Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AZ_e2HwLl7yukNs0SZkBFQQXZfM.roa
File:                     AZ_e2HwLl7yukNs0SZkBFQQXZfM.roa (raw, json)
Hash identifier:          hxc5JXfKLZtVpBzaFkKMroC9hfnQV8WgyV6Cq4bI+ek=
Subject key identifier:   01:9F:DE:D8:7C:0B:97:BC:AE:90:DB:34:49:99:01:15:04:17:65:F3
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04B1883C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AZ_e2HwLl7yukNs0SZkBFQQXZfM.roa
Signing time:             Thu 03 Mar 2022 15:26:26 +0000
ROA not before:           Thu 03 Mar 2022 15:26:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78743612 (0x4b1883c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar  3 15:26:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=019fded87c0b97bcae90db3449990115041765f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:10:17:37:3d:c4:0a:40:74:2c:ce:01:be:
                    7c:ee:e5:6e:1a:e0:75:87:b0:e9:5a:e2:7b:36:8c:
                    dd:9f:49:b8:53:6f:9c:99:66:52:af:7c:54:e7:42:
                    e9:f0:d1:fb:ed:23:cd:84:14:50:80:ec:47:59:71:
                    d1:7c:ce:f2:02:ca:59:ac:a2:c3:56:d8:6b:b9:6a:
                    51:1b:2b:8c:52:57:0a:75:8e:5a:6f:a0:53:ab:80:
                    d5:b9:5e:9b:d6:5d:e1:ea:18:30:04:c2:74:db:e0:
                    92:00:13:37:1b:1e:bf:1c:dd:5b:eb:3e:19:36:e1:
                    02:76:f5:cb:73:df:90:e9:fe:18:64:74:be:07:44:
                    ff:11:5e:5d:71:1e:1d:ba:af:16:36:f4:fc:cc:e3:
                    27:b8:78:43:a1:0e:e5:b8:89:77:e6:7e:db:36:3a:
                    94:6e:b0:39:5f:d2:b1:1e:99:4a:54:3a:e4:66:65:
                    45:2d:9b:0c:d3:39:d0:aa:4d:dd:c9:cb:9d:bc:a7:
                    f4:97:22:00:9c:23:73:6e:ac:43:44:e4:cc:15:8a:
                    8a:0b:94:0e:82:e1:ae:c9:2b:80:af:f1:5f:3b:ef:
                    bb:4d:e2:a7:c1:97:92:ad:4a:af:a3:8b:14:80:c0:
                    10:f4:dd:6e:81:fc:a3:c4:f5:28:3f:3d:f9:84:17:
                    20:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:DE:D8:7C:0B:97:BC:AE:90:DB:34:49:99:01:15:04:17:65:F3
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AZ_e2HwLl7yukNs0SZkBFQQXZfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:17:8f:11:2c:7a:04:09:fd:32:95:c9:a6:53:8c:df:27:
         8d:40:f3:6e:94:51:16:1a:f3:28:55:a8:34:6f:00:6c:8b:33:
         7c:68:08:e5:7d:7e:ad:4b:8f:2c:63:c8:3b:f6:28:fa:f0:45:
         0f:a3:8f:eb:d9:23:3d:2f:a0:03:34:02:5b:28:07:fa:b3:7f:
         eb:d3:e6:25:ba:a0:23:49:29:9f:87:57:05:40:47:b5:56:68:
         98:ca:96:de:41:c3:a4:54:21:a7:13:f7:b2:63:b3:95:7d:9b:
         3d:18:17:14:5f:c4:9e:b8:9c:b7:b8:7f:03:75:88:6d:85:3d:
         3e:50:dc:91:b4:80:71:65:b1:25:df:5f:3e:e3:98:dc:1b:81:
         95:a5:13:ca:26:1e:8b:27:e1:27:df:d6:c0:dc:3a:e9:44:44:
         91:f0:77:66:8c:a5:07:e7:f3:58:1f:ec:4e:38:3d:3c:60:ab:
         5e:b4:d2:3d:ec:c9:75:6e:22:de:ef:84:87:f5:6c:58:27:38:
         66:a3:eb:91:18:72:33:08:02:21:44:e8:16:b8:2f:36:51:b0:
         e6:fd:e0:5f:ac:18:17:a7:9c:dc:e0:1e:a3:8e:35:50:9b:98:
         d4:37:d2:bd:3f:46:8e:38:81:27:c0:48:fe:45:c3:bc:5a:da:
         5a:55:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----