Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa
File:                     FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa (raw, json)
Hash identifier:          NcNlq3lyunc9AvJHLnZIVDqAnlB/yRGPKwhqzJNfCSc=
Subject key identifier:   16:50:DF:40:3F:E3:10:19:EB:35:BD:5C:17:D3:1C:D1:FC:47:7C:98
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       067720E4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa
Signing time:             Wed 04 May 2022 15:06:33 +0000
ROA not before:           Wed 04 May 2022 15:06:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108470500 (0x67720e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  4 15:06:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1650df403fe31019eb35bd5c17d31cd1fc477c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:28:66:41:c8:b2:e5:d0:3e:9d:b3:30:81:
                    67:de:4b:97:ca:dd:0c:55:d5:79:cf:e9:27:fb:05:
                    73:8e:8f:69:63:20:4e:d0:11:d1:8f:59:77:b7:19:
                    42:c7:6a:5c:3f:6a:0b:ee:bf:fc:4d:88:42:7d:6c:
                    19:85:c7:6f:08:ba:a0:53:58:16:dc:11:29:f5:78:
                    1c:c3:58:fc:e8:e2:d7:2f:a0:9c:ef:99:c0:5b:83:
                    32:59:0a:2a:a9:78:45:f0:d8:e1:86:82:68:fd:f5:
                    dd:d7:20:b8:03:8f:b4:69:7c:30:83:8f:24:2d:c6:
                    b5:25:82:b4:9b:16:76:33:b9:9b:3b:86:ef:4c:8e:
                    d9:2b:f8:21:95:10:c2:8b:a8:da:c6:9a:e5:c9:84:
                    f5:98:b0:53:8e:52:93:1f:90:cd:50:20:49:2e:52:
                    8b:ac:a7:13:2b:75:80:0a:09:e9:f0:a4:48:12:93:
                    18:a4:41:70:22:11:d5:0f:35:44:76:d1:2e:9d:2f:
                    52:8f:62:5d:fb:74:3d:0c:59:7f:d2:13:cf:07:22:
                    10:8c:a9:95:16:db:a5:2b:7f:75:92:86:75:fe:6c:
                    97:ab:6a:25:77:f2:ee:88:79:2a:e6:00:cc:44:39:
                    a5:07:ac:5c:e2:47:1f:1e:0d:60:19:48:cb:37:eb:
                    d3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:DF:40:3F:E3:10:19:EB:35:BD:5C:17:D3:1C:D1:FC:47:7C:98
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:5b:03:55:4c:92:14:42:0d:aa:ec:3e:fc:71:1d:8e:48:
         33:37:8a:47:f5:ad:56:0d:48:8e:65:fe:a8:86:a0:a4:c0:81:
         99:6b:4e:27:4a:51:97:ef:9f:c8:21:50:0d:9a:c5:16:65:ff:
         a5:6c:62:49:ff:c6:62:09:38:10:ef:84:e0:81:84:eb:cb:0c:
         7e:ad:d7:9b:c8:d5:70:7f:8f:22:c0:82:1c:3e:ab:69:d7:c6:
         dd:18:6d:ea:6a:6b:11:2a:8e:c5:70:16:1e:06:f1:cd:45:e6:
         ce:ed:5a:5d:09:31:e4:e4:77:ee:cb:37:c7:4d:47:a8:37:bf:
         4e:07:c4:16:d4:9c:6d:37:26:06:8f:55:be:37:e4:c9:9c:68:
         cc:b5:8e:52:38:1e:03:61:8a:70:f1:81:43:12:5b:01:d8:ba:
         c3:99:2f:18:f3:10:1f:49:d3:74:e5:d3:0e:3c:d4:40:1f:62:
         5e:bb:d3:69:88:dd:df:7c:1f:ed:a7:1f:5c:86:31:0b:43:84:
         51:10:a9:f9:55:5c:da:40:38:dc:65:fe:94:e3:88:89:69:f8:
         b2:93:21:17:d3:8b:77:ce:b7:58:8f:d7:06:1d:4d:a8:ea:b5:
         f5:05:3a:e6:1e:13:26:33:a8:be:df:45:6f:47:64:7a:24:a1:
         1e:90:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----