Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa
File:                     Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa (raw, json)
Hash identifier:          zr/xt2nMw2fnnDGl+0lULneShWdsfd6Hkw9so8yUoQE=
Subject key identifier:   0A:07:20:B1:CF:CD:54:35:08:71:EC:61:FB:53:F0:97:05:5D:C1:BB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       042B018E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa
Signing time:             Mon 14 Feb 2022 04:21:53 +0000
ROA not before:           Mon 14 Feb 2022 04:21:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69927310 (0x42b018e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 14 04:21:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a0720b1cfcd54350871ec61fb53f097055dc1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:57:c0:69:64:41:4a:15:43:99:d2:df:79:
                    07:c2:40:66:69:08:4d:4e:da:8e:44:0e:e8:68:0d:
                    59:c6:fd:5c:03:67:6f:73:28:b0:8c:b2:5c:8b:89:
                    da:43:29:7f:58:eb:9c:c7:97:03:9c:82:18:06:d7:
                    01:96:27:3e:80:1b:b5:68:27:12:59:bd:9f:2b:f6:
                    fc:45:44:03:47:ae:ca:0d:bc:83:68:33:dc:07:7d:
                    19:a9:ca:6f:f1:78:2b:4a:ce:db:28:56:3d:e7:db:
                    0d:67:1f:b8:c2:65:2a:f4:44:68:58:72:bc:1a:73:
                    2e:b1:20:a7:55:26:77:01:5d:77:55:18:d6:d0:fa:
                    6a:98:eb:10:e2:31:bc:9c:11:08:fc:1d:0e:f8:ae:
                    32:03:78:d7:04:82:f3:1e:25:56:de:cd:44:b8:74:
                    5d:ff:e2:cf:ea:d7:f6:d8:cb:a9:af:1b:c3:17:f7:
                    50:25:fb:72:46:12:3a:4d:30:59:14:ad:6c:29:fa:
                    3c:b2:cb:7e:24:3b:c1:c9:32:ba:69:49:d3:a0:b5:
                    42:ac:db:e3:0d:cd:9f:a2:f1:7d:ea:7c:eb:e6:78:
                    ba:ca:7b:3f:a8:ae:8e:dd:a6:ad:4c:4c:af:45:05:
                    be:e9:99:73:f2:51:f5:ec:ec:38:67:10:92:91:05:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:07:20:B1:CF:CD:54:35:08:71:EC:61:FB:53:F0:97:05:5D:C1:BB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:70:21:22:72:6b:0c:21:a2:29:e9:9e:59:9f:3f:5f:94:
         5d:ea:79:33:a7:6e:62:e2:eb:4a:af:8d:0b:c6:66:0d:bb:15:
         d9:8d:52:03:5a:2b:04:03:dc:57:d9:2d:aa:17:48:35:2d:76:
         b8:8d:94:bf:69:32:51:cb:1a:08:0b:8c:f2:c5:cc:04:88:57:
         5f:dc:ed:36:6b:e7:03:6a:ec:ed:32:1a:f8:0a:6b:68:46:06:
         df:69:97:6c:8e:8c:d4:25:53:89:fa:81:49:d9:a1:2a:96:c5:
         8d:d6:48:b0:47:e9:62:55:4c:52:86:12:78:e9:4d:7c:3e:a8:
         21:e4:08:18:43:7b:37:37:0f:c9:14:51:e9:17:a3:46:3a:8d:
         32:9a:2b:62:0a:dd:19:7f:24:7b:73:86:00:5a:60:8e:cf:5c:
         04:ce:7c:5c:5d:64:8c:76:1f:c3:c0:45:80:b4:d6:be:5b:e3:
         75:06:14:ee:06:95:0b:be:93:27:89:e8:ad:7b:0d:ea:55:fa:
         19:c2:98:65:40:85:e2:02:8c:00:67:e2:6d:60:f3:2d:3b:b7:
         70:81:49:f4:f4:23:a6:13:56:b1:37:81:de:bf:d2:18:4a:24:
         86:26:77:fa:75:48:43:7c:67:41:5b:df:e4:a9:e5:ae:12:f4:
         a6:a7:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----