Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1qqP_0vfG7exygb958ecEP5fiJE.roa
File:                     1qqP_0vfG7exygb958ecEP5fiJE.roa (raw, json)
Hash identifier:          FjNcSklukk4kVJbQOhtCUPXDfB52R/dyEesJaGdRIN4=
Subject key identifier:   D6:AA:8F:FF:4B:DF:1B:B7:B1:CA:06:FD:E7:C7:9C:10:FE:5F:88:91
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04C12675
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1qqP_0vfG7exygb958ecEP5fiJE.roa
Signing time:             Sun 06 Mar 2022 00:08:38 +0000
ROA not before:           Sun 06 Mar 2022 00:08:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79767157 (0x4c12675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar  6 00:08:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6aa8fff4bdf1bb7b1ca06fde7c79c10fe5f8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:b8:cf:b3:35:d2:a2:e4:d5:e2:2f:6f:85:
                    c7:70:d1:b4:35:9c:a8:d1:8b:99:1f:13:c7:9f:18:
                    77:0c:46:42:f6:38:fc:cc:ae:7f:d5:11:7e:6a:f3:
                    05:99:89:3b:b9:26:d4:a2:c2:81:f8:81:2f:bc:d1:
                    b4:b5:3f:e8:c3:d4:e5:0c:7e:2f:9c:9e:f6:73:70:
                    6b:cf:9c:a1:96:c4:7e:8e:25:ee:6e:ad:5d:ad:4c:
                    40:09:a0:e6:97:3e:43:a0:3c:69:a2:28:25:f4:71:
                    b9:93:e9:1d:76:16:34:ad:85:4a:14:04:c8:7f:24:
                    13:80:0f:e5:09:fe:1e:d4:bf:d8:32:65:68:8a:e3:
                    e6:86:20:fc:af:48:e4:05:e2:b2:b6:75:5c:f0:9c:
                    6e:ea:f9:9e:73:b5:56:34:91:a8:8d:55:32:99:1e:
                    2e:f1:e3:14:03:40:78:f3:10:b5:c6:31:0f:09:7f:
                    ba:25:2f:43:50:e9:cd:4a:a8:9e:6f:d7:3b:b4:9b:
                    bd:77:27:d7:8b:30:6c:76:20:ba:13:5c:a5:f4:c8:
                    eb:8a:fd:6f:54:d8:e5:3d:c1:3c:fd:fb:5e:28:e0:
                    2a:ab:7a:14:81:c6:06:85:bf:04:15:ff:34:56:5b:
                    e9:ae:16:68:83:70:35:75:25:e1:26:4a:3c:8c:53:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:8F:FF:4B:DF:1B:B7:B1:CA:06:FD:E7:C7:9C:10:FE:5F:88:91
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1qqP_0vfG7exygb958ecEP5fiJE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:dc:b5:fc:db:ef:5f:de:ba:14:a8:f1:11:85:37:37:4b:
         02:b1:75:a3:ee:51:cc:3f:ce:06:62:cb:6d:12:1f:34:cc:bb:
         4d:23:d0:ff:cd:b1:cb:87:19:4a:ec:7f:41:9d:f6:b7:e9:04:
         88:cb:0f:67:ad:67:4a:b0:b6:ce:c7:a1:9a:10:f4:d4:c3:04:
         76:10:3b:e2:a4:52:c6:fb:d0:c3:c8:15:fc:a2:1e:b5:d2:31:
         23:82:ee:24:c3:9e:0c:63:12:05:fb:e1:68:c8:25:3d:8e:f9:
         7f:e0:00:38:53:cb:ac:23:98:67:89:7c:f2:6d:c3:74:21:1c:
         5a:de:52:c6:61:00:d1:54:e4:73:72:6a:55:6e:e0:cf:2d:33:
         06:e7:cd:98:79:62:59:ee:74:e5:4d:89:3c:5a:dc:a0:55:f4:
         2a:56:60:45:43:39:fa:4d:1b:2a:3e:b1:23:6a:61:e2:16:50:
         73:5b:6f:dd:51:57:17:a6:88:b9:32:af:0b:61:8b:60:b1:7c:
         1f:ac:b9:8e:e3:c3:59:0c:49:0e:be:1d:53:ee:d1:e3:c6:ef:
         d2:bb:59:1d:94:1c:61:0f:77:d5:11:a5:3c:46:5c:52:11:95:
         30:c4:ca:5c:2f:ab:c7:6c:4f:07:4b:d7:9b:6f:13:4d:62:6f:
         97:58:c7:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBMEmdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMw
NjAwMDgzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZhYThmZmY0YmRm
MWJiN2IxY2EwNmZkZTdjNzljMTBmZTVmODg5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANFEuM+zNdKi5NXiL2+Fx3DRtDWcqNGLmR8Tx58YdwxGQvY4
/Myuf9URfmrzBZmJO7km1KLCgfiBL7zRtLU/6MPU5Qx+L5ye9nNwa8+coZbEfo4l
7m6tXa1MQAmg5pc+Q6A8aaIoJfRxuZPpHXYWNK2FShQEyH8kE4AP5Qn+HtS/2DJl
aIrj5oYg/K9I5AXisrZ1XPCcbur5nnO1VjSRqI1VMpkeLvHjFANAePMQtcYxDwl/
uiUvQ1DpzUqonm/XO7SbvXcn14swbHYguhNcpfTI64r9b1TY5T3BPP37XijgKqt6
FIHGBoW/BBX/NFZb6a4WaINwNXUl4SZKPIxTQ9MCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTWqo//S98bt7HKBv3nx5wQ/l+IkTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzFxcVBfMHZmRzdleHlnYjk1OGVjRVA1ZmlKRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBey9y1/NvvX966FKjxEYU3N0sCsXWj7lHMP84G
YsttEh80zLtNI9D/zbHLhxlK7H9Bnfa36QSIyw9nrWdKsLbOx6GaEPTUwwR2EDvi
pFLG+9DDyBX8oh610jEjgu4kw54MYxIF++FoyCU9jvl/4AA4U8usI5hniXzybcN0
IRxa3lLGYQDRVORzcmpVbuDPLTMG582YeWJZ7nTlTYk8WtygVfQqVmBFQzn6TRsq
PrEjamHiFlBzW2/dUVcXpoi5Mq8LYYtgsXwfrLmO48NZDEkOvh1T7tHjxu/Su1kd
lBxhD3fVEaU8RlxSEZUwxMpcL6vHbE8HS9ebbxNNYm+XWMeR
-----END CERTIFICATE-----