Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/28G2JSoBAJJMJG5_hMj62S4w0L0.roa
File:                     28G2JSoBAJJMJG5_hMj62S4w0L0.roa (raw, json)
Hash identifier:          Fa5uAmHlDtc3rSLEs11XmC00bAESgU0GfQkcabeA0j0=
Subject key identifier:   DB:C1:B6:25:2A:01:00:92:4C:24:6E:7F:84:C8:FA:D9:2E:30:D0:BD
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06ABD933
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/28G2JSoBAJJMJG5_hMj62S4w0L0.roa
Signing time:             Mon 09 May 2022 17:15:37 +0000
ROA not before:           Mon 09 May 2022 17:15:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111925555 (0x6abd933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  9 17:15:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dbc1b6252a0100924c246e7f84c8fad92e30d0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:49:26:91:fe:d0:56:c3:62:5a:ec:00:0a:
                    a2:11:b7:60:8d:24:31:4f:e9:9e:c5:ae:7b:3e:d3:
                    e1:1f:79:cb:49:c3:36:74:c9:f0:8a:68:7c:9e:4c:
                    a4:2e:a7:d1:a0:6e:0f:ad:da:87:3c:2d:37:d4:17:
                    f2:80:7d:27:02:b8:3b:e5:96:e7:55:39:42:91:25:
                    f5:7d:b2:f2:82:12:18:42:93:91:40:e1:ec:59:44:
                    b8:f3:40:63:97:4c:37:79:40:53:4a:c6:2e:47:cf:
                    52:67:11:e8:64:6a:68:89:d8:17:f9:98:27:bb:50:
                    f4:db:d2:9e:fe:30:63:bf:80:b3:78:2b:3a:77:ca:
                    f4:c0:a9:97:92:e9:19:4a:a7:95:66:e4:b0:53:36:
                    06:3a:44:ad:91:d4:51:3d:4e:6e:e8:6e:f4:99:fd:
                    f6:c5:69:c5:44:6b:ed:5f:da:64:64:14:2c:fd:c3:
                    4a:ce:7e:d2:df:1f:e7:d7:25:ac:fb:8b:0f:6c:23:
                    5c:5d:32:bb:9a:73:74:8f:fc:51:ae:ec:ea:44:07:
                    01:14:95:b6:f3:14:1d:03:08:ae:2f:a0:6c:53:6e:
                    10:0e:ec:da:df:e7:2d:6c:c2:df:73:2f:c5:47:9d:
                    73:ec:96:74:15:f7:49:c3:2a:1f:8f:98:e0:4b:32:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:B6:25:2A:01:00:92:4C:24:6E:7F:84:C8:FA:D9:2E:30:D0:BD
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/28G2JSoBAJJMJG5_hMj62S4w0L0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:42:b7:e2:8a:d0:a5:66:9b:7b:d3:b9:d4:25:f0:77:9d:
         0b:21:85:6d:81:3a:3c:fd:e8:3e:95:10:e0:03:da:3f:5c:b8:
         4a:6e:f8:d7:ce:80:a4:da:75:0f:b3:5a:ab:0f:5d:c9:e3:83:
         9d:93:59:3c:db:ad:f4:f1:e8:0d:b7:9c:91:cd:64:e2:f1:03:
         25:d0:92:6d:79:8c:fa:bf:4e:5b:48:f5:2c:d5:85:2a:af:70:
         09:1b:bc:6e:bb:fa:21:1f:7f:6d:a4:2d:4b:fa:43:52:b8:ff:
         ad:69:61:a1:91:52:d9:6b:6c:3c:20:56:37:74:3b:5e:18:83:
         69:26:8a:5c:cf:d3:b0:02:91:af:a0:b9:ed:73:0a:70:43:9a:
         e7:44:d0:d1:97:35:51:9a:ac:02:b1:e1:e3:a3:83:0b:6d:8f:
         cf:b8:a3:cf:4c:c8:88:20:71:4e:8c:14:3a:d3:8d:57:ce:7a:
         d2:1c:4a:ae:d4:bd:40:78:18:c5:c0:ea:dc:16:ef:1b:b3:2b:
         2f:b1:22:cc:40:a7:bb:fe:f0:ef:7d:1f:bb:86:56:7e:22:34:
         15:f6:55:e1:77:61:4b:70:a0:b4:7a:b7:3a:1e:a5:66:3a:d2:
         45:71:c7:c8:21:19:22:84:cd:97:57:66:e7:ea:48:d4:da:ee:
         02:1c:68:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBqvZMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUw
OTE3MTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGJjMWI2MjUyYTAx
MDA5MjRjMjQ2ZTdmODRjOGZhZDkyZTMwZDBiZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMe8SSaR/tBWw2Ja7AAKohG3YI0kMU/pnsWuez7T4R95y0nD
NnTJ8IpofJ5MpC6n0aBuD63ahzwtN9QX8oB9JwK4O+WW51U5QpEl9X2y8oISGEKT
kUDh7FlEuPNAY5dMN3lAU0rGLkfPUmcR6GRqaInYF/mYJ7tQ9NvSnv4wY7+As3gr
OnfK9MCpl5LpGUqnlWbksFM2BjpErZHUUT1Obuhu9Jn99sVpxURr7V/aZGQULP3D
Ss5+0t8f59clrPuLD2wjXF0yu5pzdI/8Ua7s6kQHARSVtvMUHQMIri+gbFNuEA7s
2t/nLWzC33MvxUedc+yWdBX3ScMqH4+Y4EsyFrkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTbwbYlKgEAkkwkbn+EyPrZLjDQvTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzI4RzJKU29CQUpKTUpHNV9oTWo2MlM0dzBMMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB7fkK34orQpWabe9O51CXwd50LIYVtgTo8/eg+
lRDgA9o/XLhKbvjXzoCk2nUPs1qrD13J44Odk1k826308egNt5yRzWTi8QMl0JJt
eYz6v05bSPUs1YUqr3AJG7xuu/ohH39tpC1L+kNSuP+taWGhkVLZa2w8IFY3dDte
GINpJopcz9OwApGvoLntcwpwQ5rnRNDRlzVRmqwCseHjo4MLbY/PuKPPTMiIIHFO
jBQ6041XznrSHEqu1L1AeBjFwOrcFu8bsysvsSLMQKe7/vDvfR+7hlZ+IjQV9lXh
d2FLcKC0erc6HqVmOtJFccfIIRkihM2XV2bn6kjU2u4CHGjv
-----END CERTIFICATE-----