Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J381Vcy1l7euNrafhKPLCJhP_rc.roa
File:                     J381Vcy1l7euNrafhKPLCJhP_rc.roa (raw, json)
Hash identifier:          l73Tyg2hCiaF9xN7Sz1JlRRQc/NU6JAuVsmQb46nPvE=
Subject key identifier:   27:7F:35:55:CC:B5:97:B7:AE:36:B6:9F:84:A3:CB:08:98:4F:FE:B7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03C01B0D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J381Vcy1l7euNrafhKPLCJhP_rc.roa
Signing time:             Mon 31 Jan 2022 13:47:47 +0000
ROA not before:           Mon 31 Jan 2022 13:47:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62921485 (0x3c01b0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jan 31 13:47:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=277f3555ccb597b7ae36b69f84a3cb08984ffeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:75:87:63:57:3d:f2:ad:c8:04:a6:ee:6c:
                    ef:2a:02:c9:89:c6:bd:39:ba:e1:f8:3e:58:f2:e9:
                    b6:68:11:bd:8a:d5:65:3c:ad:52:fe:49:ed:ae:5c:
                    03:09:ca:3f:64:cf:fe:be:63:05:9f:22:b7:90:32:
                    78:d5:12:6f:b6:9d:44:6e:e0:44:9b:7d:e4:22:df:
                    e4:c4:84:b0:6b:75:4f:f4:cd:a6:99:61:a9:9a:8c:
                    5b:6c:ca:27:66:06:f8:30:d7:8f:4c:0b:fc:f1:34:
                    78:8a:cf:b0:da:b6:6d:4d:8a:44:fb:33:e4:ce:c2:
                    cd:29:9d:94:b2:57:4e:84:e6:c8:80:9a:e0:60:b5:
                    17:bb:df:1d:aa:b3:8d:77:1d:85:24:82:d0:de:dd:
                    89:dc:4f:ab:88:bb:bb:4a:6d:63:f6:8f:88:4c:e3:
                    b6:f0:5a:ae:2f:6b:9f:c9:b4:55:58:7c:76:1b:55:
                    bf:7e:3e:7c:20:de:69:f6:a6:c1:ba:58:3d:87:46:
                    7e:83:67:2e:9e:f9:d5:41:42:d5:b9:28:cb:14:bd:
                    e0:cb:a0:6a:0f:8e:c4:1f:de:36:ee:8d:6b:e0:b2:
                    6f:fe:20:f0:7e:32:df:bd:f0:52:04:cf:e0:7a:90:
                    b1:2c:00:9b:02:45:de:da:41:cb:ac:00:89:2e:75:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7F:35:55:CC:B5:97:B7:AE:36:B6:9F:84:A3:CB:08:98:4F:FE:B7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/J381Vcy1l7euNrafhKPLCJhP_rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ae:ee:84:17:28:73:48:ca:01:c7:d0:24:ad:97:da:80:18:
         13:1f:bb:e0:12:85:dd:30:2b:84:e2:a7:91:64:5f:70:0b:fb:
         fc:60:5d:a6:65:2c:f2:25:95:59:66:5b:eb:b5:f2:98:33:4b:
         de:d9:1f:15:6d:7e:eb:e9:45:da:d4:05:ef:36:83:b6:a8:f2:
         eb:8b:a6:40:cf:b3:87:37:d7:09:0e:b3:bc:1a:b0:af:0c:a8:
         2e:b4:f7:24:d2:23:a5:b8:7e:46:71:f2:85:f8:91:f7:fc:1b:
         f6:88:7e:d0:6f:ae:05:53:79:97:97:49:06:88:49:30:1d:2c:
         8a:08:f6:63:47:1e:f3:9d:ed:b8:e6:c5:5b:c4:6d:5c:bc:01:
         64:2d:14:e4:5c:d8:d2:1c:ab:0b:ef:0f:12:fc:ad:5c:78:10:
         89:0b:de:12:d3:2c:22:0b:ae:db:cd:b4:57:91:9b:38:ac:f5:
         4d:f3:76:1d:c1:0e:57:a1:eb:d7:d9:ae:cf:53:3b:21:2e:ce:
         ea:63:45:f7:f7:6c:bd:11:f8:2b:ea:f3:42:e9:ce:0f:a2:1c:
         c5:54:37:f2:c2:b6:ff:49:f6:36:81:3a:60:48:56:d7:38:ca:
         7f:33:6c:42:93:c0:d9:71:c1:6d:b2:ae:26:c0:8e:00:09:96:
         7e:07:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----