Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa
File:                     QAmXJ17lHmAXP3m514Mx-mZrW80.roa (raw, json)
Hash identifier:          q3eLgVmYynoq3V1I4GS9hFjO+lxyrbXoGek2Lhnc2ZY=
Subject key identifier:   40:09:97:27:5E:E5:1E:60:17:3F:79:B9:D7:83:31:FA:66:6B:5B:CD
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04569716
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa
Signing time:             Sat 19 Feb 2022 16:12:23 +0000
ROA not before:           Sat 19 Feb 2022 16:12:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72783638 (0x4569716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 19 16:12:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=400997275ee51e60173f79b9d78331fa666b5bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:f0:52:78:0a:37:e1:49:41:4f:b1:d9:cf:
                    aa:bf:35:56:6d:42:31:4b:ee:c4:ae:14:b7:ee:57:
                    29:a8:b8:0c:14:39:da:44:30:32:c6:12:3b:e5:5d:
                    f0:29:b3:9e:95:91:8d:54:33:ac:84:0a:5e:1c:13:
                    59:d4:d9:a4:b6:63:e4:f0:dc:9a:16:bf:7f:2b:cb:
                    5e:4c:62:94:ef:ba:ba:24:01:e6:fc:be:4c:74:0e:
                    3b:e3:72:4a:e1:e9:9e:03:83:5c:fe:f5:77:dd:ba:
                    56:e9:e7:c2:4f:47:c3:9d:ee:f7:dd:08:b4:77:53:
                    e5:f0:99:e1:a3:e9:24:6d:f3:bc:12:d1:61:6b:27:
                    ed:72:3b:ed:56:41:d2:4a:ca:ef:06:0a:d0:32:a6:
                    9e:9c:aa:e6:42:bf:33:f1:63:4e:83:34:ef:73:c5:
                    96:86:6c:05:c1:bd:32:4e:4c:34:c5:f2:38:80:7a:
                    28:f1:c2:d2:24:07:6b:3c:f7:d1:ff:4b:3f:8c:0a:
                    ea:88:d3:49:a0:ff:93:84:88:3d:2e:66:03:5b:32:
                    71:ce:4e:a3:21:20:c7:d7:71:f1:63:6f:f1:e9:0e:
                    1f:0b:25:7f:e4:86:86:eb:24:d6:2d:69:8a:ee:ee:
                    2c:07:1b:f9:04:60:4c:a9:86:77:4b:4a:d3:51:2e:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:09:97:27:5E:E5:1E:60:17:3F:79:B9:D7:83:31:FA:66:6B:5B:CD
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QAmXJ17lHmAXP3m514Mx-mZrW80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:ab:6f:f6:b0:55:9e:1c:de:f6:a0:26:06:fa:12:d3:f0:
         3b:e4:0b:a3:fe:c4:da:b6:bd:24:7a:b4:11:74:34:52:e9:94:
         49:6d:83:a1:fe:8c:4a:b4:ab:1d:7d:48:62:12:ce:84:1d:2d:
         c7:86:8a:26:d1:e4:f7:24:a8:81:0d:66:0b:0e:30:54:f7:0b:
         10:af:f6:ac:ad:de:a4:11:bc:9c:72:98:36:73:d3:11:93:cb:
         0a:64:cd:d7:b9:c5:00:9a:02:ab:5e:93:4b:a2:4e:94:9c:66:
         3b:eb:46:14:34:2d:ff:1a:b7:8e:39:5f:0e:88:1e:9b:89:a9:
         90:fb:41:6b:1a:d8:c2:fa:76:ce:59:da:9d:93:00:ba:15:6d:
         41:8c:83:8a:74:fa:de:8a:db:78:68:68:4d:18:4a:62:3e:04:
         5b:ba:57:a1:2e:f1:ee:d2:88:55:73:20:af:28:32:31:7a:b4:
         1e:01:0a:17:05:6d:05:56:5f:d5:40:4b:da:d2:09:d9:74:ea:
         f7:9a:d1:0b:0a:c2:56:01:62:9b:d9:eb:1c:97:85:b8:d5:cb:
         f2:77:ca:18:6e:85:94:48:e5:02:8b:48:ef:73:90:e8:ec:d3:
         b4:ae:de:9a:09:05:3f:e8:ae:17:37:74:5b:1e:ec:89:b8:9b:
         4a:5b:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----