Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IR0nwN7ONnLQLvP-b00tuuHKAtA.roa
File:                     IR0nwN7ONnLQLvP-b00tuuHKAtA.roa (raw, json)
Hash identifier:          VsBi4u/zHWghrXEbwq6kfM7Wkcf0fsuWrwened1+9ek=
Subject key identifier:   21:1D:27:C0:DE:CE:36:72:D0:2E:F3:FE:6F:4D:2D:BA:E1:CA:02:D0
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05B698C8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IR0nwN7ONnLQLvP-b00tuuHKAtA.roa
Signing time:             Fri 08 Apr 2022 05:24:55 +0000
ROA not before:           Fri 08 Apr 2022 05:24:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95852744 (0x5b698c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr  8 05:24:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=211d27c0dece3672d02ef3fe6f4d2dbae1ca02d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:39:41:a1:25:e8:36:59:b0:9e:ca:10:51:
                    72:5d:89:fc:38:36:02:ac:c8:36:a1:db:bd:79:84:
                    2b:48:1c:d6:7c:65:fb:63:18:1e:10:70:80:17:ca:
                    db:04:a4:ca:aa:c5:ac:0f:ae:99:cc:90:c0:d0:e9:
                    6b:fa:fd:b0:13:d4:b5:85:7a:92:84:69:5a:9b:ef:
                    ae:b1:9d:31:fc:f7:1b:5f:e9:8d:f2:46:08:8a:e2:
                    4c:1b:c5:c1:c5:f7:f8:c1:fa:73:60:32:53:0f:f7:
                    5c:92:48:73:7e:3e:10:af:36:e6:45:c2:8c:60:59:
                    4f:09:02:94:3d:9f:ed:03:94:92:63:d9:68:ee:f8:
                    d1:1e:20:e3:bb:cf:4a:8f:08:8e:0d:17:6c:9c:7a:
                    79:7e:02:8e:ff:02:e7:f9:41:66:15:53:7a:c3:82:
                    79:9b:69:54:e5:14:d3:9e:7c:61:aa:7e:be:10:16:
                    bc:91:8f:4c:b6:f9:1d:dd:3d:be:f3:42:4b:06:56:
                    4d:7d:a6:14:ce:2c:fc:98:c4:56:c8:53:7e:df:2f:
                    0e:04:52:49:95:6d:64:de:ae:22:76:14:d4:a2:f0:
                    35:cd:82:2b:bf:77:03:93:ec:c9:09:03:b4:36:2d:
                    0a:63:ed:dc:71:5a:4d:b8:cc:9f:31:ea:83:87:44:
                    a0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1D:27:C0:DE:CE:36:72:D0:2E:F3:FE:6F:4D:2D:BA:E1:CA:02:D0
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IR0nwN7ONnLQLvP-b00tuuHKAtA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:b5:62:4c:29:7c:fc:63:57:fb:30:d6:79:b0:9e:e6:39:
         74:de:ee:eb:0c:20:be:65:a5:43:4a:f7:12:ab:c0:81:8d:02:
         db:1d:90:e8:15:5d:e5:33:ba:cb:dc:af:91:5f:bc:ea:66:90:
         3f:53:ac:a8:dd:60:84:40:20:57:3b:fc:da:90:75:b9:0f:9f:
         8b:b4:8a:f1:b8:ef:80:d6:f0:19:a5:ac:0a:51:3e:e2:68:84:
         0f:ca:46:aa:e6:04:fe:af:3b:01:4d:98:ca:d8:5e:24:15:8e:
         7d:20:af:64:45:bc:f1:61:07:67:88:6b:13:21:28:fb:cb:5d:
         0c:ef:8b:0e:85:f1:88:62:1d:a8:1c:32:b0:75:2d:95:89:c5:
         29:b2:1c:fc:e3:17:2b:a8:c2:20:40:b5:77:73:63:cf:1f:53:
         0b:d7:c2:da:05:0d:45:ca:76:d9:fe:9c:8a:40:19:a8:c5:1d:
         23:30:b0:ab:7f:cd:04:73:9f:67:31:e7:1a:71:8d:30:5d:13:
         3f:4f:26:c0:8c:00:11:90:eb:b4:2e:8e:15:42:0d:68:07:f6:
         7f:48:bc:e9:c6:07:12:58:0b:31:63:1e:50:6b:40:ee:8b:81:
         66:2f:2e:6d:a3:38:1e:01:83:e9:d0:ab:85:3e:43:8d:06:e4:
         1a:ea:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----