Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CPRBV76Ij4-AbFpcxMXOhzTBWeU.roa
File:                     CPRBV76Ij4-AbFpcxMXOhzTBWeU.roa (raw, json)
Hash identifier:          ROfWxMdNd/K4fGg0VU6Hn/ZrvohA/wgvDShDJMyql10=
Subject key identifier:   08:F4:41:57:BE:88:8F:8F:80:6C:5A:5C:C4:C5:CE:87:34:C1:59:E5
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0425ABE9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CPRBV76Ij4-AbFpcxMXOhzTBWeU.roa
Signing time:             Sun 13 Feb 2022 17:40:21 +0000
ROA not before:           Sun 13 Feb 2022 17:40:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69577705 (0x425abe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 13 17:40:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08f44157be888f8f806c5a5cc4c5ce8734c159e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:10:7e:eb:66:c6:ab:a4:f2:b6:6d:21:7c:
                    16:3e:c1:7e:22:cd:9c:2a:3e:d5:bb:01:f0:5d:a8:
                    25:c0:af:97:fd:7b:fa:07:c0:03:13:07:f1:a5:bf:
                    ed:a2:fc:db:5a:af:0c:ba:e2:8f:80:ec:93:96:70:
                    2e:4e:54:ce:05:2f:f8:05:82:93:41:b0:ad:41:17:
                    c6:f2:9c:95:c2:b7:27:8e:fb:39:6f:c7:c8:f3:98:
                    1a:4d:4c:1e:6f:21:a2:4a:9c:95:db:e4:dc:c1:61:
                    df:20:26:3c:e5:fe:c5:19:8d:71:96:6f:ae:57:e9:
                    4d:8e:3c:48:1d:2e:64:1a:31:29:0c:69:fe:7f:9c:
                    53:62:6d:ff:8e:c3:37:82:be:65:01:fd:30:96:13:
                    8c:6c:40:e4:e6:f8:0b:a0:89:2a:37:63:16:2c:c9:
                    97:39:44:4d:79:b4:51:0f:6a:cc:75:9e:20:fe:39:
                    e5:03:e1:67:2d:31:67:2a:f7:39:ad:f8:3d:44:95:
                    a5:e4:35:90:ff:f4:ca:a4:67:98:13:67:12:59:9d:
                    3d:b0:06:e1:ca:68:b7:28:f9:cc:35:5a:f5:72:72:
                    f8:8e:4d:e1:bd:f3:d3:f8:9f:89:f0:c5:2d:5f:f3:
                    f9:82:0f:65:7f:4d:b1:2a:e8:fc:b3:79:57:80:d3:
                    49:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F4:41:57:BE:88:8F:8F:80:6C:5A:5C:C4:C5:CE:87:34:C1:59:E5
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CPRBV76Ij4-AbFpcxMXOhzTBWeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:66:3d:2c:a2:be:38:19:0a:49:8e:42:a0:85:38:61:14:56:
         4d:03:a2:cf:c4:66:07:16:66:80:16:eb:3a:9d:90:ff:5a:1d:
         b9:65:91:95:a3:55:83:9c:15:2c:b6:d6:27:7b:0c:04:5d:ed:
         d5:74:48:4c:31:28:24:6c:77:a6:94:be:57:08:a2:24:c7:10:
         cf:03:09:5f:eb:bf:e7:ed:9e:c2:13:e6:02:ef:b9:26:1b:3d:
         66:6e:f3:68:79:2c:88:9a:c5:74:38:4b:d1:4a:e2:d3:48:9b:
         27:b5:76:67:fe:a9:46:15:6d:eb:e6:37:e2:76:53:e9:9d:23:
         36:e3:ca:d2:35:65:a8:af:2b:81:6a:2a:85:fe:40:b3:26:5e:
         3e:64:16:d3:ab:be:24:fa:c2:e9:58:31:2f:e4:37:76:32:49:
         4e:61:62:7a:e6:3f:10:8d:82:50:00:81:54:17:5c:eb:e5:75:
         d4:da:a8:1b:11:51:34:17:f2:4d:ed:c5:5c:48:82:28:af:5a:
         95:cb:f8:2d:3a:f2:3e:e3:c0:a0:10:ea:cc:89:73:dd:8a:69:
         e5:4f:65:bd:fa:5f:ea:ed:24:87:75:60:e6:1d:76:06:5f:5b:
         76:11:fb:b5:bc:94:41:85:c3:2d:fd:e5:bf:68:c4:86:25:d9:
         ed:5c:4d:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBCWr6TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIx
MzE3NDAyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhmNDQxNTdiZTg4
OGY4ZjgwNmM1YTVjYzRjNWNlODczNGMxNTllNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK2JEH7rZsarpPK2bSF8Fj7BfiLNnCo+1bsB8F2oJcCvl/17
+gfAAxMH8aW/7aL821qvDLrij4Dsk5ZwLk5UzgUv+AWCk0GwrUEXxvKclcK3J477
OW/HyPOYGk1MHm8hokqcldvk3MFh3yAmPOX+xRmNcZZvrlfpTY48SB0uZBoxKQxp
/n+cU2Jt/47DN4K+ZQH9MJYTjGxA5Ob4C6CJKjdjFizJlzlETXm0UQ9qzHWeIP45
5QPhZy0xZyr3Oa34PUSVpeQ1kP/0yqRnmBNnElmdPbAG4cpotyj5zDVa9XJy+I5N
4b3z0/ififDFLV/z+YIPZX9NsSro/LN5V4DTSZcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQI9EFXvoiPj4BsWlzExc6HNMFZ5TAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0NQUkJWNzZJajQtQWJGcGN4TVhPaHpUQldlVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBmZj0sor44GQpJjkKghThhFFZNA6LPxGYHFmaA
Fus6nZD/Wh25ZZGVo1WDnBUsttYnewwEXe3VdEhMMSgkbHemlL5XCKIkxxDPAwlf
67/n7Z7CE+YC77kmGz1mbvNoeSyImsV0OEvRSuLTSJsntXZn/qlGFW3r5jfidlPp
nSM248rSNWWoryuBaiqF/kCzJl4+ZBbTq74k+sLpWDEv5Dd2MklOYWJ65j8QjYJQ
AIFUF1zr5XXU2qgbEVE0F/JN7cVcSIIor1qVy/gtOvI+48CgEOrMiXPdimnlT2W9
+l/q7SSHdWDmHXYGX1t2Efu1vJRBhcMt/eW/aMSGJdntXE2F
-----END CERTIFICATE-----