Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9uY0QmgdY4pEBW8HI7xrKg8Ppjk.roa
File:                     9uY0QmgdY4pEBW8HI7xrKg8Ppjk.roa (raw, json)
Hash identifier:          z/kufUQcI/aKrMh86ezEisTZKphmuVw3h4UtM9b+sTk=
Subject key identifier:   F6:E6:34:42:68:1D:63:8A:44:05:6F:07:23:BC:6B:2A:0F:0F:A6:39
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       080E4B53
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9uY0QmgdY4pEBW8HI7xrKg8Ppjk.roa
Signing time:             Sun 05 Jun 2022 15:07:20 +0000
ROA not before:           Sun 05 Jun 2022 15:07:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135154515 (0x80e4b53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  5 15:07:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6e63442681d638a44056f0723bc6b2a0f0fa639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:76:2b:53:05:64:b6:5a:b5:85:7c:75:c9:
                    86:88:14:7c:88:c6:96:bc:44:ce:f4:e5:30:20:9c:
                    95:a1:c9:26:a5:5f:c0:9a:85:99:e4:90:e2:31:3f:
                    36:87:6c:dc:0e:c6:c3:1b:eb:a9:6a:9a:71:e9:14:
                    c3:59:d5:0e:a1:e8:a3:e4:ed:2b:55:3f:96:7e:ad:
                    c9:f1:04:b4:30:3b:a5:bd:e1:b4:cd:57:fd:61:e5:
                    e7:d8:98:0b:99:a8:dd:79:d5:5f:65:35:9e:e6:a4:
                    39:70:13:28:0f:99:ea:ec:b4:a1:63:77:3d:4c:5e:
                    32:65:22:0b:af:79:17:b2:c2:dc:e7:23:37:6c:5f:
                    7a:88:71:ad:80:3f:7d:15:3c:bb:61:ce:d6:29:41:
                    94:1d:8a:49:51:1b:ed:95:25:e2:80:b2:8e:68:bc:
                    b5:eb:24:ab:21:29:d6:e8:a0:1d:b4:79:b7:66:79:
                    e8:e0:52:d1:b8:33:42:86:4a:ad:f4:d5:6e:46:c4:
                    c1:a7:5c:88:29:2a:a8:58:82:f7:ab:c1:2b:d0:88:
                    2d:ef:89:1c:c5:70:25:80:eb:6f:72:be:a7:1f:c7:
                    38:9d:8c:3e:86:2f:fc:e5:6e:34:b0:fe:78:db:b4:
                    3d:87:45:82:13:15:0a:19:f2:19:df:de:76:c4:c5:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:34:42:68:1D:63:8A:44:05:6F:07:23:BC:6B:2A:0F:0F:A6:39
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9uY0QmgdY4pEBW8HI7xrKg8Ppjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:04:10:90:49:ea:8f:b1:19:ef:32:c2:ff:23:11:d5:f2:
         ab:f4:19:ff:50:f2:64:b9:68:3d:41:94:d2:54:ff:de:a4:94:
         92:59:d3:ce:a0:6f:75:12:17:c3:2d:b8:84:bd:d2:49:27:8f:
         6d:b5:8c:ed:e4:bc:5c:4f:f4:93:85:f1:4e:03:9a:a0:eb:13:
         4c:a7:39:40:a2:cb:db:92:53:bb:7b:af:7e:ff:10:da:f5:37:
         f0:8e:99:d4:6c:51:5c:28:2a:1d:3b:21:ad:98:78:ea:0e:e2:
         25:d6:9a:8d:59:7d:b3:de:b9:4a:c6:5e:14:c5:c4:aa:b7:b4:
         ad:6f:9d:11:b5:0a:d1:34:51:0c:53:79:da:d4:25:d2:4b:c6:
         70:3d:ea:83:45:2b:9a:d6:ae:a5:49:5c:f4:e1:4e:3e:0a:6c:
         aa:f3:90:82:ef:3e:32:21:3f:cf:7b:53:fe:77:3b:2a:c3:e0:
         05:7b:52:eb:39:7a:21:ce:af:63:11:19:f3:b1:fc:92:ec:0d:
         5a:c1:02:0b:2c:d5:19:db:f0:47:67:0f:42:2e:2a:17:76:f0:
         d2:cf:10:e2:06:4e:59:a4:ba:b8:d5:fc:6b:7b:e2:8b:c1:f4:
         6d:a1:d7:8f:2d:f9:7f:93:15:c7:47:46:ff:f2:a6:30:b0:7b:
         21:5f:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----