Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PRrPf1ubPHqJMF8GDVsmcZ9czwI.roa
File:                     PRrPf1ubPHqJMF8GDVsmcZ9czwI.roa (raw, json)
Hash identifier:          7bbbDHJ5UKivbSyEi1FNeHZqOfQGiGOhIE/QBRtbjSM=
Subject key identifier:   3D:1A:CF:7F:5B:9B:3C:7A:89:30:5F:06:0D:5B:26:71:9F:5C:CF:02
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       090A72D7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PRrPf1ubPHqJMF8GDVsmcZ9czwI.roa
Signing time:             Sat 25 Jun 2022 04:14:05 +0000
ROA not before:           Sat 25 Jun 2022 04:14:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23676
IP address blocks:        151.216.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151679703 (0x90a72d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 25 04:14:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d1acf7f5b9b3c7a89305f060d5b26719f5ccf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:48:71:65:d8:2b:c8:95:32:55:77:af:96:
                    1f:f5:88:11:7d:af:07:5a:5e:de:d6:81:64:46:94:
                    98:24:34:b5:47:5d:bf:c1:e5:df:d8:93:99:50:d6:
                    49:16:58:9c:0e:7c:c7:ea:b7:40:e4:a8:69:5e:22:
                    82:35:06:a6:39:9e:b8:9a:63:60:82:c7:5b:f4:67:
                    58:fa:ec:50:43:e8:8d:45:42:01:ba:43:c6:58:b3:
                    83:98:bd:89:ab:ba:6b:b2:1c:94:35:f2:7b:68:dc:
                    c2:a6:3d:35:db:a8:d7:63:40:ce:ca:56:da:8c:d5:
                    83:c7:67:dc:eb:0f:f9:26:47:dc:40:a2:d7:fd:5e:
                    71:7c:92:9a:46:50:c1:07:ba:9c:a6:01:95:84:67:
                    ce:5b:a7:67:9c:cd:0c:f3:7b:02:a4:fd:75:50:98:
                    11:d0:bf:30:77:0d:8e:6e:38:a6:80:39:7c:aa:07:
                    cb:7e:e1:b7:b1:6a:fe:8e:88:1d:25:33:8f:39:99:
                    7c:cd:e0:2f:39:38:f1:e7:0a:07:f9:ff:5f:a3:44:
                    a8:ac:4d:2a:e8:a8:14:35:35:bd:d9:e8:de:24:a6:
                    c9:a2:04:47:a3:b1:94:f4:a6:97:3b:23:c9:ba:08:
                    d5:4d:c0:a6:bb:6f:4d:8d:59:7b:aa:a9:ea:5d:c8:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:CF:7F:5B:9B:3C:7A:89:30:5F:06:0D:5B:26:71:9F:5C:CF:02
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PRrPf1ubPHqJMF8GDVsmcZ9czwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:66:a3:eb:8c:79:fa:af:5f:08:18:7d:eb:24:6b:06:50:d3:
         9e:37:e1:b2:b5:a3:3c:73:61:96:71:42:ea:6a:3b:11:ac:83:
         5b:da:a4:fb:37:d6:e2:17:fb:90:10:6a:03:2b:f2:a9:2e:11:
         9c:9a:7f:41:b2:d6:f3:bc:fc:35:d4:29:f9:bb:c6:53:eb:5e:
         af:7a:f2:5f:8e:63:0a:49:40:3b:df:2f:8c:6f:f4:0f:49:7b:
         f1:8d:4f:b5:43:36:01:97:5d:98:91:e1:46:fb:62:a6:e8:ab:
         5f:90:a1:7a:15:08:66:4f:79:06:29:fa:67:86:d1:33:13:62:
         9e:34:87:72:62:2b:63:2e:d9:16:87:d4:d9:59:44:f5:c6:3e:
         92:e1:42:c9:41:ee:f3:69:c9:67:02:b4:43:01:43:8f:70:f3:
         a5:c4:a4:a1:b5:d6:42:8b:7d:3e:d5:82:7e:c8:0e:c0:06:0f:
         66:50:6b:0e:d3:0c:b6:39:2a:1c:57:84:94:74:b7:c0:4f:86:
         35:3b:8b:3e:80:a6:ba:8f:28:6f:85:2f:aa:e7:11:31:98:ed:
         90:ae:70:9e:8e:9f:f6:57:3a:47:d9:ed:82:85:72:dd:4b:2e:
         06:d2:2a:93:5c:44:81:69:fa:4d:da:e2:28:85:6f:fb:d4:02:
         35:f5:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----