Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4vdZJFto0Fj4PhFiyYaUqe0BT0A.roa
File:                     4vdZJFto0Fj4PhFiyYaUqe0BT0A.roa (raw, json)
Hash identifier:          iO2vx8orFqhYcjgpQjYseP9Os3UkD1O4aoEEPHLLzxE=
Subject key identifier:   E2:F7:59:24:5B:68:D0:58:F8:3E:11:62:C9:86:94:A9:ED:01:4F:40
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06162E33
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4vdZJFto0Fj4PhFiyYaUqe0BT0A.roa
Signing time:             Wed 20 Apr 2022 23:46:36 +0000
ROA not before:           Wed 20 Apr 2022 23:46:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102116915 (0x6162e33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 20 23:46:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2f759245b68d058f83e1162c98694a9ed014f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:17:a3:e7:7a:ed:d8:3b:6c:96:78:a9:42:
                    3e:ea:67:47:57:dc:d4:15:f3:33:86:44:17:48:f7:
                    54:c9:67:db:da:40:5d:75:4d:80:25:35:02:e7:5b:
                    81:6b:74:aa:b1:50:5e:1f:4a:03:77:56:6c:de:ed:
                    90:b7:eb:dd:54:65:db:c3:9f:62:2e:c5:bf:ea:50:
                    e4:27:04:50:1c:77:a3:42:d7:4b:1f:b0:af:79:41:
                    d8:a8:b4:5f:5f:31:69:6d:15:e7:c5:64:88:7f:64:
                    96:59:f5:e0:78:58:ef:f3:6d:34:d6:85:51:a7:b6:
                    a8:41:a7:2f:f2:e2:62:59:38:bc:96:6c:fb:ca:f7:
                    dd:ef:4d:40:21:20:ff:66:73:d8:f5:8a:93:cf:ab:
                    a9:08:d4:43:10:47:f8:9f:5a:84:66:76:fd:7c:9f:
                    4b:0d:35:8a:f7:fb:62:ea:12:4f:ef:4a:14:22:35:
                    4d:cd:70:5c:38:9b:c2:96:ab:4f:4e:30:e9:f8:f7:
                    44:f1:01:bb:65:84:8f:e5:13:73:21:02:b2:1d:1c:
                    94:b9:06:e4:38:3c:79:45:1d:c0:2c:72:db:b1:b8:
                    e9:d0:56:4b:de:e0:4f:09:43:21:7d:a7:5d:ca:26:
                    da:13:73:07:c3:3f:82:e7:1e:87:90:b8:0e:1b:80:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:59:24:5B:68:D0:58:F8:3E:11:62:C9:86:94:A9:ED:01:4F:40
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/4vdZJFto0Fj4PhFiyYaUqe0BT0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:bb:6d:82:95:b1:dc:5d:6e:cc:c3:3a:30:10:8c:c3:bd:
         c9:1d:31:15:26:83:c2:f7:4c:e3:e0:93:42:3d:68:fa:8c:d7:
         91:9f:1c:05:e3:28:11:b9:0d:e2:4f:75:8c:b2:0e:7b:fe:e1:
         b5:84:8a:66:d4:d5:2c:82:f1:0c:72:4b:6d:a1:e1:ca:f1:ad:
         6f:2d:8b:f1:c3:9d:5a:ba:7c:c9:bc:0c:78:bc:b2:dd:bf:44:
         36:fb:39:dc:43:ab:df:21:3d:c4:60:ae:bf:9b:3f:c1:36:56:
         87:a1:51:8a:36:6e:a7:f3:f5:86:48:02:b8:00:7b:d5:7c:8f:
         aa:be:5c:c0:53:84:2b:8d:92:ab:dd:a2:be:28:ef:16:33:20:
         af:7b:83:b0:24:4c:3b:c1:2b:03:84:69:cf:ca:07:fc:8d:85:
         2f:6b:d0:fe:14:cb:21:e8:9a:b1:3a:2a:fc:35:11:4c:55:71:
         d8:90:00:4b:ed:2d:45:2c:57:ff:6b:33:d0:3d:3a:3b:2e:f8:
         b1:af:01:80:ee:ae:db:b6:b8:72:e9:50:41:12:76:12:10:a5:
         aa:10:e0:e5:ed:8d:37:03:a3:06:ce:b5:4c:e0:6e:51:f8:19:
         60:6c:16:81:03:87:7b:ef:7f:83:97:64:98:d6:b0:2d:77:ff:
         09:f7:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----