Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J2CanRHQDrUOUA9nYQIHzSK-1QA.roa
File:                     J2CanRHQDrUOUA9nYQIHzSK-1QA.roa (raw, json)
Hash identifier:          4lhp0XBLYrjwWz6Nr5QuWiw2t6KLkNzeYk9xtlfm9iE=
Subject key identifier:   27:60:9A:9D:11:D0:0E:B5:0E:50:0F:67:61:02:07:CD:22:BE:D5:00
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0965B31D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J2CanRHQDrUOUA9nYQIHzSK-1QA.roa
Signing time:             Fri 01 Jul 2022 16:01:25 +0000
ROA not before:           Fri 01 Jul 2022 16:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157659933 (0x965b31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  1 16:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27609a9d11d00eb50e500f67610207cd22bed500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:23:f9:b3:5a:f1:9d:ec:27:e3:24:57:3b:
                    c6:65:52:14:a5:08:81:4f:22:7c:7b:2c:37:28:ed:
                    cc:b4:0e:28:ea:de:a0:d1:f2:85:49:a9:73:e6:3a:
                    00:a2:81:df:9f:95:49:03:12:a6:d7:73:a2:76:7b:
                    29:01:a5:25:1d:3c:65:cd:dd:e9:da:05:a7:bc:9f:
                    6c:2a:cb:ca:f2:d5:a2:9a:b5:e5:d8:a5:f8:d7:b7:
                    86:95:22:12:d2:b7:da:1c:1c:1f:30:b6:92:f3:86:
                    e9:98:8c:9d:7a:34:62:7b:ae:03:b8:b1:a3:7d:a5:
                    0b:91:c8:7a:0a:e7:04:f3:ec:b5:f3:82:73:31:36:
                    8d:27:a2:a0:a5:54:15:98:cf:94:ad:9f:91:53:19:
                    34:d6:d5:75:5c:fa:35:f1:7a:ba:8d:c5:6f:ef:02:
                    94:ad:2c:0f:ef:8e:34:cd:18:22:1d:2d:b1:e4:76:
                    63:1e:13:23:93:d1:31:2e:cc:21:ff:40:d5:23:f6:
                    68:67:da:90:47:b4:69:bd:5a:b8:54:05:35:9d:94:
                    a4:b2:2e:20:bd:d9:d9:9a:72:24:20:66:18:eb:22:
                    f0:65:d7:e4:a7:db:e1:e7:83:34:0f:cd:56:0d:55:
                    51:cc:3d:0b:e0:90:bf:71:ed:19:70:af:48:8a:d0:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:9A:9D:11:D0:0E:B5:0E:50:0F:67:61:02:07:CD:22:BE:D5:00
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J2CanRHQDrUOUA9nYQIHzSK-1QA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         62:d0:44:0d:59:7e:a4:22:45:70:0d:cf:bf:9f:9e:e0:9e:8d:
         5d:e3:1a:81:4a:ce:71:03:c5:4f:38:8f:bb:e6:13:a0:40:05:
         b4:40:27:74:c4:31:7d:8f:dc:3d:5d:1f:35:84:96:0c:7e:90:
         74:76:09:1b:3e:c2:74:dd:81:a0:f7:cd:e9:82:54:ad:20:1a:
         57:9b:d5:d1:50:a2:6b:20:7b:72:b4:1a:3b:08:d7:23:49:b3:
         b7:0c:ea:9f:a0:dd:15:90:71:0a:2a:17:c1:cf:c0:5c:c7:74:
         cb:1c:2c:b6:94:66:2f:24:8c:75:2c:d0:30:d9:de:db:9b:b6:
         06:f9:76:e5:b4:85:de:48:e4:71:02:70:25:4d:5b:b0:67:ce:
         67:30:ed:a1:cb:8f:03:bc:9d:ba:5d:92:a3:e8:fc:83:d4:32:
         40:c1:69:9b:01:79:e6:e8:9d:2c:49:63:95:fd:42:8c:50:fb:
         70:ec:44:e1:91:c2:e2:ef:ab:ca:15:c6:2e:56:63:16:3c:1c:
         be:18:ea:1f:71:32:58:b8:30:5c:d1:3f:9c:67:84:3b:2b:b7:
         31:10:cb:81:75:90:b4:11:09:d9:46:af:fd:0c:32:7e:c1:4b:
         e9:5c:a6:79:50:13:10:62:7b:c9:3f:7c:1b:b1:78:a4:59:31:
         b3:0e:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----