Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T_Pne8kU5IJV24CI-MYSdJXHDpo.roa
File:                     T_Pne8kU5IJV24CI-MYSdJXHDpo.roa (raw, json)
Hash identifier:          MHlIuiSzEAOPjkIhPgq/E9XdU87IEXJrONU76gRXDc8=
Subject key identifier:   4F:F3:E7:7B:C9:14:E4:82:55:DB:80:88:F8:C6:12:74:95:C7:0E:9A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181CF71287C76DB0967E4FA0FA11A23D289
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T_Pne8kU5IJV24CI-MYSdJXHDpo.roa
Signing time:             Tue 05 Jul 2022 17:38:28 +0000
ROA not before:           Tue 05 Jul 2022 17:38:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:cf:71:28:7c:76:db:09:67:e4:fa:0f:a1:1a:23:d2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  5 17:38:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ff3e77bc914e48255db8088f8c6127495c70e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:81:64:4b:86:17:3f:bc:57:1f:7c:b6:12:
                    8d:6c:5c:e0:ea:ad:16:1a:c8:2f:7c:77:cd:67:a3:
                    ce:1c:57:4c:11:28:b9:1b:6a:87:a6:ae:b0:32:a1:
                    7a:73:f2:ac:08:52:13:b1:81:9b:df:4f:3e:49:7e:
                    27:a6:d4:21:a3:15:48:0e:9b:c1:ec:8d:e9:f0:e2:
                    c4:53:9b:fe:f2:ee:71:28:b2:bf:97:d9:40:e4:ae:
                    15:b1:6d:b6:7a:e6:3f:cb:cb:3c:24:aa:f5:26:40:
                    44:0b:84:cf:2a:7e:83:20:23:1a:75:c3:29:f0:5b:
                    c0:40:21:93:95:22:77:c3:85:be:1c:2e:4b:5d:64:
                    40:22:7d:7f:b8:a9:52:fb:09:9b:be:e1:0f:73:1e:
                    1e:53:81:96:3d:2a:7e:81:45:1d:02:3b:47:13:8d:
                    6f:6b:c4:aa:61:49:31:85:be:87:f7:41:48:cf:8a:
                    68:62:12:60:0c:cc:17:b1:10:56:2c:57:89:5b:b5:
                    7d:fa:92:eb:b8:a6:a6:d1:b9:b3:9e:c5:3b:10:4a:
                    67:58:cd:dd:b5:43:e8:5c:2c:13:8a:35:0e:8d:a5:
                    1c:4e:01:1d:a2:fb:6f:56:2b:95:54:4a:57:13:7e:
                    91:3f:12:01:ff:0b:b2:5d:2e:01:ed:dc:61:c4:1d:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F3:E7:7B:C9:14:E4:82:55:DB:80:88:F8:C6:12:74:95:C7:0E:9A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/T_Pne8kU5IJV24CI-MYSdJXHDpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:e8:11:9d:a3:03:62:41:d0:cd:7f:29:5a:4a:07:29:be:
         2a:46:35:a2:8f:39:0a:6c:76:2e:55:92:fb:ba:39:5f:53:a9:
         4e:7c:62:84:23:12:6b:31:22:98:4d:56:8c:de:46:9e:a5:77:
         d4:3c:cf:eb:5a:d4:bf:88:1e:d2:e5:cb:40:e0:ba:b4:b3:c2:
         1d:99:00:ac:7d:47:c7:6e:61:55:61:b4:e1:cf:1d:f5:7f:87:
         40:36:31:77:cc:93:13:3e:89:2d:df:75:a9:cb:7e:55:ba:f4:
         7a:78:9c:b5:5d:9b:6d:b8:8a:66:8a:e9:23:b7:8b:b1:97:d8:
         e1:ca:64:26:87:1f:2e:02:f4:5c:ce:02:8c:ed:37:fc:6e:39:
         9e:05:91:26:e2:cd:72:03:d3:57:14:7d:76:e1:aa:5a:b3:b9:
         dc:b4:fb:85:57:bf:29:d4:74:82:09:fa:57:a0:8b:1a:b0:37:
         75:78:a7:a1:2c:18:b0:ba:6d:88:c9:10:13:26:9c:f5:35:1a:
         01:a5:4c:9c:b3:7b:4f:5f:f7:63:d5:cb:b2:c7:9b:e5:70:e6:
         97:bc:0a:2a:79:9d:bb:65:d0:b2:15:0c:0e:a9:9a:b3:af:3a:
         e4:12:31:5b:97:78:b6:94:cd:5c:58:36:2d:97:db:3e:2f:44:
         3d:74:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----