Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChYJBQi66cl3h989hGsDRV4p4W8.roa
File:                     ChYJBQi66cl3h989hGsDRV4p4W8.roa (raw, json)
Hash identifier:          6g8+tFH0npqt//jQ226sMfdUSuUnbWJVUXvKhlrb+4g=
Subject key identifier:   0A:16:09:05:08:BA:E9:C9:77:87:DF:3D:84:6B:03:45:5E:29:E1:6F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04ABA2E5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChYJBQi66cl3h989hGsDRV4p4W8.roa
Signing time:             Thu 03 Mar 2022 02:41:20 +0000
ROA not before:           Thu 03 Mar 2022 02:41:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78357221 (0x4aba2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar  3 02:41:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0a16090508bae9c97787df3d846b03455e29e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:91:af:b7:af:9d:72:e5:38:53:3e:9a:ec:
                    1c:8b:85:ad:ad:3c:58:54:e9:a7:54:39:8a:7a:38:
                    bc:14:5a:f9:ed:6a:75:c0:64:3b:2d:53:e0:40:e8:
                    53:fa:7c:37:87:d2:c1:b3:70:b7:fd:96:07:30:fc:
                    06:fb:ee:b0:07:09:4e:f9:18:65:f2:7c:fe:d5:1c:
                    35:20:7b:c0:64:01:10:0e:3e:f3:ca:9c:9c:e4:4b:
                    91:13:4a:d5:39:96:26:cb:a4:36:bb:62:e3:eb:01:
                    42:f9:ee:aa:ff:ec:0d:0c:71:93:ee:98:ee:4b:e7:
                    9e:b1:42:84:b2:95:90:a9:d6:e8:1d:72:22:d0:ae:
                    94:be:7f:76:7c:77:0c:62:c6:ab:8d:ae:c6:2a:95:
                    b9:15:d0:1d:de:62:e0:1e:15:93:7d:48:1b:6c:88:
                    0b:be:67:93:f4:09:9c:ec:95:d0:52:b5:97:af:6d:
                    5e:dc:7a:b5:0e:36:53:a5:e8:80:2b:61:36:15:6d:
                    5f:b8:b5:f0:21:2e:ff:45:92:6d:f9:57:95:1a:21:
                    17:07:0d:7e:02:b7:da:f2:b6:67:31:08:cc:11:26:
                    9f:af:2b:90:c2:71:ca:29:88:c6:e7:f7:b4:fb:ee:
                    11:aa:a8:44:7e:95:f5:c1:85:ea:84:98:c9:6f:06:
                    25:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:09:05:08:BA:E9:C9:77:87:DF:3D:84:6B:03:45:5E:29:E1:6F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ChYJBQi66cl3h989hGsDRV4p4W8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:75:c0:10:ae:78:bd:12:72:5a:73:98:78:69:43:1a:12:
         1b:8c:92:7f:f1:9a:06:be:a7:2b:f0:07:9f:a0:6f:82:24:f2:
         c0:5f:fc:d4:60:79:9a:17:72:a0:56:a3:48:20:b3:8a:73:87:
         aa:32:3a:ed:5b:89:5c:f2:52:fa:9b:52:2c:37:d6:da:a4:28:
         83:23:15:85:ed:3a:02:85:70:0a:ba:da:d6:0d:0a:35:cf:0f:
         8a:50:15:9b:db:f5:6a:ab:7e:c6:61:61:b0:40:98:05:28:3e:
         18:b8:9e:69:36:79:07:d8:1e:27:f6:3b:2e:72:d3:8d:43:b5:
         2d:e9:7a:b3:45:d0:a6:97:7a:c1:00:80:8c:ab:f4:30:cd:0c:
         60:71:2d:04:65:64:0d:7e:83:f7:b0:8d:d1:e3:b7:bb:75:56:
         17:25:9c:51:7f:8e:03:22:9f:c4:dd:9d:f4:6f:9b:88:87:a3:
         cb:d5:dc:9d:f5:ea:a8:7e:8f:a0:55:5f:f8:5a:46:c3:3b:c2:
         e0:81:97:d9:d8:13:4d:12:6c:86:f8:3f:db:d2:59:36:7b:b5:
         9d:0d:7a:0f:12:58:7e:23:5b:5c:a3:85:dc:40:0a:af:e7:18:
         27:a8:92:f1:fd:ad:64:47:9f:48:68:0f:90:4a:3d:1e:6b:e8:
         df:a2:ec:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----