Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NFF99aPNhO-c8t8JuJ857lr6MWA.roa
File:                     NFF99aPNhO-c8t8JuJ857lr6MWA.roa (raw, json)
Hash identifier:          FajOUzKjblvc4aB51vOy3sWwmhl25GPXo5AT24nl9HM=
Subject key identifier:   34:51:7D:F5:A3:CD:84:EF:9C:F2:DF:09:B8:9F:39:EE:5A:FA:31:60
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08F8DCBA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NFF99aPNhO-c8t8JuJ857lr6MWA.roa
Signing time:             Thu 23 Jun 2022 13:01:56 +0000
ROA not before:           Thu 23 Jun 2022 13:01:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150527162 (0x8f8dcba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 23 13:01:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34517df5a3cd84ef9cf2df09b89f39ee5afa3160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:f4:45:3c:ef:ba:8b:f7:15:11:c3:9b:f6:
                    c0:f1:aa:cf:14:6a:6d:ca:7e:89:88:02:69:cc:09:
                    74:5d:1b:92:35:7d:ec:22:b5:92:0d:d7:fe:c5:cf:
                    92:ee:02:9d:cc:c9:05:91:02:40:8e:a2:14:58:c4:
                    3a:a0:83:dd:7c:ec:ca:54:9d:72:5f:e4:1b:a7:e1:
                    84:fe:6e:fa:1f:f4:85:09:7e:84:43:1e:7e:8d:dc:
                    e0:ac:0e:55:16:13:13:84:20:dd:7d:d5:c1:d7:58:
                    97:1f:b3:a3:76:d6:58:a3:e1:4e:41:33:3a:51:f0:
                    83:5c:89:0a:bd:73:bd:9b:ed:2b:c4:89:30:0f:ca:
                    f3:ab:03:99:32:fc:75:48:68:4f:03:47:5e:69:85:
                    e0:02:3d:ce:c0:19:70:40:a0:91:4c:ee:da:01:6c:
                    2c:a9:75:04:d7:7a:f7:b7:f1:e9:72:2f:2a:ed:c4:
                    16:bd:96:d6:e9:08:87:0c:69:9b:e7:86:46:b8:c9:
                    ce:3e:9d:89:fc:6a:cc:45:82:26:18:80:f8:b1:af:
                    ce:8e:c9:0e:5d:29:1c:e3:df:42:c1:35:94:0d:03:
                    68:7a:04:83:24:aa:fd:40:ab:48:71:8c:ae:94:65:
                    00:39:d5:21:62:7a:17:05:af:7d:57:4d:0b:6d:4b:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:51:7D:F5:A3:CD:84:EF:9C:F2:DF:09:B8:9F:39:EE:5A:FA:31:60
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NFF99aPNhO-c8t8JuJ857lr6MWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:7f:16:73:9e:e0:86:c5:ad:3a:bf:66:0b:e2:2b:89:2f:7f:
         58:3f:fc:8b:d4:3e:ad:b7:fc:5f:b0:a7:6a:30:37:a6:5a:76:
         b1:e1:fc:12:60:56:9c:6b:a7:73:f8:5c:b5:11:ad:31:ff:dd:
         8a:8b:19:bd:7c:bd:b7:6d:d5:6a:6a:25:c1:2a:6e:36:cb:c3:
         cb:b8:15:c9:ef:32:32:bc:1f:49:15:51:1b:9f:50:30:95:94:
         7f:c8:f7:d0:93:8c:f4:32:0a:3e:1e:39:36:8b:ab:b4:1e:fd:
         19:da:41:47:8b:8e:79:0a:5b:59:90:c5:26:e6:44:e4:d7:8b:
         47:5f:ed:aa:5c:9a:da:2d:5a:6b:26:07:d8:f6:7f:68:22:ff:
         b8:ce:d9:55:d0:d0:08:b6:67:64:41:91:97:fe:10:c4:18:b8:
         a1:68:96:7e:74:18:41:6f:ad:eb:35:f6:e3:5b:62:f7:b1:ad:
         9d:e7:b6:43:79:8e:94:92:c1:61:71:4e:f5:8d:1f:52:f1:3c:
         98:54:8f:68:24:33:95:66:68:98:80:17:91:73:3e:b4:7f:ea:
         75:78:a3:f6:d2:d5:f3:b4:de:01:b5:33:c2:b1:44:3a:a9:8c:
         22:69:f7:98:c0:dc:f7:68:a0:06:9c:ba:d0:89:8a:c6:eb:6a:
         8e:60:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----