Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa
File:                     BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa (raw, json)
Hash identifier:          c4gOAicPGHtnoVB+aizXsJhcofFX/KwXvLhPzHAmPh8=
Subject key identifier:   04:22:DC:4C:C6:21:69:47:C1:FF:12:B1:7F:E4:99:F2:11:1A:21:40
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0829F1AE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa
Signing time:             Tue 07 Jun 2022 16:35:02 +0000
ROA not before:           Tue 07 Jun 2022 16:35:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136966574 (0x829f1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  7 16:35:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0422dc4cc6216947c1ff12b17fe499f2111a2140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:c1:9d:94:33:18:b7:93:42:99:5f:27:3a:
                    fc:b0:81:cb:3a:50:e2:f9:05:4e:05:d8:ee:84:2b:
                    8b:c2:3a:83:33:f6:9e:6b:c9:07:10:0c:72:ca:18:
                    d9:53:57:bd:73:ae:a5:4d:ed:9c:5c:ef:b9:f9:1b:
                    0a:53:db:d0:2b:c9:44:e1:dd:17:de:3d:c1:10:aa:
                    bf:b9:35:69:3f:b9:dd:f5:60:20:9e:1c:0f:27:0e:
                    4f:97:f0:d4:2d:d7:59:11:93:0a:ea:29:0a:50:b7:
                    fc:cf:0b:b9:6c:02:b0:4e:1e:36:05:0e:8f:13:3e:
                    dd:38:3d:ac:4f:56:72:cb:5a:77:db:75:c0:80:0a:
                    f9:84:92:14:37:fc:1c:4f:d3:53:07:b8:1b:ba:da:
                    86:b6:d6:bb:b9:41:5d:42:4d:cc:e6:c8:2a:67:bd:
                    6b:47:a3:8e:3f:9f:08:ee:0f:df:1b:68:8a:47:da:
                    3c:74:85:32:db:83:24:d5:52:81:3e:2f:81:92:14:
                    a9:b4:a2:e7:8f:43:f0:67:00:34:59:8c:58:19:08:
                    b2:d1:84:4c:2d:aa:4c:2c:b5:13:2c:31:4e:ff:f4:
                    78:fe:ee:c8:77:04:8d:a7:21:14:e4:c1:30:f1:c3:
                    c7:62:08:1d:5f:71:6c:ac:47:87:fc:0c:4a:d5:51:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:DC:4C:C6:21:69:47:C1:FF:12:B1:7F:E4:99:F2:11:1A:21:40
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BCLcTMYhaUfB_xKxf-SZ8hEaIUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:73:50:d7:64:9a:f7:8b:34:31:6f:eb:2c:12:09:cb:19:6f:
         15:3f:3e:83:ad:ac:d4:f7:94:c4:86:af:0e:de:34:ff:28:5e:
         74:c5:ed:5a:6f:0d:11:b6:9d:09:8d:82:a2:90:32:5b:e4:21:
         02:d7:93:45:47:f5:53:5b:94:2c:c2:8e:fb:1f:b6:7c:01:a3:
         07:db:ea:17:a5:eb:20:7e:7f:57:2f:ec:62:4a:04:d7:df:f5:
         8f:e2:a9:4a:a9:87:9e:02:8e:b1:59:1e:45:3c:fe:cb:69:7f:
         54:9f:2c:38:67:64:37:08:69:62:6d:61:9d:a2:77:4c:b5:4f:
         fb:2b:c4:17:09:67:a8:7e:bf:8d:20:88:0d:bf:f1:85:d0:86:
         0b:2d:61:d4:79:95:3e:46:d2:2f:f2:f4:6f:a7:b5:e7:52:df:
         5f:e6:cc:c8:e9:df:61:d1:9e:af:00:7a:05:ef:53:77:21:d3:
         e7:fe:64:01:48:21:4d:9c:ca:10:a8:4f:e5:16:5d:6e:81:48:
         64:7e:3f:82:c1:45:c7:5a:d4:0f:5f:ca:0a:68:cb:f0:63:8c:
         10:86:a8:fd:15:2a:2c:be:24:8a:e8:d6:0a:89:51:e9:f1:7e:
         d6:77:a9:20:81:f6:fc:8a:7f:28:58:47:da:c1:b0:18:a4:3e:
         13:2e:af:4b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECCnxrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
NzE2MzUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQyMmRjNGNjNjIx
Njk0N2MxZmYxMmIxN2ZlNDk5ZjIxMTFhMjE0MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVBwZ2UMxi3k0KZXyc6/LCByzpQ4vkFTgXY7oQri8I6gzP2
nmvJBxAMcsoY2VNXvXOupU3tnFzvufkbClPb0CvJROHdF949wRCqv7k1aT+53fVg
IJ4cDycOT5fw1C3XWRGTCuopClC3/M8LuWwCsE4eNgUOjxM+3Tg9rE9Wcstad9t1
wIAK+YSSFDf8HE/TUwe4G7rahrbWu7lBXUJNzObIKme9a0ejjj+fCO4P3xtoikfa
PHSFMtuDJNVSgT4vgZIUqbSi549D8GcANFmMWBkIstGETC2qTCy1EywxTv/0eP7u
yHcEjachFOTBMPHDx2IIHV9xbKxHh/wMStVRUSUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQEItxMxiFpR8H/ErF/5JnyERohQDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0JDTGNUTVloYVVmQl94S3hmLVNaOGhFYUlVQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBpc1DXZJr3izQxb+ssEgnLGW8VPz6DrazU95TE
hq8O3jT/KF50xe1abw0Rtp0JjYKikDJb5CEC15NFR/VTW5Qswo77H7Z8AaMH2+oX
pesgfn9XL+xiSgTX3/WP4qlKqYeeAo6xWR5FPP7LaX9Unyw4Z2Q3CGlibWGdondM
tU/7K8QXCWeofr+NIIgNv/GF0IYLLWHUeZU+RtIv8vRvp7XnUt9f5szI6d9h0Z6v
AHoF71N3IdPn/mQBSCFNnMoQqE/lFl1ugUhkfj+CwUXHWtQPX8oKaMvwY4wQhqj9
FSosviSK6NYKiVHp8X7Wd6kggfb8in8oWEfawbAYpD4TLq9L
-----END CERTIFICATE-----