Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9qghlw010C3zng3eR3BX-OeJBBs.roa
File:                     9qghlw010C3zng3eR3BX-OeJBBs.roa (raw, json)
Hash identifier:          J1LxKEB2hZTpYLsOdj7qVNg9WgbBakD/qSm9SlrKguU=
Subject key identifier:   F6:A8:21:97:0D:35:D0:2D:F3:9E:0D:DE:47:70:57:F8:E7:89:04:1B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       040368B7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9qghlw010C3zng3eR3BX-OeJBBs.roa
Signing time:             Wed 09 Feb 2022 12:44:42 +0000
ROA not before:           Wed 09 Feb 2022 12:44:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67332279 (0x40368b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  9 12:44:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6a821970d35d02df39e0dde477057f8e789041b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:3b:28:2c:1c:bc:8f:d9:06:c8:f3:af:a8:
                    40:46:48:64:77:e5:84:3a:a1:0a:93:56:a8:9b:aa:
                    52:b0:f0:ac:84:56:75:5d:cb:f8:f5:69:d6:f9:0d:
                    26:b4:bd:01:fc:93:52:91:8f:64:35:02:da:ad:0e:
                    ca:25:e0:23:fb:06:8c:2a:d6:39:03:43:67:f9:d8:
                    6d:d5:39:b5:55:84:c8:52:a4:4b:21:e4:8f:95:12:
                    2b:e2:7f:8f:bb:7d:06:7c:e8:12:78:27:0e:ab:98:
                    23:db:cb:3a:83:2d:1c:7f:dd:6c:89:61:2d:c7:57:
                    47:1a:c3:65:ae:9f:7d:e2:5d:aa:d5:c6:10:c0:6c:
                    aa:75:07:ea:72:8d:6c:f4:01:99:fc:d5:50:50:19:
                    7b:33:f1:cf:41:65:4d:48:a8:33:05:3a:6b:9d:8f:
                    44:ce:3a:a9:5c:86:2a:7c:52:d6:03:06:1a:24:fb:
                    4e:07:1d:2d:1f:f9:09:60:3c:7a:a8:ba:ec:2b:52:
                    b4:44:ce:d6:e2:41:82:51:bf:0a:51:c2:65:e4:41:
                    0c:ec:61:a5:47:14:7d:f8:14:4a:85:d3:71:f8:5b:
                    03:3c:28:55:f9:86:c5:14:40:ae:c5:64:1b:be:5f:
                    97:4f:78:ba:74:fa:fe:9a:f6:dc:3d:e4:86:80:37:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:21:97:0D:35:D0:2D:F3:9E:0D:DE:47:70:57:F8:E7:89:04:1B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9qghlw010C3zng3eR3BX-OeJBBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:2b:09:51:e2:f3:d9:e9:72:d0:69:9d:1f:fc:d5:d5:cd:
         6e:58:1c:db:8d:d4:96:f9:93:40:45:84:42:39:8d:3c:84:8b:
         3d:7e:43:66:e4:16:6f:f3:ec:04:9c:13:d2:55:d3:51:6f:ed:
         67:2e:37:fe:15:35:e7:33:20:e1:9a:92:61:40:06:f4:db:df:
         44:ce:04:0d:18:91:0c:2c:b0:e9:68:62:f3:40:68:b3:f2:06:
         ae:61:b6:25:24:8e:70:3b:10:87:ed:7a:bf:24:16:45:29:33:
         9a:00:e7:0c:ce:8d:8e:15:64:da:a3:19:b5:5b:54:ae:0e:bc:
         66:79:3f:d4:ae:46:28:6a:c8:c9:fa:e8:7c:dd:32:b8:98:94:
         a8:ff:44:59:d2:a9:bd:fa:66:fd:06:20:d8:71:f1:c6:bb:b8:
         68:33:21:44:17:c0:d8:09:e6:9f:5d:76:59:b3:f2:73:7e:91:
         5e:5c:37:57:5d:08:46:be:ca:59:1a:d7:c6:72:f1:d3:92:bc:
         16:c1:6f:c6:48:80:db:55:5f:25:20:83:9f:31:ca:34:a7:c6:
         97:c6:61:58:d6:21:ec:48:80:f5:98:03:71:61:ce:82:db:67:
         0e:6e:b4:5d:ce:6d:6f:4b:6b:a1:15:c5:d9:a0:1a:dd:7a:0d:
         55:f2:88:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----