Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa
File:                     HfnmE5lSxejTL9_YSQCXBNuiOq0.roa (raw, json)
Hash identifier:          sriZttQRxyLCKpaiFAjUL/Sx+tR/abSdZ8ZtD+xofvE=
Subject key identifier:   1D:F9:E6:13:99:52:C5:E8:D3:2F:DF:D8:49:00:97:04:DB:A2:3A:AD
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03D60343
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa
Signing time:             Thu 03 Feb 2022 12:14:28 +0000
ROA not before:           Thu 03 Feb 2022 12:14:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64357187 (0x3d60343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  3 12:14:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1df9e6139952c5e8d32fdfd849009704dba23aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:49:aa:38:dc:db:66:40:2c:a2:4f:c3:37:
                    ab:3b:f9:4d:64:ef:87:c4:e2:29:0c:08:c4:40:4d:
                    e6:05:bf:2b:5b:82:85:a7:06:80:a5:52:97:0c:92:
                    34:eb:fb:28:fe:27:52:b9:c7:2d:85:0b:93:4d:40:
                    e4:a3:51:68:e1:6f:2b:46:7f:66:81:9a:6a:cf:76:
                    46:01:3e:97:39:c4:b5:93:b4:3a:ce:ed:b2:3d:35:
                    5c:82:c6:0b:bc:c6:b6:a9:95:45:2f:b1:42:53:88:
                    8e:75:d7:49:ec:18:6e:83:28:4a:42:ce:f0:0f:01:
                    1c:92:56:11:89:96:28:7b:61:bd:e1:38:e9:43:e2:
                    aa:b7:b2:37:d6:fa:41:d0:07:cc:99:2d:85:87:17:
                    ac:4a:c4:7a:f9:37:e1:8e:14:5a:03:fa:e3:55:b0:
                    45:70:6d:4e:44:b2:04:75:2b:d5:4d:8d:04:97:3a:
                    f8:7b:fe:1f:27:22:81:f8:0a:73:56:f0:a8:6d:ab:
                    c4:2f:25:7c:ae:bb:12:2e:f5:9d:e0:8b:f7:c9:35:
                    59:88:fb:a3:dc:18:0b:fc:68:c6:ac:be:a4:33:20:
                    ec:e0:11:73:6a:46:a7:3f:1c:10:9d:e0:0b:db:1f:
                    ec:d6:3e:c9:dd:da:54:c0:f0:c1:30:21:27:da:f3:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F9:E6:13:99:52:C5:E8:D3:2F:DF:D8:49:00:97:04:DB:A2:3A:AD
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HfnmE5lSxejTL9_YSQCXBNuiOq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:93:c0:05:38:6b:30:7f:65:e4:68:27:e8:c5:4f:0a:38:
         3a:7d:28:3b:b6:02:fa:c7:38:c4:97:47:12:e5:ba:a8:49:07:
         c6:90:2e:c1:f0:44:c4:fd:cb:5c:0d:9f:d6:c8:ba:11:24:af:
         c0:b9:c9:2b:f0:4a:82:5d:29:80:1e:ed:c4:94:ed:15:88:e7:
         91:89:a9:ac:ff:4f:c8:95:ff:6b:c5:94:e5:e6:d1:8b:3e:2f:
         22:0b:c0:a7:50:ab:1f:68:c5:2c:d9:7a:6a:cc:68:61:40:73:
         53:2d:b5:be:6d:0a:49:ba:63:77:84:60:0e:8b:24:e4:47:9d:
         97:01:d6:22:c9:e3:68:8e:37:ac:97:f1:ef:70:d0:5e:10:94:
         aa:9f:7f:bf:c1:7a:ad:ec:d6:f8:b3:70:ec:69:66:0c:d9:5e:
         9a:98:06:30:ab:01:f7:21:d9:5a:9a:8c:ef:52:88:4c:b6:a5:
         fa:6d:31:a8:dc:39:d6:fb:0c:3e:8c:93:eb:ea:55:b8:57:c9:
         92:d1:d8:17:7a:1d:b0:e4:26:6c:57:e1:2e:b9:9d:80:2a:e9:
         17:46:6f:47:87:dc:08:b2:7f:d1:15:3e:f4:dc:0d:32:15:ad:
         35:07:0b:89:65:67:39:e5:35:7c:37:48:58:a0:cf:36:5c:84:
         64:20:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----