:00:46:99:2f:c2:6f:3f:27:c4:68:eb:24:17:b7:
         da:62:88:b9:2e:74:1f:a2:18:06:39:1d:9e:ca:a0:62:24:91:
         36:3e:d1:41:50:aa:83:76:df:b9:a0:bb:f2:cb:d2:5f:a1:fc:
         5b:eb:b7:61:13:c8:89:e0:29:13:9f:96:a6:c2:40:14:d7:fe:
         5b:3c:6b:8a:8f:82:64:9e:2d:bd:a9:a4:c6:8e:4a:3a:5b:1a:
         a3:eb:3b:62:8c:9a:c2:90:36:e8:20:78:26:42:9b:4b:89:fb:
         ae:2c:ef:76:f4:8a:a7:4f:de:fc:ce:07:ea:ad:56:23:0d:1c:
         74:a3:0f:99:71:91:dd:34:63:c0:5e:69:53:1f:6a:70:90:6b:
         b0:7a:51:2f:a8:13:0c:a2:93:b4:b1:32:1e:6f:f0:8a:6d:20:
         da:b1:93:94:16:15:8a:e0:87:3d:70:d2:15:0e:af:9d:1a:8e:
         7d:c6:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----