Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GGWyC2UaZbe80OOqKp0FP_3OvC4.roa
File:                     GGWyC2UaZbe80OOqKp0FP_3OvC4.roa (raw, json)
Hash identifier:          ncLRTIB+9oGn+cOylWtvquoL+s0cHYNKmbvHG4n+PlQ=
Subject key identifier:   18:65:B2:0B:65:1A:65:B7:BC:D0:E3:AA:2A:9D:05:3F:FD:CE:BC:2E
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04F4AF27
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GGWyC2UaZbe80OOqKp0FP_3OvC4.roa
Signing time:             Sat 12 Mar 2022 02:04:33 +0000
ROA not before:           Sat 12 Mar 2022 02:04:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83144487 (0x4f4af27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 12 02:04:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1865b20b651a65b7bcd0e3aa2a9d053ffdcebc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:90:81:f4:06:3f:c4:bb:64:55:ef:ad:46:
                    21:df:69:42:04:e7:b9:27:b3:e1:78:e5:c4:55:ae:
                    86:0e:bf:a9:25:78:72:d6:e0:85:d0:ce:ae:ea:8b:
                    45:52:3e:b5:a2:46:76:8c:4a:b7:ee:22:2b:4d:50:
                    5d:fe:f2:69:22:1b:59:4e:4e:be:12:0d:4d:cf:1c:
                    0c:8d:69:3d:cd:a1:f4:3a:95:08:db:7a:16:1c:c9:
                    c1:fb:4f:bc:03:83:cf:8b:2a:e0:42:e1:79:7b:d9:
                    7e:70:57:b4:db:51:22:73:2d:82:67:75:77:65:39:
                    d9:df:4a:99:a5:3b:d2:48:06:f4:6e:6c:74:a1:c3:
                    51:43:55:e2:5d:8a:37:c5:05:62:de:96:41:96:8b:
                    a7:a3:7d:85:a7:77:7b:b5:a4:20:1a:95:5f:1e:1a:
                    28:74:e9:cc:25:81:ce:45:14:e9:19:ee:eb:76:be:
                    c9:95:3e:cf:9f:a6:e8:ad:e3:82:8d:6b:be:5a:27:
                    a9:37:7f:e1:5e:74:9d:11:fa:1e:c1:d7:e3:66:80:
                    9e:3b:38:0e:c3:84:08:c6:c4:f1:a4:be:85:45:f1:
                    4c:40:2d:f5:92:60:db:3d:f2:bf:e4:df:5e:45:39:
                    13:cd:ac:83:47:c0:b4:35:0d:f9:0a:19:ce:92:7d:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:B2:0B:65:1A:65:B7:BC:D0:E3:AA:2A:9D:05:3F:FD:CE:BC:2E
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GGWyC2UaZbe80OOqKp0FP_3OvC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:48:71:6f:37:fc:5d:e7:f1:36:83:f5:1e:b7:d8:31:bf:
         97:30:55:47:24:29:7c:39:a7:6f:aa:3d:ba:83:c7:21:84:93:
         c0:94:33:01:87:03:5e:d4:35:db:f1:b9:74:77:db:ac:ba:45:
         52:5a:77:3a:f9:a1:a6:1b:04:de:0c:52:39:15:0c:f0:2a:d2:
         18:9e:bd:4c:5a:e8:de:f0:1b:e2:b3:66:e1:91:59:5d:4d:76:
         6a:5f:c2:bf:66:30:45:56:f6:5e:85:9d:d2:83:e9:c8:a0:e4:
         5e:0d:1d:1b:34:87:cc:ed:3b:14:b0:aa:fc:23:6f:47:0f:9e:
         f7:d5:6c:7f:b3:a0:98:10:9c:27:c5:5b:7e:ca:e7:6c:e1:1a:
         c9:ad:3d:81:33:41:44:a2:2a:7d:85:de:e8:30:da:93:c9:bf:
         be:63:2b:32:35:f6:0c:fa:e0:3c:36:59:e3:32:a9:c4:47:fe:
         8b:22:40:a5:5b:54:06:ca:82:1c:65:07:b0:b2:99:f7:ea:1b:
         76:1e:2c:d6:a1:21:a0:12:24:6c:ee:bf:4e:31:d7:7c:2b:3d:
         f5:5f:40:61:1b:61:41:9e:62:69:6d:71:3f:79:12:85:7e:ef:
         c3:49:c1:fc:1a:9c:2f:e5:b3:c5:f0:7c:80:61:b3:c1:82:90:
         12:ef:a1:a1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBPSvJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMx
MjAyMDQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTg2NWIyMGI2NTFh
NjViN2JjZDBlM2FhMmE5ZDA1M2ZmZGNlYmMyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMwUkIH0Bj/Eu2RV761GId9pQgTnuSez4XjlxFWuhg6/qSV4
ctbghdDOruqLRVI+taJGdoxKt+4iK01QXf7yaSIbWU5OvhINTc8cDI1pPc2h9DqV
CNt6FhzJwftPvAODz4sq4ELheXvZfnBXtNtRInMtgmd1d2U52d9KmaU70kgG9G5s
dKHDUUNV4l2KN8UFYt6WQZaLp6N9had3e7WkIBqVXx4aKHTpzCWBzkUU6Rnu63a+
yZU+z5+m6K3jgo1rvlonqTd/4V50nRH6HsHX42aAnjs4DsOECMbE8aS+hUXxTEAt
9ZJg2z3yv+TfXkU5E82sg0fAtDUN+QoZzpJ9EDkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQYZbILZRplt7zQ46oqnQU//c68LjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0dHV3lDMlVhWmJlODBPT3FLcDBGUF8zT3ZDNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAS90hxbzf8XefxNoP1HrfYMb+XMFVHJCl8Oadv
qj26g8chhJPAlDMBhwNe1DXb8bl0d9usukVSWnc6+aGmGwTeDFI5FQzwKtIYnr1M
Wuje8Bvis2bhkVldTXZqX8K/ZjBFVvZehZ3Sg+nIoOReDR0bNIfM7TsUsKr8I29H
D5731Wx/s6CYEJwnxVt+yuds4RrJrT2BM0FEoip9hd7oMNqTyb++YysyNfYM+uA8
NlnjMqnER/6LIkClW1QGyoIcZQewspn36ht2HizWoSGgEiRs7r9OMdd8Kz31X0Bh
G2FBnmJpbXE/eRKFfu/DScH8Gpwv5bPF8HyAYbPBgpAS76Gh
-----END CERTIFICATE-----