Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3H_0qCp7dgnNJwDhn3VYZmgc59s.roa
File:                     3H_0qCp7dgnNJwDhn3VYZmgc59s.roa (raw, json)
Hash identifier:          tya9wge6PKyBcV+D5q33L/eVp+rsw7bIVgm5MPqWPLQ=
Subject key identifier:   DC:7F:F4:A8:2A:7B:76:09:CD:27:00:E1:9F:75:58:66:68:1C:E7:DB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05782C08
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3H_0qCp7dgnNJwDhn3VYZmgc59s.roa
Signing time:             Wed 30 Mar 2022 16:50:11 +0000
ROA not before:           Wed 30 Mar 2022 16:50:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91761672 (0x5782c08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 30 16:50:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc7ff4a82a7b7609cd2700e19f755866681ce7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:85:13:f9:3e:32:21:60:b9:4e:58:1f:b4:
                    c8:11:20:da:f0:a7:26:99:f3:bc:e5:d9:ff:d6:ce:
                    40:2d:43:fd:fd:e6:1a:23:5f:c7:0a:f7:08:65:14:
                    4e:41:ff:6e:20:bc:de:15:55:13:fa:41:d1:8a:6e:
                    96:ec:57:53:e3:0e:e3:69:6d:18:4c:d1:4e:60:0b:
                    31:64:7e:da:e5:dd:51:c1:df:b5:d7:61:f5:fd:ce:
                    f8:61:18:89:db:ae:34:0a:95:d7:ee:ab:18:31:27:
                    21:0e:6d:bd:99:c9:ec:ab:69:77:42:d0:bc:cf:46:
                    8c:c7:29:d2:f1:dc:0b:f1:60:cb:cd:b3:90:af:e8:
                    f0:10:8a:8f:1a:90:56:04:42:b4:7f:bd:a0:2d:45:
                    7d:5a:cf:ae:b5:ea:74:ce:c7:b9:2f:22:43:50:85:
                    ff:7a:c9:4e:34:cc:b0:0e:3c:96:09:df:67:f9:16:
                    b5:ce:35:f3:c9:d5:c8:9d:31:12:06:82:20:4b:35:
                    2c:a7:4d:47:b8:db:56:47:c9:6f:e0:fd:27:30:72:
                    d7:0f:34:98:8b:f4:5e:99:62:ab:66:48:e6:50:f7:
                    00:47:d1:6d:46:67:3f:c8:9e:53:22:44:68:67:71:
                    15:ac:ad:49:dc:3b:fb:03:35:95:87:9f:cf:56:75:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7F:F4:A8:2A:7B:76:09:CD:27:00:E1:9F:75:58:66:68:1C:E7:DB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3H_0qCp7dgnNJwDhn3VYZmgc59s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:44:56:5e:00:ae:81:5e:08:d3:d9:a2:0f:34:12:06:5c:26:
         a4:ab:ee:bd:a6:26:aa:b4:cb:4b:9c:2e:37:4c:1d:ad:18:82:
         33:3e:23:35:ba:72:18:ae:2c:54:25:2c:b0:8f:ea:99:1e:b7:
         1e:ed:c8:e6:7a:42:58:19:4e:ea:1c:b2:a3:84:6e:88:19:ec:
         c0:3e:59:e4:22:df:c3:d0:4a:4c:4c:b0:55:4d:f0:9c:3b:cb:
         13:f6:31:d5:5b:9b:17:f4:0d:c8:be:e0:f9:72:83:e1:d2:11:
         63:1e:e3:ba:9f:8e:c7:79:24:4b:31:25:c7:ce:80:5d:0b:2c:
         e4:57:8b:58:77:3e:b2:c9:37:da:b5:de:9c:d3:3f:00:b8:97:
         bc:5f:e4:b5:b0:60:c3:99:6d:e6:3e:51:fc:e0:b2:87:d8:fb:
         de:0b:12:0b:75:69:f1:f9:a0:a8:c4:5d:ca:9a:89:37:69:20:
         66:58:4b:a1:98:6f:29:4b:0b:29:f2:3a:a4:19:cb:bc:48:87:
         1b:5a:ac:62:88:da:e8:64:72:95:f3:99:7a:22:26:e1:bf:bb:
         1c:38:c9:2c:54:38:1c:e9:3e:05:1e:9d:d1:c1:50:99:71:46:
         b2:85:80:57:f1:8f:c5:89:2b:3a:51:92:4d:d2:26:e3:2d:ae:
         fc:3f:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----