Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AmE4CcdPZEURFJ0zSW3jvPSRwPg.roa
File:                     AmE4CcdPZEURFJ0zSW3jvPSRwPg.roa (raw, json)
Hash identifier:          D+Q+naKLPEUAh+x/tPbA3ITShjbAwerjIb/T1x4+x1I=
Subject key identifier:   02:61:38:09:C7:4F:64:45:11:14:9D:33:49:6D:E3:BC:F4:91:C0:F8
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181DE538149CD1821AF7236210BDAA288C5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AmE4CcdPZEURFJ0zSW3jvPSRwPg.roa
Signing time:             Fri 08 Jul 2022 15:00:23 +0000
ROA not before:           Fri 08 Jul 2022 15:00:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:de:53:81:49:cd:18:21:af:72:36:21:0b:da:a2:88:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  8 15:00:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02613809c74f644511149d33496de3bcf491c0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:5f:79:13:56:f5:9c:fb:a6:d6:d3:18:61:
                    b7:56:bb:d4:a9:07:1e:d2:ae:b2:a7:4b:de:d4:43:
                    d5:2a:18:a6:46:a7:5f:6b:4f:a8:4b:f0:c1:e8:8c:
                    68:13:c9:ae:c3:a7:c2:cd:eb:11:65:cb:42:9c:f8:
                    81:bb:4f:54:48:f3:0a:cb:39:aa:cd:75:e1:b8:a4:
                    9d:36:3d:d4:43:1d:f4:00:7b:21:7c:e2:7e:0a:64:
                    03:eb:1d:23:f4:9a:b2:26:8e:ce:0d:9b:42:d0:e7:
                    e2:ff:fb:28:97:8b:80:1e:bb:e5:f0:dc:7b:35:5b:
                    e2:50:59:f6:7e:87:d1:55:1b:6f:95:1f:cc:cf:f7:
                    da:f5:26:fe:2b:66:d9:0e:38:52:11:12:ce:3d:e5:
                    8a:4c:09:2f:9b:ed:ce:12:bf:89:22:06:5a:93:33:
                    ff:e3:0a:58:7e:49:67:4d:03:d7:f8:4b:44:b8:7b:
                    8e:6d:e4:9b:04:0f:0a:be:a0:e7:50:74:dd:14:c5:
                    7a:7f:06:87:4b:7b:c0:4f:7c:2d:63:25:07:e7:6c:
                    e8:73:1b:8f:77:59:ad:60:d8:dc:2f:9c:e7:4a:69:
                    e6:d1:00:78:34:89:77:b2:8d:86:3a:b5:45:a8:98:
                    ea:77:06:df:1b:f8:c2:e5:8b:d1:06:ad:57:88:46:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:38:09:C7:4F:64:45:11:14:9D:33:49:6D:E3:BC:F4:91:C0:F8
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AmE4CcdPZEURFJ0zSW3jvPSRwPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:41:4f:26:36:a5:10:b9:ee:e3:bc:31:77:b3:3e:d6:e2:f3:
         8a:89:ec:94:16:9f:d4:34:8f:4c:e2:ed:79:31:da:00:31:13:
         de:a6:81:48:05:38:dc:d9:52:0e:7c:f9:41:e8:21:b2:6a:8d:
         26:47:71:94:ab:c5:b3:3e:0e:d2:3d:c9:4d:ab:44:47:c0:ca:
         11:e6:d0:8f:4c:a6:23:33:f7:e3:f9:1a:05:a9:27:4e:ef:bb:
         a2:36:3d:2e:b0:47:48:49:7a:38:e2:17:4d:bc:1e:64:0c:50:
         df:3b:29:db:df:bf:02:7a:a5:41:5d:f6:89:a1:95:9a:76:d5:
         a7:2d:06:d7:52:c6:7e:05:b5:c6:17:f4:6b:a6:e5:c0:cb:ed:
         20:9a:03:b3:5a:c8:1a:0f:38:c3:4f:e3:ca:76:49:1f:ef:39:
         59:4c:a5:1e:4b:0e:64:4d:34:cd:5c:27:f5:7e:77:b6:4c:ae:
         f2:44:94:b9:c5:2e:1b:98:b9:e3:76:70:09:a3:e2:6f:c6:6a:
         da:bb:11:48:5f:56:d1:ca:d4:cd:8d:d9:fc:81:dd:7b:91:4b:
         70:61:eb:fd:3f:75:6a:5e:76:1b:5f:cd:55:cc:40:35:db:f1:
         e1:b1:04:7f:88:f6:0a:39:30:b8:12:c2:23:37:56:ba:8f:5e:
         52:27:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----