Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TUDX7VX-9Kpa8koyLGc3H9Z_LXs.roa
File:                     TUDX7VX-9Kpa8koyLGc3H9Z_LXs.roa (raw, json)
Hash identifier:          v3rcC3h1XBnU0G+U88UaqQj0v+7xuohId+fNWwe8414=
Subject key identifier:   4D:40:D7:ED:55:FE:F4:AA:5A:F2:4A:32:2C:67:37:1F:D6:7F:2D:7B
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06965BD2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TUDX7VX-9Kpa8koyLGc3H9Z_LXs.roa
Signing time:             Sun 08 May 2022 02:32:43 +0000
ROA not before:           Sun 08 May 2022 02:32:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110517202 (0x6965bd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  8 02:32:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d40d7ed55fef4aa5af24a322c67371fd67f2d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:47:17:b3:b3:e6:68:80:77:f9:bc:ce:fc:
                    72:a9:c0:0d:61:45:72:52:1f:f6:59:33:0f:23:77:
                    df:33:e4:7c:cf:96:a5:2b:ad:cb:bb:7f:80:a0:8e:
                    3d:dd:4b:5a:ba:60:7e:98:f1:c3:cc:f9:c9:a7:37:
                    6b:9f:c5:a8:f2:af:b0:15:b7:84:e9:a4:a2:cc:f1:
                    b9:cc:42:9f:54:b9:b8:e2:c6:6a:a0:c7:29:6a:70:
                    c1:25:89:67:c2:ff:6e:80:bc:e0:ad:2f:87:20:72:
                    3c:35:0e:94:28:0d:87:89:cd:db:8f:c3:4d:2a:21:
                    e8:9e:61:6c:96:31:9f:b0:82:46:64:2e:1b:44:2c:
                    b3:83:91:1d:88:4f:3d:99:66:0b:92:cc:0e:e7:c4:
                    e9:95:59:da:cf:a2:6b:da:f3:ee:d0:fb:0f:b9:d8:
                    66:27:98:66:a9:a7:8f:7e:6c:34:4b:14:1a:28:a7:
                    93:84:a8:18:34:55:b5:4a:b6:fd:b7:30:da:0b:98:
                    9e:ac:2e:f0:23:7e:3a:a6:ed:f2:b2:2b:eb:00:43:
                    c2:15:8a:1b:90:ee:27:47:7c:e1:d8:fc:a9:3e:83:
                    91:72:4f:f1:5b:7b:fa:e2:00:ed:ba:75:4b:51:76:
                    94:b3:5b:6c:c4:9b:9e:76:17:22:86:74:98:15:3c:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:40:D7:ED:55:FE:F4:AA:5A:F2:4A:32:2C:67:37:1F:D6:7F:2D:7B
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TUDX7VX-9Kpa8koyLGc3H9Z_LXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:17:63:aa:08:33:d0:c1:cc:d2:75:14:a1:b8:65:d0:55:
         45:87:bf:70:1e:3d:20:87:cf:43:b2:64:d0:9d:ba:43:35:c8:
         60:2b:17:ff:60:b5:f3:e8:b3:ef:25:bc:0f:84:87:b8:68:98:
         5b:0b:2d:3c:cb:d8:e3:a3:d8:51:5f:7e:2f:f4:db:1f:77:cc:
         f1:87:2a:53:ad:0c:71:c9:17:d1:55:20:6a:fa:e4:65:ad:88:
         d9:6f:2b:35:3d:84:64:e0:56:53:33:46:8f:83:45:dc:ec:4e:
         6e:05:09:44:c4:87:51:b8:89:34:62:92:2f:08:7d:9a:a1:c8:
         3e:f9:68:ea:e0:6e:95:5d:e7:4d:85:f4:1f:29:5e:fa:c7:04:
         48:02:31:ea:37:61:48:f3:3c:a5:52:37:a2:3a:0b:a7:29:42:
         33:3a:0a:8a:31:d3:62:83:1c:fd:b6:bf:ac:21:fe:10:ec:f5:
         7e:99:9b:0e:0c:34:c0:0e:a9:8a:d6:ed:4b:d7:1d:20:30:70:
         b9:3b:1c:10:68:a5:cb:5e:2e:91:96:ab:6f:eb:2c:8b:ca:f7:
         b6:aa:4e:10:db:4e:17:a6:25:55:68:b2:29:df:11:9f:a3:9a:
         b2:96:21:51:50:c6:b0:e5:9f:5f:a9:a8:be:b6:c8:00:75:d1:
         bf:89:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----