Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8X4NVCcoJvYjHmGTwrStpxn72E8.roa
File:                     8X4NVCcoJvYjHmGTwrStpxn72E8.roa (raw, json)
Hash identifier:          0mjYWPoaKVpqifZmZj+jr63Y7OVqqXtTYB18ok5GHOc=
Subject key identifier:   F1:7E:0D:54:27:28:26:F6:23:1E:61:93:C2:B4:AD:A7:19:FB:D8:4F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       098A59EE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8X4NVCcoJvYjHmGTwrStpxn72E8.roa
Signing time:             Mon 04 Jul 2022 02:50:25 +0000
ROA not before:           Mon 04 Jul 2022 02:50:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160061934 (0x98a59ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  4 02:50:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f17e0d54272826f6231e6193c2b4ada719fbd84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:55:9e:b5:6a:9a:07:17:8b:9d:c8:e8:7e:
                    9c:2c:db:1f:1d:eb:1e:cb:2e:16:8b:22:78:44:21:
                    db:5e:a9:be:42:f2:97:50:c5:e3:98:3f:a5:36:17:
                    54:5c:0c:f0:5e:b5:e9:34:e6:c4:92:4d:d7:dd:fb:
                    eb:6d:fc:96:59:5d:c8:a0:51:be:cd:8b:7b:34:2e:
                    09:12:ef:3e:30:d9:0b:41:8a:0f:e5:34:1d:62:67:
                    b1:c0:a4:7e:e0:ff:fe:33:eb:b1:d4:7e:8b:ce:b0:
                    dd:b9:c7:ed:08:e5:91:12:1b:ae:81:f5:0c:fb:7e:
                    5c:e6:4d:ea:ad:de:cc:cd:eb:82:ca:ef:5e:8c:7e:
                    1c:b0:0f:f2:6d:b1:40:78:88:bd:59:89:28:a7:a5:
                    3c:f6:33:d4:4d:8a:a2:09:f7:2c:13:fe:63:6b:e9:
                    18:d5:d2:e5:6f:e1:ee:a6:73:20:03:c1:cb:90:0a:
                    ac:69:5e:d6:b8:eb:c2:35:ba:7d:0f:a3:a5:aa:12:
                    73:d2:08:29:ad:ce:7e:7c:a4:70:e2:ae:bb:21:67:
                    51:9d:51:c4:90:0c:f1:9f:29:0a:7b:a8:25:08:5d:
                    6c:52:38:73:ea:14:b5:09:d3:8e:bb:cd:ae:90:2d:
                    43:74:25:48:a6:23:53:41:89:20:a5:02:81:27:5b:
                    3e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7E:0D:54:27:28:26:F6:23:1E:61:93:C2:B4:AD:A7:19:FB:D8:4F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8X4NVCcoJvYjHmGTwrStpxn72E8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         21:68:05:94:6a:1b:a9:20:01:eb:f4:16:e7:0f:2a:4d:ed:e2:
         96:f2:de:fd:67:c5:6c:9d:00:8a:88:58:64:f4:cb:10:cb:75:
         43:5f:b1:70:3b:3f:c9:11:1e:34:f3:31:d4:ac:4d:13:f2:16:
         f2:35:72:29:5c:b2:b5:70:a4:fd:d4:e4:00:4c:ef:51:87:9a:
         49:e6:04:29:63:90:7e:e1:31:7d:9a:d6:16:96:39:f1:0e:c4:
         39:e7:48:92:14:08:ac:7b:d9:2c:eb:38:80:89:22:f3:2d:df:
         28:11:84:df:4b:ce:bb:ab:85:2b:2f:b2:be:15:27:1a:8a:23:
         8a:77:56:15:54:f9:d1:04:81:ef:f3:70:a9:48:a4:31:9d:02:
         ab:9b:77:e8:1c:03:42:aa:fa:8d:c5:ec:3c:39:b2:bd:56:c8:
         fc:5c:34:d5:ad:e2:ec:be:9a:3d:4e:15:c7:c0:dc:e5:cf:85:
         2c:ab:1a:f7:b3:99:60:ea:03:b9:e1:a6:c1:71:7b:2b:90:02:
         82:0f:32:d4:82:ff:1e:41:8f:ba:97:2c:03:ca:72:c0:ed:0a:
         7f:d1:e6:cf:89:bd:44:79:7c:f6:e1:57:0a:92:ca:6d:d3:7a:
         11:d9:c9:2a:d8:33:91:65:ae:e6:71:c7:bf:d5:bc:91:28:30:
         00:2d:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----