Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa
File:                     9V1Jkh76eV4xB9HNfSpfT256MQk.roa (raw, json)
Hash identifier:          tqWRvYXU7W/uqSCMZyq7xNChUWYFMiTkkCJw+aIFj1A=
Subject key identifier:   F5:5D:49:92:1E:FA:79:5E:31:07:D1:CD:7D:2A:5F:4F:6E:7A:31:09
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04594E8D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa
Signing time:             Sun 20 Feb 2022 01:00:12 +0000
ROA not before:           Sun 20 Feb 2022 01:00:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72961677 (0x4594e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 20 01:00:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f55d49921efa795e3107d1cd7d2a5f4f6e7a3109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:0b:ab:36:27:24:6f:1b:9d:7b:3c:54:42:
                    d8:0d:e7:49:5a:71:c8:be:96:f8:ab:60:3d:98:72:
                    05:76:5d:a4:c0:49:45:f2:97:15:86:8f:aa:fd:26:
                    ac:94:d3:cd:2a:b3:6f:02:b0:22:fd:f1:19:fd:d5:
                    ff:59:5a:c4:71:9b:37:b4:32:a9:ed:c3:d0:3c:af:
                    5e:f0:ee:99:6d:d7:95:a8:7f:4a:ca:07:ff:0b:5c:
                    2b:98:48:41:ab:9e:5c:b1:d6:48:a0:f7:5a:eb:ae:
                    36:d5:c9:e9:8f:6a:bf:d3:fc:b5:d9:5a:e9:a1:16:
                    0c:00:97:aa:58:42:0b:7f:c9:26:37:70:74:90:96:
                    c9:3a:8c:ad:d3:95:40:8f:c1:73:96:31:97:57:5a:
                    b9:85:d6:36:a8:5b:4a:16:c6:21:a1:d9:93:51:67:
                    4b:cf:3c:0e:ba:0e:9a:06:1b:95:b7:a4:cf:21:29:
                    90:a6:ba:84:76:86:8d:4a:fd:bc:1d:f7:26:6d:9f:
                    f5:cd:03:c9:01:b7:ee:dc:6e:0d:33:a6:63:57:a9:
                    a7:ef:b0:8b:45:0b:19:d9:21:d2:c6:3e:0a:69:d8:
                    7b:7f:74:31:ae:e4:ac:c7:dd:56:bc:96:ab:81:15:
                    4b:cc:13:9f:ba:93:e5:2b:55:cc:82:b8:2d:52:8c:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:49:92:1E:FA:79:5E:31:07:D1:CD:7D:2A:5F:4F:6E:7A:31:09
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:ca:a2:d8:0c:2c:6f:07:90:47:cf:4c:50:c9:50:1f:a7:
         c8:66:b2:2a:e6:41:b7:51:bc:cd:35:9c:62:f4:40:12:a3:54:
         73:b1:64:92:be:14:c1:6a:64:27:44:33:2d:d9:01:c8:86:22:
         62:ef:b7:56:b6:c4:62:d4:2b:77:36:82:2d:c7:a7:23:9e:b3:
         24:d2:38:62:36:75:af:0f:e3:58:97:23:e7:dd:89:f9:7a:81:
         f6:ca:01:79:b4:17:10:71:1b:11:53:b9:00:e3:5c:a2:ff:23:
         10:8e:8f:9f:4e:c6:3b:87:5a:03:81:9a:e1:68:28:52:4f:82:
         76:aa:e5:80:5f:13:2a:c5:87:a9:2f:55:5f:9b:0b:be:03:74:
         2a:84:9f:6e:4a:de:9b:de:1a:b7:63:f6:94:e4:40:be:04:b6:
         6e:4e:c6:d9:f2:68:fa:4e:cb:45:6f:6d:4f:83:dc:e5:7f:03:
         e2:af:47:02:09:75:97:0b:88:af:ea:41:b7:b2:65:7b:15:c6:
         90:6d:5e:23:63:39:91:b8:38:05:f3:1e:27:56:cd:21:bc:e6:
         f1:f0:de:01:ca:74:3c:9c:5d:53:ef:40:48:ad:93:51:81:cf:
         6c:13:ca:33:79:dd:6a:f8:f5:90:83:15:c6:b4:5e:81:00:6f:
         5c:6c:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----