Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2KJtg8WR84hd8tGckvVrFpDBejE.roa
File:                     2KJtg8WR84hd8tGckvVrFpDBejE.roa (raw, json)
Hash identifier:          +ZbGhIW0JkNsdaMZ83toWm1wE5oR4cJMHsZ0QhQhb3c=
Subject key identifier:   D8:A2:6D:83:C5:91:F3:88:5D:F2:D1:9C:92:F5:6B:16:90:C1:7A:31
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       075CA5AD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2KJtg8WR84hd8tGckvVrFpDBejE.roa
Signing time:             Mon 23 May 2022 01:22:29 +0000
ROA not before:           Mon 23 May 2022 01:22:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123512237 (0x75ca5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 23 01:22:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d8a26d83c591f3885df2d19c92f56b1690c17a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:71:49:6c:6d:f6:93:61:b6:88:38:f7:04:
                    2f:de:4a:6d:4c:84:a7:ca:47:42:95:5b:55:74:07:
                    14:5e:48:f8:26:39:1f:48:5b:e3:bc:c2:ac:5f:a3:
                    9d:f4:44:0d:36:b9:f0:ff:fb:2b:99:a9:d9:f8:8c:
                    18:35:fd:fa:f8:0f:82:a1:91:5f:68:8c:5b:88:37:
                    09:0e:c5:0e:55:f3:36:2e:2b:a9:1f:44:48:03:09:
                    a2:46:85:b7:5f:96:c1:75:fe:86:83:e4:6f:b6:eb:
                    59:f1:35:fa:3f:0b:38:9a:3f:78:77:06:41:8d:92:
                    12:b5:a1:f7:f7:98:22:86:f9:5f:31:b5:aa:2d:4b:
                    d5:b7:a5:ba:a1:f7:62:2a:28:3b:80:d7:db:49:bf:
                    ad:e3:a2:5a:8b:cd:83:51:42:e9:d7:74:bd:7e:34:
                    11:76:6d:6e:d8:30:41:0f:93:ae:06:f5:ea:15:e7:
                    15:23:05:26:7a:4b:6a:63:9f:e7:ca:93:e6:8f:f6:
                    20:f1:d2:09:d0:ea:b3:1c:06:f3:87:6e:5d:47:2c:
                    8c:bc:68:c2:95:a8:22:89:53:35:2d:2b:c2:fc:f3:
                    a3:34:84:07:97:3a:c9:e9:d3:32:8f:0a:d5:92:7d:
                    36:01:50:d2:85:db:d8:a6:9e:f2:7c:cd:86:91:56:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A2:6D:83:C5:91:F3:88:5D:F2:D1:9C:92:F5:6B:16:90:C1:7A:31
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2KJtg8WR84hd8tGckvVrFpDBejE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         70:06:dc:83:18:b5:0e:e0:d2:51:14:00:20:d6:4e:81:29:50:
         86:5e:15:07:8c:a6:d7:e2:b9:71:0f:d8:36:c8:ba:a6:f6:b0:
         96:58:cd:47:63:51:0e:9e:dc:a4:7c:03:1e:24:3b:a9:cc:75:
         fc:0b:11:05:52:05:82:bb:36:86:95:7e:26:cb:b8:38:02:c2:
         b0:37:9b:d5:54:a4:c3:3f:5e:c2:4c:9d:0d:5a:a1:24:eb:c2:
         61:2f:d1:53:28:69:8a:8a:21:4a:21:7b:b5:c6:f7:f7:a1:91:
         c9:ea:3f:55:02:27:15:e0:69:45:9a:9c:68:ac:ca:b6:7f:85:
         b9:3d:6f:b4:f9:8c:e7:6f:43:57:27:52:53:4a:0e:68:01:4f:
         40:f6:9d:29:9d:cd:4d:b2:50:29:3b:fd:25:33:0b:91:73:d8:
         78:ee:d9:72:68:3e:7a:2d:03:1a:89:4f:57:9f:fd:5c:db:fb:
         1c:04:d6:16:bd:dd:4d:45:77:96:e6:78:2a:ad:72:e9:33:e4:
         c9:e0:b4:6c:54:f3:65:5d:92:5b:53:68:83:25:47:c9:ce:e5:
         73:f4:0c:77:86:cd:48:4e:0a:62:cc:a5:76:52:88:08:80:5b:
         3e:a1:eb:7f:51:aa:c7:31:6d:2d:14:a2:a3:6c:ab:06:05:15:
         76:4f:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----