Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AXVi6N13bNQdOY7rkXVhUrEfSyw.roa
File:                     AXVi6N13bNQdOY7rkXVhUrEfSyw.roa (raw, json)
Hash identifier:          sgB81Yh1/jAv9rSsNoBkobiZwd7NaztsWNwAfFmUbxs=
Subject key identifier:   01:75:62:E8:DD:77:6C:D4:1D:39:8E:EB:91:75:61:52:B1:1F:4B:2C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       081DB842
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AXVi6N13bNQdOY7rkXVhUrEfSyw.roa
Signing time:             Mon 06 Jun 2022 17:14:20 +0000
ROA not before:           Mon 06 Jun 2022 17:14:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136165442 (0x81db842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  6 17:14:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=017562e8dd776cd41d398eeb91756152b11f4b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:20:e4:5c:00:5f:2e:7f:67:6d:77:da:7f:
                    75:97:21:9b:a8:4e:af:49:c0:04:d6:97:a9:8b:62:
                    6e:ea:f2:06:8d:af:c9:3b:b8:3b:80:17:9b:62:b3:
                    15:20:82:a1:76:f8:e5:4f:f5:ab:c6:46:5f:f8:85:
                    43:d7:c4:0f:85:a7:25:8b:74:2c:3f:ab:bb:19:84:
                    6b:a7:03:19:58:46:48:3e:0d:b9:5d:3e:ee:3c:f2:
                    13:51:65:04:5b:b9:09:20:c5:51:cf:45:61:d5:f2:
                    a8:90:5d:5b:ba:92:ba:7d:8f:64:01:f7:ea:a9:b8:
                    9c:84:a9:1c:13:3b:0c:0a:e0:9c:22:e6:b0:13:3c:
                    1d:33:2d:c0:67:8f:2b:fe:66:81:b9:55:e7:12:cb:
                    62:af:ed:88:0b:34:4c:17:2d:2e:fc:68:ec:fe:b8:
                    93:ee:6f:88:b9:29:23:98:06:72:9a:4d:e5:72:d5:
                    e9:b0:3f:bb:47:72:f0:88:6d:d6:c6:92:20:5d:70:
                    85:f7:48:c4:0c:41:78:d8:7c:fc:e1:bc:bd:f7:3d:
                    7c:49:51:94:d6:0f:46:1c:f6:cd:97:90:91:8f:b1:
                    e1:53:f3:f9:dd:f1:9f:c5:c7:2a:d2:8c:f8:57:a5:
                    21:93:20:d8:80:d8:7d:fd:82:bd:95:52:d2:ba:14:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:62:E8:DD:77:6C:D4:1D:39:8E:EB:91:75:61:52:B1:1F:4B:2C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AXVi6N13bNQdOY7rkXVhUrEfSyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:59:1f:94:83:85:33:e8:c9:69:6d:1a:e5:20:d1:a4:dd:87:
         85:08:6d:c2:aa:6d:ea:91:f8:39:d2:e7:51:f7:ad:07:43:24:
         68:84:00:7c:80:97:f5:15:af:16:f9:fa:a2:9b:f5:a1:81:5b:
         e4:e1:b8:90:e3:f2:ac:74:45:0e:e4:99:d9:b0:10:3e:86:09:
         20:37:9d:35:93:0e:26:c4:31:a9:34:95:b6:ef:83:57:fc:60:
         25:e4:1e:3c:35:c5:7c:f1:fe:90:0f:91:0d:bd:ce:46:52:f9:
         f9:63:52:f0:f7:e1:1f:fa:2d:df:b6:1d:df:0e:e8:ae:73:03:
         13:1e:f2:3a:c3:54:9a:42:51:3e:d4:a7:16:be:d0:83:7d:07:
         87:11:d9:c0:d6:1a:7b:14:c1:6a:a0:bb:41:fb:ba:4c:50:40:
         43:d7:ae:e6:25:57:c4:70:d8:5c:00:f7:ca:4e:73:b1:03:c3:
         58:7e:28:d4:a3:23:95:36:a1:9d:a9:b3:f9:92:90:2b:b6:5c:
         63:e4:fa:53:44:74:c1:95:bd:44:b1:76:d6:5c:ac:b1:ec:45:
         89:1b:c7:33:0d:31:8c:a5:c9:5e:21:2a:3d:f4:74:8b:95:31:
         19:31:ed:3c:c6:02:59:bb:15:20:74:6c:7e:7c:69:0c:8e:72:
         06:8d:55:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----