Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1z0rdMudbiv1EUYpSqR680S7IAo.roa
File:                     1z0rdMudbiv1EUYpSqR680S7IAo.roa (raw, json)
Hash identifier:          QBsPWTNcYKfaqL+czJ/VHzIfzP32z1OW6FOWgJmpItE=
Subject key identifier:   D7:3D:2B:74:CB:9D:6E:2B:F5:11:46:29:4A:A4:7A:F3:44:BB:20:0A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06CDA69E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1z0rdMudbiv1EUYpSqR680S7IAo.roa
Signing time:             Thu 12 May 2022 01:47:02 +0000
ROA not before:           Thu 12 May 2022 01:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114140830 (0x6cda69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 12 01:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d73d2b74cb9d6e2bf51146294aa47af344bb200a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:1f:4e:bb:90:d4:42:7b:32:41:d0:28:a1:
                    74:71:fc:6f:55:32:01:8d:ca:97:6c:77:81:64:95:
                    d3:6b:6f:c6:d3:08:96:08:d5:83:8b:6d:6c:32:69:
                    08:9d:5d:a7:30:b1:ee:e4:e6:82:57:69:79:25:dc:
                    bb:1f:92:f3:3e:fe:37:cd:30:63:0f:43:ea:00:bc:
                    89:bc:dd:82:9d:df:09:79:eb:84:38:da:ae:21:15:
                    cd:5a:69:ed:3c:92:07:aa:40:28:fb:88:fd:ba:27:
                    39:a3:56:36:3b:00:ff:23:38:17:8b:26:da:0e:89:
                    88:9b:3e:94:10:5f:b6:70:f6:86:b7:06:3a:0c:b0:
                    80:25:14:16:d7:cf:3c:e5:e6:ae:ef:ad:83:43:83:
                    86:a6:9d:b1:7f:95:46:a1:bf:00:6b:cd:db:71:bf:
                    06:28:1d:09:ec:ae:62:b1:69:cb:0e:bc:9d:70:8a:
                    b3:8e:51:ef:41:92:1e:24:54:dc:9d:81:c2:44:b1:
                    ca:b0:d4:32:2a:e3:93:dc:dc:b9:16:90:3f:da:15:
                    db:1c:de:fd:d0:d3:e6:59:2d:98:36:64:bf:fc:2a:
                    a9:e0:fd:e7:f1:23:46:ca:c0:a7:ff:2c:f0:25:bc:
                    96:a9:ae:1d:c1:9c:30:3b:3e:e8:d3:03:97:ad:4f:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:2B:74:CB:9D:6E:2B:F5:11:46:29:4A:A4:7A:F3:44:BB:20:0A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1z0rdMudbiv1EUYpSqR680S7IAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:79:9c:ab:b1:40:63:06:e8:9c:7a:48:70:4e:7f:08:c0:
         96:ee:41:a5:02:55:76:9a:71:39:1e:41:3a:5f:84:f3:3a:16:
         22:f6:47:69:4d:65:a7:e1:2c:2a:6b:e5:34:ea:22:81:c7:37:
         3d:7c:e6:97:fd:5d:8f:9f:16:2e:53:4b:33:7e:1f:76:02:a8:
         60:37:96:a6:a6:af:53:6f:e6:20:fb:5d:85:b2:25:f6:a5:76:
         c4:b5:cb:00:4a:4f:49:0a:72:55:1f:54:95:e6:50:32:fc:ff:
         ad:97:0d:7c:6b:17:b0:d2:46:aa:4c:02:a2:dd:80:ff:2d:f2:
         7d:9e:f9:94:3c:cf:bf:a6:e9:9a:64:71:b0:40:62:30:93:2a:
         63:ae:c5:bd:f0:73:ea:5a:2a:56:a4:f8:78:cc:41:8a:8a:a5:
         82:8d:4d:0a:ba:80:cd:53:6b:21:f6:d0:66:27:3e:b4:f7:39:
         be:d7:2c:d3:18:b1:44:de:01:60:c0:52:c6:ac:f9:81:e7:dd:
         e2:31:09:5a:5f:e6:98:23:18:43:f9:1a:e6:6b:ed:29:2e:81:
         9e:fe:33:35:0b:4d:d1:d4:02:44:c0:30:aa:91:e0:ae:c4:ee:
         18:fa:47:4a:7c:ea:3e:f8:a3:16:ed:97:21:a4:97:e1:63:af:
         5b:07:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----