Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8o5k_TiCYB2h0p08lF9UDbS0u4E.roa
File:                     8o5k_TiCYB2h0p08lF9UDbS0u4E.roa (raw, json)
Hash identifier:          Io9mnMbS+pVA7xUUC9vIS7yQHW3Tel8FHqKMRqMev/0=
Subject key identifier:   F2:8E:64:FD:38:82:60:1D:A1:D2:9D:3C:94:5F:54:0D:B4:B4:BB:81
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       093BF96B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8o5k_TiCYB2h0p08lF9UDbS0u4E.roa
Signing time:             Tue 28 Jun 2022 17:05:02 +0000
ROA not before:           Tue 28 Jun 2022 17:05:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154925419 (0x93bf96b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 28 17:05:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f28e64fd3882601da1d29d3c945f540db4b4bb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:22:10:b2:15:1c:17:ee:e5:f7:12:88:0b:
                    f0:cd:a6:6a:37:22:6f:76:3a:f0:99:87:3a:2e:cd:
                    d7:ec:be:3c:ab:5f:63:32:bf:f6:9b:73:d9:ec:82:
                    0b:44:0a:be:4a:96:e3:78:c1:48:83:49:b3:b0:77:
                    7e:24:c0:0e:ad:25:67:b9:2e:77:83:2c:83:41:9e:
                    c4:db:2a:68:cb:6c:31:7d:78:c4:de:67:9a:4b:58:
                    c7:3d:b8:8c:15:11:73:e4:cd:af:36:0a:b7:b8:25:
                    45:13:23:fd:82:82:ed:ea:ec:e4:1b:c8:b0:1c:28:
                    ea:aa:49:99:e9:bd:f4:b3:09:e1:ac:cd:ed:f3:69:
                    0a:de:76:75:ca:2d:52:ee:c7:01:c4:b7:f9:f2:d7:
                    79:80:b9:59:7b:f1:c4:44:fc:37:84:fe:ba:4b:dd:
                    17:3e:a3:5b:dc:65:c0:1b:bd:49:89:ee:76:02:d8:
                    d9:9b:88:75:7d:6d:17:e3:70:0c:3f:8f:19:44:9c:
                    77:3a:dd:96:5f:1c:04:2e:e9:4b:66:d8:48:55:e4:
                    d4:75:89:e9:33:87:aa:58:6c:a1:3f:ae:b3:bd:d9:
                    74:91:70:0c:cb:b7:97:68:45:c3:7f:9e:f0:2f:85:
                    c6:6c:44:84:e6:5a:31:4d:3b:a9:d5:cb:a1:ac:dd:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:64:FD:38:82:60:1D:A1:D2:9D:3C:94:5F:54:0D:B4:B4:BB:81
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/8o5k_TiCYB2h0p08lF9UDbS0u4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:96:82:90:5f:66:e5:b8:50:fe:d3:04:32:50:9a:64:fb:e7:
         47:55:d2:4f:6b:56:2b:e8:ea:c6:bf:b8:26:61:20:6b:50:f3:
         50:20:d7:e9:d2:50:9f:2f:3f:06:99:37:31:b7:54:b3:c4:f9:
         c2:13:33:cf:a4:9e:6a:cd:f8:09:0c:1e:96:e9:85:fb:84:df:
         7e:6b:eb:5e:8b:4e:38:2b:dd:d9:88:d1:60:3f:bb:70:a0:ed:
         c3:5a:af:a9:9b:b6:3b:3d:c1:11:6c:40:e2:76:bf:d4:6a:3e:
         7e:08:d4:79:56:83:52:0d:92:68:7e:0f:51:4c:6e:45:66:79:
         4c:1d:44:91:8f:e9:56:53:60:54:81:89:29:8c:a2:a0:a1:12:
         94:6d:d0:ca:a9:37:90:13:a8:06:8c:70:93:41:8f:b7:0d:52:
         57:22:dc:6e:cf:c9:e9:67:ef:ee:79:b4:48:2b:51:60:94:c4:
         ba:b1:47:b0:96:08:2b:93:a4:5b:de:ec:12:30:b8:03:24:b0:
         14:2b:8f:cd:1f:22:10:04:03:5d:5a:b8:5f:e4:34:5d:82:02:
         78:80:03:37:61:43:cd:d7:8c:a7:0b:8b:67:fd:29:64:c1:b5:
         65:67:cb:ec:b2:06:cf:d1:c8:fa:05:1a:7c:d7:99:4d:7b:3e:
         a8:0c:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----