Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1PBbDNH-H7j3vOumfeKwoOuWPc.roa
File:                     J1PBbDNH-H7j3vOumfeKwoOuWPc.roa (raw, json)
Hash identifier:          QMwucbSpDLe8AZj5QrE75eEPMpASqBlYdgGK9ngqxS0=
Subject key identifier:   27:53:C1:6C:33:47:F8:7E:E3:DE:F3:AE:99:F7:8A:C2:83:AE:58:F7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0523A368
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1PBbDNH-H7j3vOumfeKwoOuWPc.roa
Signing time:             Sat 19 Mar 2022 00:36:03 +0000
ROA not before:           Sat 19 Mar 2022 00:36:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86221672 (0x523a368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 19 00:36:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2753c16c3347f87ee3def3ae99f78ac283ae58f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1c:13:d9:85:95:b1:85:ad:33:8d:5d:47:b0:
                    c8:84:9e:f1:b4:85:7b:4d:a2:96:cf:22:b9:8b:e7:
                    2b:d4:8d:de:2d:da:8f:52:10:ce:d0:b7:23:40:4b:
                    02:0c:e8:77:2b:3f:6e:b0:cc:1b:80:45:7f:a6:33:
                    7d:96:d2:2b:ab:51:15:c3:c8:05:76:ea:3b:39:e9:
                    a8:f1:a8:a5:87:32:ba:df:6a:a1:54:32:94:30:5c:
                    31:25:ae:61:ee:34:af:51:ce:bb:be:c4:95:37:9d:
                    c5:3f:d3:1c:ad:f6:6c:3c:4a:59:bb:db:02:98:9a:
                    c2:f6:7a:77:4a:f0:06:77:47:f4:d8:99:3a:89:a4:
                    10:1e:43:85:c9:29:f5:55:c2:aa:f4:42:69:41:15:
                    81:a4:8e:21:14:43:3c:01:c9:fd:9f:8b:6e:31:53:
                    63:a5:7c:04:53:5f:66:72:87:06:ab:e3:d9:c5:ce:
                    af:b6:d9:ad:70:55:c4:1b:fe:37:3d:4b:9a:0b:82:
                    97:11:93:9a:dc:19:b0:1a:73:a3:70:10:08:dc:9c:
                    cb:a7:f4:53:a4:3a:5d:e7:15:da:59:25:ed:a0:f3:
                    90:fd:75:76:43:90:3f:b9:3e:2b:2e:14:35:f2:c8:
                    c0:d2:76:7a:8f:d1:89:f1:b1:45:de:77:51:aa:c7:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:53:C1:6C:33:47:F8:7E:E3:DE:F3:AE:99:F7:8A:C2:83:AE:58:F7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J1PBbDNH-H7j3vOumfeKwoOuWPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:92:98:2e:28:08:33:0f:9e:c1:83:81:2f:16:47:f7:e4:
         02:b6:fd:0b:50:d1:f2:27:a8:5c:94:c0:d2:2f:53:d9:9f:c2:
         61:30:6e:73:ed:a9:2c:fd:d3:38:02:89:16:72:05:68:be:1c:
         0a:ef:ba:2a:79:a6:db:d0:d3:fb:87:0d:9d:2a:d1:66:cf:ff:
         47:75:02:a0:89:3d:10:9c:04:f1:cf:aa:01:92:c5:32:3d:63:
         d7:09:ad:39:74:04:f6:47:59:cb:a2:60:a0:86:0a:e9:99:69:
         5f:88:5a:6c:5a:23:3e:32:c4:b3:83:c3:b8:60:47:8a:22:b6:
         8e:ce:31:65:a1:96:c3:0a:f1:1c:ea:e7:5d:e7:2e:4a:cb:81:
         33:d6:b7:2d:13:c9:ad:85:84:09:5e:c9:50:57:25:65:52:91:
         ca:e0:fc:a2:74:c7:fe:c1:cf:ce:9c:c2:a6:73:0f:d8:5e:83:
         c3:a2:a8:22:95:36:06:04:71:11:99:e9:45:eb:75:46:e1:46:
         b8:89:c3:ad:a3:49:8d:2c:e7:09:ff:88:91:16:ae:49:77:50:
         cd:43:bd:ad:ca:bd:46:c6:0a:aa:9a:43:94:94:70:61:fa:47:
         65:58:ca:c3:8b:08:8b:15:59:0b:5d:f1:87:05:d6:91:4c:aa:
         7e:ef:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----