Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7KmCm-qnUC3JWc9bIOIWO6jrhIs.roa
File:                     7KmCm-qnUC3JWc9bIOIWO6jrhIs.roa (raw, json)
Hash identifier:          613cKpMthYaGAUylDMjHteGWDj4GENyVoFPFLoODseE=
Subject key identifier:   EC:A9:82:9B:EA:A7:50:2D:C9:59:CF:5B:20:E2:16:3B:A8:EB:84:8B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08976EAE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7KmCm-qnUC3JWc9bIOIWO6jrhIs.roa
Signing time:             Thu 16 Jun 2022 01:55:44 +0000
ROA not before:           Thu 16 Jun 2022 01:55:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144141998 (0x8976eae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 16 01:55:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eca9829beaa7502dc959cf5b20e2163ba8eb848b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:db:b3:16:c2:95:0f:64:07:a0:77:32:ff:03:
                    45:d8:99:2f:67:57:77:73:e1:64:e7:6e:0f:16:d4:
                    e9:af:99:d7:72:81:0e:76:03:75:c9:e5:26:03:de:
                    b8:2f:38:5e:8a:42:c8:bf:0a:25:63:fb:56:cf:ff:
                    2a:6f:1c:a4:05:67:90:63:cb:d9:50:63:d0:0f:15:
                    b2:e1:8a:8f:73:4f:57:ec:46:ca:c6:65:08:3e:b5:
                    99:1d:fa:6b:1d:b0:ea:27:cd:c1:8b:57:6f:a6:4e:
                    f5:31:38:5b:ca:5d:72:ec:33:61:6c:9a:a2:d9:89:
                    27:c6:79:77:7a:a5:4e:cb:c1:91:c9:1a:98:98:1f:
                    33:af:3b:a3:d8:34:e4:bc:d2:22:3c:71:e6:e1:4f:
                    72:82:2e:19:00:9a:0e:bf:2d:35:9a:34:c3:95:50:
                    cc:98:b3:29:0b:e5:83:f3:e5:37:a9:da:8e:30:06:
                    76:eb:53:7b:57:3a:de:7a:86:29:b8:37:4f:00:05:
                    fc:35:5b:d3:03:15:fe:b9:eb:3e:f9:e2:af:38:7b:
                    74:39:19:a9:2d:30:c3:03:f0:33:b3:58:fc:53:e7:
                    2a:80:ca:9c:da:57:d4:c1:b6:ef:7b:6f:ba:00:97:
                    98:e0:00:2c:1c:27:70:27:f2:f0:a0:dd:d7:6c:98:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:82:9B:EA:A7:50:2D:C9:59:CF:5B:20:E2:16:3B:A8:EB:84:8B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/7KmCm-qnUC3JWc9bIOIWO6jrhIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:52:17:dc:3b:de:c9:c9:93:20:3f:59:12:0b:d7:c1:fb:
         a2:87:ef:c8:76:9d:68:5f:b4:49:d8:a3:7e:47:2b:79:90:79:
         be:89:50:f1:da:30:d7:8c:e0:35:e1:21:78:b0:52:fd:9b:a3:
         2e:ba:5d:5b:9b:9a:c6:30:ba:d5:9b:8f:1f:d9:2c:92:c9:1d:
         d7:98:65:3a:8a:33:8b:1f:2d:6c:3f:64:b7:e8:d7:a0:e5:d2:
         7a:21:85:26:ae:aa:10:c2:68:25:09:a0:3c:fb:6f:4b:1e:ec:
         6f:39:d4:9f:54:21:92:44:3a:5c:0f:6d:dd:d1:2b:21:6b:b8:
         5d:ae:b6:41:a0:54:49:dc:9c:90:f5:b6:4b:74:aa:22:c8:0a:
         de:29:9f:09:b3:f8:63:f7:94:fc:f6:0c:cd:93:14:c0:16:04:
         54:20:6f:e2:cb:cb:34:28:49:8c:ff:6f:4d:60:4d:97:69:db:
         1c:ff:f5:ba:38:5b:2b:54:90:49:2e:01:0e:16:00:cc:3e:cc:
         4a:60:3f:16:58:4a:ef:72:86:84:fe:81:36:af:45:da:96:6d:
         d6:08:30:51:b9:28:74:64:80:9f:f8:ba:df:e4:4a:d5:1d:e8:
         81:2f:db:cb:41:6c:a8:41:94:3b:39:09:46:de:a2:25:89:09:
         5a:c9:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----