Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa
File:                     CJJiI7Mu2G46Xfke89V-ebteNYM.roa (raw, json)
Hash identifier:          tBn14ryetv4z+FhoHqCZ5RpGnBf4xCO5+KFBSzCCURc=
Subject key identifier:   08:92:62:23:B3:2E:D8:6E:3A:5D:F9:1E:F3:D5:7E:79:BB:5E:35:83
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181CEF275FDD4493E4207587625BA18C3CD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa
Signing time:             Tue 05 Jul 2022 15:20:05 +0000
ROA not before:           Tue 05 Jul 2022 15:20:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ce:f2:75:fd:d4:49:3e:42:07:58:76:25:ba:18:c3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  5 15:20:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08926223b32ed86e3a5df91ef3d57e79bb5e3583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:5e:6f:88:39:fb:73:cd:4d:b8:96:96:a4:
                    c5:1c:dc:00:79:d9:6a:71:09:19:08:80:36:75:11:
                    cc:5b:c6:9d:94:97:dd:86:ef:3e:e7:16:fa:06:b3:
                    b3:f5:1b:25:6a:a9:fb:e9:bb:d9:67:c5:64:05:2e:
                    f2:19:e1:9f:c6:3d:5e:fc:60:e8:0f:38:d7:c0:ae:
                    21:cd:e8:d6:5a:55:8a:54:85:e3:0f:9a:28:12:4c:
                    6c:d7:01:62:e0:56:51:5b:b7:78:a3:8c:a0:61:5c:
                    2b:3f:99:49:92:eb:14:ac:cd:b0:23:5e:70:20:4a:
                    8b:99:3d:c5:56:5b:d0:ae:b4:7e:63:f8:0e:db:d3:
                    b6:df:6d:dc:5d:88:50:a4:b1:70:46:c9:40:80:3d:
                    5f:60:6a:0d:fc:2f:55:57:fb:29:f9:34:47:09:a4:
                    87:83:2e:b9:db:98:2b:b0:a2:c4:2e:b5:ac:d1:6e:
                    b5:ae:2b:f0:b2:a1:97:f3:f8:6f:fc:86:dd:c7:95:
                    7a:21:e4:37:26:fd:c0:9e:d7:1d:6e:91:5f:b6:3d:
                    81:fd:7d:18:ef:cc:bd:4a:f3:b7:3e:0d:7e:4a:1e:
                    7a:0f:61:b2:3b:6b:7d:8c:2c:71:c0:d5:ed:0d:0c:
                    48:dc:84:15:92:a4:31:88:91:4e:32:76:a9:ad:39:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:92:62:23:B3:2E:D8:6E:3A:5D:F9:1E:F3:D5:7E:79:BB:5E:35:83
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CJJiI7Mu2G46Xfke89V-ebteNYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:88:1e:f1:6b:96:b6:bf:e7:79:1c:74:e0:3b:37:92:b8:b7:
         ed:12:2c:da:a2:a7:2e:93:75:f0:3d:c0:b0:ff:2e:20:50:b1:
         b2:d3:e9:13:e2:c6:95:b1:9d:55:c0:fd:7b:dc:b1:00:79:b0:
         0e:cd:da:33:0e:52:eb:da:b3:e9:19:78:e5:ff:2d:48:81:db:
         a7:5f:01:5b:07:23:a7:ef:8f:2c:c7:a6:2a:cd:25:d9:ac:3b:
         2d:6f:e0:79:09:fd:08:ce:5d:ce:8b:d9:ae:05:5f:ef:f8:0b:
         c0:c1:5e:57:88:a3:3b:7d:19:fb:fe:af:91:de:40:de:da:e4:
         ac:ab:be:88:e5:eb:ad:24:0b:43:6f:45:b4:73:2b:ee:26:3e:
         26:87:52:65:44:ba:b5:64:9d:0b:30:49:64:2b:82:6b:5c:fc:
         d4:03:1b:85:d0:38:88:e7:ec:ad:d7:95:08:63:d9:37:ad:85:
         fe:b8:e8:16:46:12:5b:09:71:38:92:68:8d:73:75:94:33:a4:
         f3:9b:2c:25:c3:77:95:5e:9b:b1:f3:9e:2b:b8:92:db:60:a9:
         d7:3a:c8:98:0a:87:d8:0e:50:9f:8d:3b:0e:fe:65:0c:46:cd:
         97:80:e2:da:ae:31:cb:b4:28:cf:03:fb:b1:95:86:83:16:f1:
         74:c3:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----