Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6NBJ2NMk0fCOsmPhWEf0CC4a9G8.roa
File:                     6NBJ2NMk0fCOsmPhWEf0CC4a9G8.roa (raw, json)
Hash identifier:          VXIthejxCdqCkLCq3LCn/2ih6hGZn0VD+5K6gITbS7c=
Subject key identifier:   E8:D0:49:D8:D3:24:D1:F0:8E:B2:63:E1:58:47:F4:08:2E:1A:F4:6F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       053CAE6A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6NBJ2NMk0fCOsmPhWEf0CC4a9G8.roa
Signing time:             Mon 21 Mar 2022 15:46:52 +0000
ROA not before:           Mon 21 Mar 2022 15:46:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87862890 (0x53cae6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 21 15:46:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e8d049d8d324d1f08eb263e15847f4082e1af46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:be:21:48:3a:6a:2e:68:90:76:45:d0:98:
                    ed:95:9a:78:1d:4e:83:cf:7e:89:51:71:90:bf:b5:
                    f9:17:8e:f1:51:8e:b0:9c:22:48:bb:85:f6:7b:00:
                    19:b3:94:94:e5:72:41:99:d8:ef:da:2c:7b:a1:12:
                    67:3f:59:93:9e:55:69:4c:d0:a5:87:fc:e6:7e:22:
                    ad:90:02:88:b5:b9:f4:a7:e4:88:04:a4:a9:cc:2a:
                    ec:e5:d0:93:be:2e:2d:4e:86:19:80:22:62:07:59:
                    e3:a2:1e:c6:1f:7a:dc:ac:2b:05:8d:01:aa:6a:ab:
                    07:60:cb:9e:dd:51:03:f1:36:38:55:37:75:fa:4a:
                    af:d9:28:37:a0:75:71:13:b6:97:d8:20:d0:30:ac:
                    06:39:b0:59:6c:2f:68:b9:f6:f8:96:5c:5d:13:e1:
                    27:9b:85:67:45:50:61:16:1e:e7:34:1e:3a:64:b0:
                    61:37:1d:69:46:be:e9:c1:97:7f:57:69:68:7e:8b:
                    6c:15:1e:63:fb:68:b5:c3:0b:9d:de:ff:d7:9d:79:
                    89:aa:8c:9b:8a:c6:42:e6:e0:bf:b2:48:b1:81:0e:
                    cf:0b:5a:c8:4d:f7:14:44:20:67:ac:5b:49:5f:84:
                    69:b1:ff:e6:3b:0d:ce:84:26:72:f9:e2:23:e2:99:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:49:D8:D3:24:D1:F0:8E:B2:63:E1:58:47:F4:08:2E:1A:F4:6F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6NBJ2NMk0fCOsmPhWEf0CC4a9G8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:15:a6:57:88:e7:2b:b2:81:ca:1e:0b:61:94:c0:08:04:
         d5:78:45:c2:2b:41:88:d3:e7:97:04:cc:6c:62:5c:f9:06:8b:
         ed:4d:8d:ac:48:5e:4a:42:f0:ad:f7:01:23:7b:7d:0a:e5:eb:
         8d:8c:ae:b3:1e:f3:d8:83:06:b3:b6:ea:ca:eb:cd:5f:d1:53:
         3b:19:07:91:0f:93:60:78:9e:d9:b1:f5:fa:10:bf:3d:05:d6:
         c9:c0:9d:b6:0f:37:78:ff:c4:af:59:5d:cf:da:14:a4:b1:c5:
         24:0a:72:b9:dc:05:dc:76:97:aa:e7:a8:c7:62:c7:48:16:69:
         53:f2:24:b5:2a:d8:80:dc:b8:86:64:6b:61:f7:30:a5:fe:0c:
         dd:55:26:14:9a:dd:4d:41:08:77:85:23:9e:1a:a8:60:0e:69:
         de:d0:5e:19:80:1f:ea:52:7e:86:36:10:93:49:d7:ac:e4:2a:
         b2:98:fa:4a:5a:3e:ff:ee:04:68:3c:74:9c:e8:e7:45:12:b7:
         0b:0c:57:15:25:7a:2f:e4:c5:f2:35:1b:b6:64:c6:5f:3a:ef:
         e7:1d:7b:25:45:e1:69:ff:8f:33:31:ae:ef:f2:e8:b3:f8:75:
         88:ba:bf:71:2a:6d:5c:1c:fd:24:c5:7f:a2:4b:b0:17:33:34:
         f3:dc:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----