Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa
File:                     9U1poOcTi5fBuWXLcMRCStmF9QY.roa (raw, json)
Hash identifier:          EnKfanPKx1v8bdFglBZHvXxhGpoihGCiu7NED0VgKLU=
Subject key identifier:   F5:4D:69:A0:E7:13:8B:97:C1:B9:65:CB:70:C4:42:4A:D9:85:F5:06
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08946E94
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa
Signing time:             Wed 15 Jun 2022 12:38:44 +0000
ROA not before:           Wed 15 Jun 2022 12:38:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143945364 (0x8946e94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 15 12:38:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f54d69a0e7138b97c1b965cb70c4424ad985f506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:97:d9:7e:5c:31:78:fe:dd:3d:2d:6c:84:
                    da:a3:ca:a3:92:14:e4:58:30:b1:a8:97:85:66:a4:
                    b6:6c:66:4b:19:e5:b6:b2:e1:ec:86:29:72:2d:83:
                    f9:0c:ff:c3:8d:ce:f9:03:cf:39:12:93:a7:04:41:
                    3d:c2:64:27:cb:f3:ee:93:a1:38:f3:13:87:09:32:
                    1d:af:3f:f8:7e:64:53:01:dd:3d:b8:d9:8f:5c:6d:
                    00:e7:85:10:4d:d1:37:1a:ec:47:06:62:df:48:d9:
                    7e:e8:39:90:f8:d3:fa:0d:d4:f4:d1:4e:f4:8e:83:
                    33:2a:5d:d6:35:43:b3:24:34:a1:c3:0a:da:d3:fe:
                    1e:4d:cb:e0:51:25:a8:7d:3b:46:24:3e:2a:a2:b0:
                    52:e5:04:35:08:5d:7b:3d:ae:63:80:4d:d2:b9:00:
                    fb:d4:7f:40:1f:bb:e4:3a:14:f5:e5:66:f7:98:6c:
                    9f:f5:a9:44:8e:53:59:3f:5b:34:67:bb:b3:7e:ea:
                    89:b2:db:70:7f:06:fa:8d:8a:f8:ca:b3:12:7b:cb:
                    09:a8:2f:60:23:09:65:76:39:8c:ce:a5:5a:62:bb:
                    58:89:a6:4a:39:76:84:97:01:43:a4:d9:6e:a2:c3:
                    7d:11:d1:be:07:93:b2:85:e5:ec:1e:3e:cd:fe:1b:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:69:A0:E7:13:8B:97:C1:B9:65:CB:70:C4:42:4A:D9:85:F5:06
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9U1poOcTi5fBuWXLcMRCStmF9QY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:27:83:d5:06:09:d0:b0:97:85:27:80:16:7b:f7:01:c4:f6:
         40:eb:ff:fd:cc:07:95:f1:57:55:0c:b9:65:9d:b3:67:c2:bb:
         7c:71:d5:72:e8:95:0f:c5:09:22:ac:6c:62:fe:f4:e7:00:7e:
         55:b3:af:a1:43:82:df:72:26:34:d5:7a:b4:b6:fd:fc:10:33:
         91:ac:cb:4a:6a:de:1f:ff:76:ca:ae:a0:6f:5f:65:d2:8e:c1:
         05:71:c1:05:20:e8:63:6c:2b:b4:76:1d:11:30:c7:62:78:a9:
         62:f6:db:a1:6d:58:d9:de:16:2f:d0:a6:c7:bb:4c:99:2e:15:
         04:0c:80:54:9c:80:89:ed:c2:5a:bf:a6:20:86:fc:b1:87:0e:
         e6:3f:8b:c1:61:89:6f:18:66:34:e6:fb:7b:04:96:7f:23:f3:
         89:b3:a0:26:19:40:3c:0e:ab:e4:ae:27:bc:ae:fe:d5:42:13:
         9b:18:c7:9a:4f:29:e0:1e:7e:7d:7c:b6:33:63:89:d0:81:ce:
         25:fd:44:14:d9:53:da:b9:aa:5f:10:08:e8:3e:3d:c1:c6:ce:
         a3:73:c0:33:a6:9b:9f:cf:c8:b3:73:cd:fc:e1:de:cc:89:ac:
         03:a2:02:5a:d5:cb:d8:5d:0d:ef:fe:86:48:eb:2f:dd:78:2f:
         85:a7:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----