Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa
File:                     IazbtVBzxXL6dJNei6p5xL1m21k.roa (raw, json)
Hash identifier:          4+aH7Ej8jvi0ESr/svqu6j9acA7Dr7qBRMWGY5WRXm4=
Subject key identifier:   21:AC:DB:B5:50:73:C5:72:FA:74:93:5E:8B:AA:79:C4:BD:66:DB:59
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       083BC82E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa
Signing time:             Thu 09 Jun 2022 03:33:02 +0000
ROA not before:           Thu 09 Jun 2022 03:33:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138135598 (0x83bc82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun  9 03:33:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=21acdbb55073c572fa74935e8baa79c4bd66db59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:8f:06:0d:b1:1d:af:9a:3e:cc:1d:3a:26:
                    92:cc:60:3a:aa:fc:26:d8:0f:07:4f:9d:85:84:ee:
                    d8:0a:a3:9e:17:5c:3a:fd:d3:cd:51:b1:51:d1:d3:
                    4e:99:71:f6:78:eb:1c:71:ec:d0:b3:dc:45:fc:30:
                    8d:d4:fd:21:a6:77:fc:29:dd:8f:15:cc:ae:56:48:
                    ed:ad:bd:b4:c9:f5:98:df:0d:0f:cd:b8:73:b8:9c:
                    2f:9d:08:4a:3b:fb:b8:22:33:d6:a8:0f:25:af:a7:
                    76:0b:17:86:9e:65:45:48:93:e8:a0:bf:0d:85:93:
                    6b:3f:a6:18:a2:e7:41:0a:ed:06:34:a5:94:65:10:
                    10:6c:e4:6c:20:34:d6:34:06:89:f7:16:5d:86:d9:
                    73:53:d6:bc:51:48:34:36:c3:0a:a0:8e:88:30:09:
                    4b:5d:0f:ee:54:75:7c:d1:e0:83:92:b2:1d:66:fe:
                    15:62:6b:6d:7c:bc:42:ba:4d:a3:01:71:06:f6:a4:
                    c1:9c:7b:23:c4:17:a4:55:e7:98:41:e3:25:a9:79:
                    17:02:75:12:bc:c7:5b:4c:59:a2:c3:10:60:52:22:
                    18:fd:94:4d:9a:48:70:05:67:ea:5a:27:5b:6f:b6:
                    07:91:0d:9b:79:ed:a3:96:7a:8d:a9:bb:a9:74:8a:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:DB:B5:50:73:C5:72:FA:74:93:5E:8B:AA:79:C4:BD:66:DB:59
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:4f:59:49:93:1f:f3:46:a2:24:63:60:d6:0e:69:a0:9d:e4:
         f4:fc:95:e4:62:66:1a:76:d8:a5:c1:0d:0c:31:63:98:38:11:
         a2:11:8f:79:b5:08:c5:18:db:44:4a:a7:2f:39:34:9d:b7:af:
         82:3b:54:2f:26:91:d3:5c:da:79:d5:5f:c1:31:fa:88:03:87:
         ab:a6:ee:5e:16:3d:0d:64:4a:ee:63:8e:cd:64:f0:e9:37:5c:
         85:42:0d:19:ef:cc:4f:69:dc:15:ee:c8:6c:fe:48:75:60:c3:
         a4:da:05:61:97:7a:c2:27:9c:22:85:d0:a0:e7:d0:5f:fe:17:
         7c:f4:20:89:49:3b:5a:4f:7b:e1:be:a8:8e:fa:51:12:f0:7d:
         68:83:ec:c0:bb:e4:a8:67:f6:0e:60:ae:d2:2c:1b:ab:c1:65:
         ea:34:53:5f:28:f5:44:be:cc:97:a5:45:c7:c0:4f:5d:f5:e7:
         d3:ce:5e:3a:3a:5d:b4:c2:f0:32:61:9c:e9:77:c1:77:98:a0:
         f6:1c:cf:3c:22:06:04:63:79:3b:24:b9:93:40:fe:5f:1f:42:
         25:5e:00:ed:17:9c:d7:97:4e:ed:80:0e:e0:f2:5e:81:8c:20:
         c8:e9:3c:43:12:bf:43:99:7e:36:4f:f3:9c:d1:25:e2:e0:65:
         93:16:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----