Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa
File:                     QkdmwqePm0YtmHg86KW_fAlg_ZI.roa (raw, json)
Hash identifier:          u9WMjWsy/P/ieunBGDZD82tbxu8Ru2d2mC02BO30s0c=
Subject key identifier:   42:47:66:C2:A7:8F:9B:46:2D:98:78:3C:E8:A5:BF:7C:09:60:FD:92
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04398D14
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa
Signing time:             Wed 16 Feb 2022 00:34:33 +0000
ROA not before:           Wed 16 Feb 2022 00:34:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70880532 (0x4398d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 16 00:34:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=424766c2a78f9b462d98783ce8a5bf7c0960fd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:8f:60:ae:f9:ea:a7:6b:b9:42:85:0b:7b:
                    bf:a7:12:7c:dd:54:e4:f1:89:ab:4c:e0:2f:83:37:
                    e9:96:2a:fd:74:1a:28:ae:21:01:b8:50:b3:99:0e:
                    41:7c:87:8f:59:da:2f:c9:ce:ac:4b:71:dc:13:a8:
                    64:1a:cc:70:99:46:6e:cc:eb:d6:21:1e:29:ac:d7:
                    2c:2f:9e:17:bb:ec:9b:ad:ed:f7:6a:e3:30:39:2e:
                    e1:ce:ad:de:cb:e8:7f:23:df:ed:01:8b:30:02:92:
                    e2:a4:92:f4:11:52:ba:4a:05:4f:9d:c9:be:36:d5:
                    c7:1d:ac:dc:a5:99:88:f9:ea:a9:ce:cc:98:8f:14:
                    33:57:bc:2c:e7:e8:6c:5d:3b:93:9d:7a:83:01:4f:
                    2a:ad:00:b1:c7:0f:22:74:62:62:ea:89:01:75:53:
                    8a:69:1d:44:55:4f:86:e8:e0:96:19:d0:3a:8b:73:
                    35:8e:56:ea:e1:70:4b:d6:0a:8e:82:77:32:92:ec:
                    6b:86:f5:21:a9:c6:7f:5b:1f:ec:44:2b:ea:84:3c:
                    ed:a4:21:01:84:70:ba:fa:10:c1:da:7f:cd:22:71:
                    fe:1b:c6:4d:df:13:4c:70:cd:58:f5:35:23:aa:b7:
                    ca:46:ee:5c:b6:cb:14:c9:2a:03:49:f1:17:49:4d:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:66:C2:A7:8F:9B:46:2D:98:78:3C:E8:A5:BF:7C:09:60:FD:92
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QkdmwqePm0YtmHg86KW_fAlg_ZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:79:35:64:b5:cf:0c:bc:ae:66:5a:d6:50:69:45:17:85:b4:
         3c:12:0f:1d:bb:cf:d5:60:3c:05:82:50:a3:0e:29:65:a3:1d:
         8f:08:8a:99:f1:5f:d5:3b:5b:f8:99:89:c8:26:a9:60:40:cb:
         75:d3:8f:be:e3:44:d7:81:b1:25:4b:90:d3:56:41:b7:ed:49:
         cf:6e:76:b3:21:37:9f:4e:02:9a:b8:50:0f:6d:3e:2c:5c:1e:
         42:4d:e0:80:a4:6d:b3:dd:b8:a5:65:53:09:72:d6:e4:8f:7a:
         22:09:7c:f9:08:f4:dd:5f:f6:cb:2e:d6:56:df:b7:e0:b9:db:
         38:f9:b5:90:d2:ce:76:3d:26:45:8d:82:39:bb:a6:13:1c:21:
         9c:f5:95:24:c1:e8:16:48:a5:bb:c5:2f:74:37:f9:c4:29:94:
         b9:09:7d:ea:65:43:60:41:6b:af:ae:da:8c:2e:44:3c:15:d9:
         d1:b4:70:4c:0a:7f:7e:65:d0:6a:1e:69:7c:39:bc:95:55:ad:
         df:1e:40:5a:96:42:5e:64:39:d8:02:4f:da:94:a1:a4:b6:f4:
         93:5c:9c:9d:c5:bb:27:99:52:91:61:e4:b9:1e:44:68:62:bf:
         6c:ee:4a:6b:df:15:1e:d9:84:34:8d:c8:10:65:1e:ff:2f:93:
         6d:4c:7b:8e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBDmNFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIx
NjAwMzQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDI0NzY2YzJhNzhm
OWI0NjJkOTg3ODNjZThhNWJmN2MwOTYwZmQ5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBGj2Cu+eqna7lChQt7v6cSfN1U5PGJq0zgL4M36ZYq/XQa
KK4hAbhQs5kOQXyHj1naL8nOrEtx3BOoZBrMcJlGbszr1iEeKazXLC+eF7vsm63t
92rjMDku4c6t3svofyPf7QGLMAKS4qSS9BFSukoFT53JvjbVxx2s3KWZiPnqqc7M
mI8UM1e8LOfobF07k516gwFPKq0AsccPInRiYuqJAXVTimkdRFVPhujglhnQOotz
NY5W6uFwS9YKjoJ3MpLsa4b1IanGf1sf7EQr6oQ87aQhAYRwuvoQwdp/zSJx/hvG
Td8TTHDNWPU1I6q3ykbuXLbLFMkqA0nxF0lNG/ECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRCR2bCp4+bRi2YeDzopb98CWD9kjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1FrZG13cWVQbTBZdG1IZzg2S1dfZkFsZ19aSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCIeTVktc8MvK5mWtZQaUUXhbQ8Eg8du8/VYDwF
glCjDillox2PCIqZ8V/VO1v4mYnIJqlgQMt104++40TXgbElS5DTVkG37UnPbnaz
ITefTgKauFAPbT4sXB5CTeCApG2z3bilZVMJctbkj3oiCXz5CPTdX/bLLtZW37fg
uds4+bWQ0s52PSZFjYI5u6YTHCGc9ZUkwegWSKW7xS90N/nEKZS5CX3qZUNgQWuv
rtqMLkQ8FdnRtHBMCn9+ZdBqHml8ObyVVa3fHkBalkJeZDnYAk/alKGktvSTXJyd
xbsnmVKRYeS5HkRoYr9s7kpr3xUe2YQ0jcgQZR7/L5NtTHuO
-----END CERTIFICATE-----