Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa
File:                     5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa (raw, json)
Hash identifier:          79yPoMuzbEoBpX/6bts48TGE+tA4bHJsg+H898egxx8=
Subject key identifier:   E6:C5:FA:49:D5:61:22:EF:BE:16:FF:2A:F1:E1:19:64:68:6C:E8:75
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03F1D67B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa
Signing time:             Mon 07 Feb 2022 00:55:31 +0000
ROA not before:           Mon 07 Feb 2022 00:55:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66180731 (0x3f1d67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  7 00:55:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6c5fa49d56122efbe16ff2af1e11964686ce875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:f1:88:b5:e8:c2:03:1d:43:2d:28:91:c8:
                    08:f4:cc:57:76:0d:50:3c:7d:91:5e:34:1f:08:c6:
                    c4:e5:4a:55:7b:a8:ef:8e:51:da:60:86:c5:09:94:
                    4f:61:05:fc:08:cd:14:cf:b7:13:9b:4a:33:d6:8e:
                    c4:72:aa:87:b3:b3:65:e4:53:ea:51:33:86:ec:71:
                    5a:43:61:8f:11:90:38:04:8c:ad:cc:21:f9:a4:89:
                    9d:3b:32:99:b8:4f:97:9c:ed:2e:f0:e0:05:06:3c:
                    d7:27:bd:a3:64:0f:a5:30:3a:46:80:2f:68:4a:b8:
                    39:b2:0b:50:bb:9f:be:91:25:c9:c9:4c:51:8f:15:
                    69:a7:d3:f8:ff:59:a3:46:44:c9:c9:42:a3:8e:9a:
                    65:3f:4b:fb:ec:6a:bf:a8:09:3b:dc:b3:46:b6:be:
                    d5:43:be:4c:5c:63:e1:b3:b9:9c:c0:69:75:ff:cd:
                    22:db:ff:e8:3a:dc:75:7e:cc:80:e7:76:c4:91:c4:
                    25:ef:70:5d:ce:33:40:a5:46:4d:36:07:e7:eb:28:
                    53:87:89:ae:9b:36:bc:e1:b3:ef:31:8c:94:07:d4:
                    55:72:b6:1f:39:0b:5a:48:09:b2:4d:85:7a:19:3e:
                    cf:0f:b5:83:7c:90:ce:fb:f6:80:87:4b:41:33:76:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C5:FA:49:D5:61:22:EF:BE:16:FF:2A:F1:E1:19:64:68:6C:E8:75
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5sX6SdVhIu--Fv8q8eEZZGhs6HU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:97:d9:34:35:b8:07:3f:c8:e1:1f:14:d3:a6:ba:3a:5d:b5:
         8c:78:aa:ca:bf:b9:1a:ed:c6:1d:ec:b8:29:cb:00:90:68:42:
         89:46:9f:f7:9b:73:dd:e6:ee:26:86:17:71:f9:e4:4c:7d:fd:
         62:bc:ad:64:80:d5:dd:cd:1b:04:95:91:c1:cb:cd:37:d2:93:
         16:16:f8:62:d5:78:8f:bf:bb:d4:bd:ec:7f:81:5e:91:18:8c:
         24:ad:21:81:d1:e6:2e:e4:9c:08:3a:b0:0d:a3:e4:d5:49:0c:
         d9:9e:d3:95:d4:ae:3e:e1:64:ce:94:ef:97:b1:e5:d3:cd:88:
         2d:23:8a:3e:6e:c9:cd:0f:db:ff:50:16:84:f1:ab:2a:d3:1b:
         34:ae:6f:82:d8:8b:3d:64:f1:f5:0c:3d:ed:28:64:5a:12:dd:
         6d:0e:18:34:8f:57:25:c0:83:28:ee:d3:ed:08:95:d7:b9:b8:
         2a:9a:1d:98:0c:21:26:fb:12:35:c7:11:71:13:9d:17:fb:75:
         82:7b:96:b2:b4:19:7f:2b:62:d8:47:46:e7:6d:a0:8c:33:6e:
         77:fd:5d:3f:57:e1:fe:60:87:7f:7e:df:55:6c:63:ee:0a:62:
         c4:28:eb:6f:ff:69:dc:7a:1c:77:a0:ca:42:ca:12:37:2e:9c:
         88:2a:84:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----