Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IgUVG1r_OWLlTfnkMOxaENNEcg8.roa
File:                     IgUVG1r_OWLlTfnkMOxaENNEcg8.roa (raw, json)
Hash identifier:          03ac1S2PcqZ+hBhk161kswDlwurzsLJJfd2KLqETJUw=
Subject key identifier:   22:05:15:1B:5A:FF:39:62:E5:4D:F9:E4:30:EC:5A:10:D3:44:72:0F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04457770
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IgUVG1r_OWLlTfnkMOxaENNEcg8.roa
Signing time:             Thu 17 Feb 2022 14:19:25 +0000
ROA not before:           Thu 17 Feb 2022 14:19:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71661424 (0x4457770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 17 14:19:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2205151b5aff3962e54df9e430ec5a10d344720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:2a:73:6c:c9:3a:66:1f:61:4e:51:38:c3:
                    59:a3:13:e7:e0:cf:c8:4d:2f:4c:af:99:fd:61:f3:
                    b0:1b:80:f0:53:72:1b:5f:8c:9b:24:bb:e1:72:c7:
                    bb:70:40:37:c9:d3:db:0e:79:da:5e:a5:46:f8:42:
                    05:92:d5:57:12:c9:85:cb:ea:58:8b:7f:38:c2:59:
                    c2:09:86:14:28:da:47:e3:ec:8c:4e:c2:73:40:85:
                    40:db:a6:cf:b2:9f:e9:ca:c4:89:38:43:13:c8:10:
                    f8:f8:d8:e5:87:ce:57:55:e4:77:21:5b:ee:3e:40:
                    97:9f:e8:59:12:5a:6e:84:32:73:98:23:fc:e4:53:
                    7b:f2:f2:bf:20:45:f4:ec:92:93:20:b3:92:c8:35:
                    bb:cb:cd:81:57:41:1b:2e:88:a6:29:ca:9a:e4:63:
                    a5:03:61:87:2c:d2:b8:5a:d9:55:ad:c6:e5:64:19:
                    a4:85:46:ed:ad:a9:99:6b:04:7f:05:7a:e0:4a:cc:
                    03:82:2d:f0:ba:18:08:aa:3e:01:ac:cf:28:62:c1:
                    76:2c:ad:7d:1d:bc:a9:dd:31:e2:27:fc:64:46:e4:
                    18:df:51:06:34:1a:be:0d:3b:49:8f:e7:56:fa:78:
                    f3:4f:1f:ad:5d:66:99:e3:6b:f7:0b:2e:93:97:08:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:15:1B:5A:FF:39:62:E5:4D:F9:E4:30:EC:5A:10:D3:44:72:0F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IgUVG1r_OWLlTfnkMOxaENNEcg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:22:96:97:b6:c7:ef:e2:e0:c3:0c:af:ed:60:e8:c9:a3:
         e6:4e:f9:10:3d:be:51:50:ef:3c:7d:21:5f:7e:02:20:df:96:
         76:d9:c2:b0:36:b0:92:39:c7:7f:4e:76:37:0d:95:8b:ee:fb:
         30:67:2a:cd:83:5b:b1:28:c6:58:67:dd:72:53:bb:b9:e2:09:
         ec:99:fd:2e:a0:5f:3a:ac:d2:46:74:d5:62:18:fc:05:17:bd:
         e6:7e:32:c2:80:7c:18:5d:4f:21:ac:d8:4d:0c:cd:0f:12:41:
         ea:81:5d:e8:a0:0c:fa:15:8c:67:9f:05:e2:93:bc:a7:20:b0:
         71:45:19:84:60:d9:ef:d2:23:91:71:40:4c:9e:8c:9d:d6:28:
         1c:46:79:2f:8d:f1:23:d6:e6:f8:7c:1d:c3:6a:25:04:ff:c0:
         c6:91:c4:0a:7a:8f:fc:89:a2:f4:5d:7a:e5:a8:e4:ec:b8:15:
         27:14:5e:11:6f:24:e4:ba:58:83:63:1f:8a:53:65:23:d3:dc:
         76:2f:86:30:ab:ed:08:c0:32:d7:fa:98:ab:2b:f2:48:58:3a:
         9c:fd:e0:40:e5:9e:d0:7f:29:45:4c:41:fd:02:6d:1d:c4:a5:
         d8:c6:d1:38:69:2a:0c:9a:11:b0:ab:fb:89:d8:b3:5b:8a:77:
         5f:82:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----