Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FCJc-jp5qENKmyxZDN3Ri7VToR0.roa
File:                     FCJc-jp5qENKmyxZDN3Ri7VToR0.roa (raw, json)
Hash identifier:          gbzV35v36QozWrXOBbuKeVCNfFryyHwe7MGj9Cs/+IQ=
Subject key identifier:   14:22:5C:FA:3A:79:A8:43:4A:9B:2C:59:0C:DD:D1:8B:B5:53:A1:1D
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       056C7066
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FCJc-jp5qENKmyxZDN3Ri7VToR0.roa
Signing time:             Mon 28 Mar 2022 14:51:08 +0000
ROA not before:           Mon 28 Mar 2022 14:51:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90992742 (0x56c7066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 28 14:51:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=14225cfa3a79a8434a9b2c590cddd18bb553a11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:48:1c:f0:53:6d:a3:02:cc:e3:76:fe:e4:
                    26:f5:54:bc:4f:d9:5f:12:5b:eb:d6:38:ca:3a:ee:
                    1a:c5:a8:2e:57:a8:d7:f1:78:f7:b2:ee:1f:c7:7e:
                    d0:4f:a4:90:bf:d8:89:eb:39:dd:34:8d:bd:26:a3:
                    fd:93:7a:39:9a:37:4b:b5:9b:fa:a1:b6:79:b8:0f:
                    4d:10:4f:9a:43:c5:5e:4b:42:b8:eb:b7:c1:90:24:
                    1c:37:f6:a0:4b:84:98:48:0f:51:06:05:b6:f2:59:
                    79:14:55:f0:ff:67:03:81:92:0b:de:ba:73:5b:79:
                    55:d1:b2:8f:40:92:df:17:cf:c2:ea:96:e6:79:84:
                    81:3b:f8:1c:7b:9c:e8:0e:99:fe:96:28:b8:b8:0a:
                    f5:1e:12:8b:ac:ff:89:16:3f:77:3a:ef:6d:80:1d:
                    84:97:c6:88:8f:e1:fa:71:53:f4:54:af:af:c6:1f:
                    ba:45:7b:3e:b7:c8:4e:e0:1a:d2:85:ce:e7:7b:35:
                    ce:c3:5b:49:68:0a:9e:17:a1:9f:3d:4f:1e:06:47:
                    8a:36:48:61:93:45:f5:1b:89:6f:ce:1c:8a:6f:8d:
                    8e:28:8f:04:28:e2:28:7f:f0:d1:d7:05:fd:1d:47:
                    01:02:9c:d5:51:a4:42:43:a7:99:9a:bd:00:c7:c1:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:22:5C:FA:3A:79:A8:43:4A:9B:2C:59:0C:DD:D1:8B:B5:53:A1:1D
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FCJc-jp5qENKmyxZDN3Ri7VToR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:5e:68:7c:3d:12:cc:47:9f:87:7f:59:93:0a:d6:66:22:
         2d:0f:a8:33:ee:e3:12:08:ce:e4:b0:14:71:5b:2d:15:e1:10:
         d6:98:55:1e:7f:10:a9:3c:c0:8b:97:ec:6f:c9:21:75:5b:81:
         09:26:f3:f0:e5:11:34:0d:34:07:ad:5f:1a:8e:e7:cf:68:3c:
         cc:73:c9:75:60:ef:c9:c1:9e:ff:e1:72:9d:33:8e:9b:5f:97:
         91:09:c8:77:e9:70:b8:84:08:64:45:2a:b1:f8:dc:b6:9e:bb:
         ac:06:0a:42:37:0b:4d:b1:ce:16:96:3a:1b:ef:73:8f:6f:2d:
         46:7b:38:2b:98:66:f6:27:85:3a:99:f6:5e:24:31:90:41:b5:
         fa:d9:20:44:fc:de:d3:ac:1b:9e:85:f7:11:fd:63:f1:95:3c:
         71:7e:dd:c3:2a:1f:56:c8:b2:75:60:c3:dc:c5:d0:33:c6:77:
         c2:cc:a4:04:15:a2:02:7b:43:69:2f:09:1d:6f:f8:6f:b9:cc:
         91:a1:4e:24:9e:ba:6c:53:c6:a2:8b:dc:6d:2e:9b:8d:1e:3c:
         3b:89:2b:97:e9:eb:65:6d:55:21:e4:73:dd:1e:f4:f0:b1:df:
         a4:c3:ad:fd:85:ce:43:f2:92:05:96:d5:ab:5b:91:e6:03:f8:
         66:a3:26:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----