Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AuBLrALT8jjGb0CG4N7zj3_Ezao.roa
File:                     AuBLrALT8jjGb0CG4N7zj3_Ezao.roa (raw, json)
Hash identifier:          pvyaDiWhdlb8NpzSjVMxkSmG8z+PxyrRQ2u0WHV7+Fw=
Subject key identifier:   02:E0:4B:AC:02:D3:F2:38:C6:6F:40:86:E0:DE:F3:8F:7F:C4:CD:AA
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06C9F77E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AuBLrALT8jjGb0CG4N7zj3_Ezao.roa
Signing time:             Wed 11 May 2022 14:16:02 +0000
ROA not before:           Wed 11 May 2022 14:16:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113899390 (0x6c9f77e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 11 14:16:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02e04bac02d3f238c66f4086e0def38f7fc4cdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:92:b0:e5:81:fb:38:b8:04:58:10:15:dc:
                    c6:1e:03:87:dd:8e:fe:52:80:3c:1e:5a:f8:2e:d7:
                    cd:b6:63:e7:64:d3:cb:b3:a2:7c:f7:a7:bc:16:ad:
                    2e:30:b0:97:b2:6a:63:49:93:85:f5:91:0b:4e:d5:
                    12:e2:05:39:36:53:5e:bf:38:e4:07:03:1f:e8:09:
                    6a:33:70:fa:51:53:35:70:0b:8d:e2:1f:5a:a9:4d:
                    8c:2b:7e:18:28:cf:73:95:31:ac:3f:c9:61:4f:e6:
                    d5:2c:51:23:a5:63:8e:ec:a2:1e:9d:d2:cf:d4:d5:
                    dd:0b:29:50:c7:3e:6e:3e:ae:8a:ff:7e:09:4c:e1:
                    31:2a:86:27:4d:fe:c6:c2:8b:79:a5:a7:24:c8:35:
                    de:c7:f0:2c:5f:d2:b7:33:4b:00:38:8c:64:e6:03:
                    26:d7:67:59:57:b6:39:46:b8:c6:74:86:2b:cc:59:
                    cd:da:e1:dd:a3:f2:0f:51:66:e6:e7:23:68:4c:6a:
                    67:16:e2:e2:02:3f:fa:ef:e1:31:de:4a:a5:15:8d:
                    34:78:8e:4a:37:a5:50:86:4f:e6:a0:59:0f:44:a2:
                    c9:ab:47:88:46:c2:21:f2:75:1b:e8:b6:b7:5e:50:
                    d7:71:10:2e:f6:16:d9:cd:28:ff:2e:8e:a3:91:bb:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E0:4B:AC:02:D3:F2:38:C6:6F:40:86:E0:DE:F3:8F:7F:C4:CD:AA
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AuBLrALT8jjGb0CG4N7zj3_Ezao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:e8:8a:e1:c3:2b:f4:7b:6c:ab:b1:70:c1:e3:d0:66:84:
         c6:22:5d:e2:0c:21:3c:6c:5a:30:c3:9a:ca:83:6e:6a:ef:5a:
         a5:e4:98:e0:ff:6b:fa:af:09:78:93:7a:35:96:69:52:ed:ab:
         cb:e3:46:20:e6:85:34:85:a6:56:47:b3:7c:e4:a7:a1:cf:ca:
         82:34:48:3e:a9:8c:ab:9a:f8:01:7c:16:00:ea:22:ec:df:47:
         f4:e8:86:04:87:16:64:b6:e6:b6:7b:3e:e5:f8:40:1b:e5:1f:
         73:35:07:1d:e4:6a:a9:24:5b:68:a6:5d:8f:05:81:44:b3:2e:
         0b:d9:cc:05:fd:3e:94:54:f8:be:3b:83:6a:01:a1:d2:de:ba:
         3e:c7:90:c0:88:83:ca:fa:15:ac:02:88:ce:fd:c4:1b:01:13:
         8e:65:dd:35:b4:0e:05:f6:40:60:b9:9b:da:21:cb:99:9f:5e:
         fe:21:98:8d:4b:26:c2:72:59:58:50:72:2d:54:3b:16:22:8b:
         65:d7:ef:a2:83:8e:cf:87:08:06:b8:2f:89:e0:1f:b9:ad:81:
         cd:98:ab:9b:50:53:92:07:d3:30:7c:2e:24:9a:60:21:57:22:
         39:12:90:42:5f:82:7a:35:3b:94:89:f9:10:3b:b6:23:ed:c0:
         ab:a2:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----