Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5tMWBFWV4eD9ae-0AA3-t33xq9I.roa
File:                     5tMWBFWV4eD9ae-0AA3-t33xq9I.roa (raw, json)
Hash identifier:          +LZS0IvsNlFRymuTiXR9AVkEKMCbT/M3hDL5XVzSIHk=
Subject key identifier:   E6:D3:16:04:55:95:E1:E0:FD:69:EF:B4:00:0D:FE:B7:7D:F1:AB:D2
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08541A0D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5tMWBFWV4eD9ae-0AA3-t33xq9I.roa
Signing time:             Sat 11 Jun 2022 02:48:02 +0000
ROA not before:           Sat 11 Jun 2022 02:48:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139729421 (0x8541a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 11 02:48:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6d316045595e1e0fd69efb4000dfeb77df1abd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:26:d3:94:fe:e8:58:64:07:36:e6:5c:13:
                    03:b8:e9:e0:26:e8:47:3e:4b:d9:fe:64:4d:48:f2:
                    4c:94:75:9f:17:96:1d:46:4d:c6:bf:43:ac:ee:11:
                    69:2a:95:c7:d5:0b:82:b2:fb:a5:97:56:99:3b:18:
                    54:f3:ba:73:89:48:5c:45:87:7b:42:8c:02:4e:cd:
                    56:03:0e:a5:53:e6:42:93:53:0c:46:11:29:57:d1:
                    c5:f8:6a:a9:ca:5e:b6:35:82:78:65:7e:bd:71:35:
                    78:40:d2:d1:de:0d:e7:9c:cd:eb:68:64:c8:ff:9b:
                    f9:8b:79:5b:8b:2d:7c:7e:32:de:c3:c0:08:f6:e2:
                    09:e2:9c:40:d7:5d:5d:65:ec:60:40:63:ba:36:df:
                    7c:4d:fd:b6:73:e2:55:07:cc:6c:06:23:76:a2:95:
                    c8:0a:a8:d6:c4:15:3f:c6:ef:ba:e9:01:ad:2a:f0:
                    8c:9a:c7:1b:f4:2d:4b:fe:e8:ff:8f:68:66:bb:db:
                    f2:78:5d:4f:2c:7c:3d:44:a4:c2:2d:ea:b1:4d:d4:
                    aa:f3:5b:d0:a8:10:3a:8b:8c:e4:34:ea:ce:ce:46:
                    4a:12:34:6e:04:5d:8a:9d:71:c7:3d:85:f1:28:d9:
                    db:4e:0a:bc:62:a4:5a:41:ad:86:93:76:f6:47:05:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:16:04:55:95:E1:E0:FD:69:EF:B4:00:0D:FE:B7:7D:F1:AB:D2
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5tMWBFWV4eD9ae-0AA3-t33xq9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f6:18:a3:bb:88:b6:7f:4f:2f:70:d1:8d:9d:35:b2:ff:81:
         d3:c1:26:ea:75:66:31:aa:ce:ff:60:7d:84:76:a8:49:63:93:
         c1:d3:86:1c:26:f2:79:d8:89:8c:cf:96:1b:bb:e1:ca:45:46:
         3e:a2:24:68:86:ea:e7:e4:fa:2e:18:f2:e1:b1:cb:f6:5b:b7:
         c5:ce:b9:33:aa:ef:e1:a5:a7:64:24:ae:f5:01:ce:d6:26:d7:
         81:cd:8a:39:61:3d:5a:c3:00:82:ab:49:3f:af:e7:7a:e0:c8:
         f3:a1:20:2b:49:0b:73:c4:02:81:ea:66:bd:30:69:7f:c1:03:
         57:fb:a5:c8:df:8f:cd:b7:11:2b:b5:c9:9c:8e:4b:b5:ac:5e:
         a9:0d:da:1b:d7:89:f9:9f:ad:24:86:61:ac:2d:33:4d:f9:6f:
         05:13:9c:6e:be:a3:95:91:00:7b:36:df:44:12:01:f2:92:f4:
         1c:29:c4:21:e7:96:d8:23:a3:4a:53:1d:75:d6:5b:04:86:dd:
         46:48:12:1e:c2:20:b8:85:6a:c5:d3:7c:cf:d6:19:39:76:74:
         39:63:2f:44:69:a4:42:e5:d4:ee:c9:3f:28:2a:05:c6:e3:1c:
         7f:57:c0:d4:57:33:16:ba:2e:df:a4:a8:ab:9c:e1:c5:5e:b0:
         29:a0:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----