Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5CdXoestnww7wc_YX63gsYYycbc.roa
File:                     5CdXoestnww7wc_YX63gsYYycbc.roa (raw, json)
Hash identifier:          vctmZNy5dKdVmkJ/+ELbuOB6XX8Hx8hzxRxughqAQIw=
Subject key identifier:   E4:27:57:A1:EB:2D:9F:0C:3B:C1:CF:D8:5F:AD:E0:B1:86:32:71:B7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       091E5CEA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5CdXoestnww7wc_YX63gsYYycbc.roa
Signing time:             Sun 26 Jun 2022 17:55:42 +0000
ROA not before:           Sun 26 Jun 2022 17:55:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152984810 (0x91e5cea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 26 17:55:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e42757a1eb2d9f0c3bc1cfd85fade0b1863271b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:a5:fc:df:0b:5a:3b:5d:d6:e6:02:c3:57:
                    38:c4:fc:e5:16:db:b7:00:4c:61:e2:1f:6a:7b:e8:
                    5d:3c:e8:09:1f:2c:2b:0e:7e:82:04:d1:1c:eb:78:
                    8b:8a:ca:4e:bc:03:bb:a8:87:53:39:c0:c4:1b:f0:
                    73:c3:47:97:f8:72:f0:98:ec:5d:7c:94:42:c4:a8:
                    8b:98:d0:c1:ea:d1:67:e4:24:14:56:42:9e:c1:65:
                    5c:77:a2:57:06:67:b7:ba:5c:8d:c0:6b:4b:4c:1f:
                    a1:9a:9d:b4:0f:04:3c:ba:16:73:7c:29:33:b7:18:
                    a3:55:80:3b:85:7c:77:a9:ac:57:af:64:d5:c2:c6:
                    93:a7:3a:be:ab:96:d1:36:3c:1f:f4:4f:b2:0d:78:
                    4a:69:76:99:26:72:0b:7f:c9:f8:cf:55:03:bd:29:
                    d4:9e:75:90:5c:05:d9:54:b0:66:d5:f3:59:3c:5e:
                    18:ad:66:64:9c:10:d8:53:d4:ea:da:61:4e:36:3e:
                    91:29:c6:a0:06:25:07:62:ad:a5:85:71:56:c3:76:
                    db:fa:e4:7c:03:3f:01:8d:ae:04:a9:a0:f8:8e:4e:
                    e6:b5:8b:81:00:f0:3e:1e:07:3f:3f:bf:34:f7:2e:
                    32:16:1d:56:d2:d2:ea:7a:58:e5:8f:e9:c1:62:25:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:57:A1:EB:2D:9F:0C:3B:C1:CF:D8:5F:AD:E0:B1:86:32:71:B7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5CdXoestnww7wc_YX63gsYYycbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:88:e5:5e:9f:5e:40:7d:26:f9:cb:ec:29:84:b2:68:02:
         4f:80:b9:64:b8:35:9d:61:b4:b1:ec:4c:52:5c:24:a7:80:0f:
         ba:50:ac:87:92:d7:f5:39:27:cf:7a:b0:66:28:a8:cb:50:c1:
         fd:4e:8a:39:6b:16:f6:9e:5f:98:14:85:49:09:00:c8:97:7a:
         8e:36:4c:b3:e4:23:b7:88:0e:b1:fd:46:7f:53:f8:cf:a0:74:
         5a:5e:53:87:d0:7c:03:a2:a1:96:70:ad:b3:a7:dc:68:6c:24:
         72:df:b5:36:e4:84:2d:d9:9b:6b:89:73:22:b8:58:bf:bb:75:
         23:73:83:f6:02:57:56:12:de:4c:b4:1b:39:96:a2:a4:fb:ff:
         04:a5:95:10:82:49:79:48:7b:4b:1b:41:ab:fb:f2:cd:aa:fc:
         84:51:7e:ec:54:25:36:34:8e:75:00:04:96:5c:59:ce:17:23:
         1c:12:83:0b:3f:6a:5e:4b:f0:f3:ba:a9:d2:0d:9e:0b:ee:19:
         9d:f6:3e:c0:2b:31:be:f7:31:1a:2a:9d:04:0e:16:33:1c:90:
         7d:9a:c4:da:5b:db:ce:9b:2b:cd:52:06:a5:fb:f0:2e:1a:02:
         98:94:71:83:83:f6:9b:de:5f:4b:fc:6c:34:78:01:0f:72:f5:
         23:18:dd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----