Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1IeImMVg95ZIlB7gBXnUAoseKQ.roa
File:                     J1IeImMVg95ZIlB7gBXnUAoseKQ.roa (raw, json)
Hash identifier:          a7jMIK4pes2sW5bf78jGjU3JMHsb51Pupq2bkr7F5b8=
Subject key identifier:   27:52:1E:22:63:15:83:DE:59:22:50:7B:80:15:E7:50:0A:2C:78:A4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03D9F756
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1IeImMVg95ZIlB7gBXnUAoseKQ.roa
Signing time:             Fri 04 Feb 2022 00:17:04 +0000
ROA not before:           Fri 04 Feb 2022 00:17:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64616278 (0x3d9f756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  4 00:17:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27521e22631583de5922507b8015e7500a2c78a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:3b:fc:b2:c1:b0:9b:01:ce:16:ea:ad:ef:
                    29:cb:75:1c:9d:56:ab:89:f0:83:f8:a1:40:30:5a:
                    b1:d6:f9:32:84:f2:79:ee:1c:b5:34:26:d3:fc:cf:
                    5d:5e:62:eb:46:95:4b:4f:33:79:44:f6:4c:09:af:
                    2d:68:28:61:11:0e:a1:36:08:b3:1c:b5:97:73:24:
                    b6:ea:5d:c4:72:c3:1b:a8:4e:5d:45:c3:67:91:d5:
                    6d:64:3e:a1:a9:14:2e:82:d7:75:5c:52:37:5d:58:
                    5b:52:24:94:a6:b1:d2:be:dd:3f:bd:ec:b5:84:55:
                    ca:d0:dc:47:cf:71:c3:b4:90:0d:d5:16:d8:5c:f8:
                    9b:29:f0:8f:43:74:49:2a:7d:22:4b:6e:ba:71:4a:
                    98:d1:6a:e9:97:e9:e9:66:69:12:c8:29:38:1d:47:
                    c0:31:c6:43:38:17:38:0a:1c:53:55:64:bc:85:c7:
                    9d:23:06:a4:cd:d6:da:55:fa:5d:4d:4c:09:6b:ad:
                    6d:83:58:63:f7:9b:59:e3:7d:29:55:e2:63:43:0b:
                    5f:29:8b:55:0e:06:5b:b4:48:a6:8b:f0:da:0b:f3:
                    19:a3:ee:17:73:b3:0c:8f:ea:0c:32:8e:15:b0:36:
                    be:6e:f2:5d:08:8e:9f:0e:72:c6:c7:37:8f:43:95:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:1E:22:63:15:83:DE:59:22:50:7B:80:15:E7:50:0A:2C:78:A4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1IeImMVg95ZIlB7gBXnUAoseKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:08:1f:49:82:e4:b9:5f:6c:25:35:79:4d:d4:a2:c7:d4:
         1a:e0:0c:bb:3d:0a:0a:bb:c4:bb:c6:3b:07:e6:f6:22:d4:93:
         f4:96:1c:c5:2a:db:a5:e4:64:0e:7a:2a:81:40:b0:19:09:4a:
         71:66:83:1b:8b:5d:99:af:e5:4c:d1:02:0c:d2:fe:71:3e:ea:
         0c:49:ea:d6:18:48:ea:00:21:1f:ae:31:81:68:96:b6:ea:d2:
         86:8c:c1:8e:fe:2b:8c:e3:be:26:81:0f:0b:8a:38:50:71:b0:
         5c:8e:be:d7:63:31:6b:4c:88:dd:61:fb:f1:ab:9e:50:d6:2c:
         5b:a6:5d:42:21:78:51:69:f0:60:dd:61:64:45:2c:18:46:0a:
         16:f2:0f:38:a4:54:21:6b:b0:03:af:99:55:e0:85:2e:9d:13:
         1d:96:6c:72:17:f1:dc:6a:04:8e:53:d3:aa:c8:64:c1:55:d8:
         c5:21:1d:83:73:ad:e4:14:88:a6:18:85:56:71:31:e2:9f:c8:
         1f:02:03:85:92:bc:5d:18:99:ab:82:55:51:a2:8b:c4:15:9e:
         6f:70:a9:d1:9e:38:22:d9:65:94:ae:4b:33:b9:3c:f9:4b:aa:
         b1:20:eb:73:ad:f0:ea:b6:d8:ee:b7:38:cd:19:83:34:d4:4a:
         1a:7d:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----