Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa
File:                     U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa (raw, json)
Hash identifier:          r0dkyCoF3gBZsBaZQZhCtStyA5jRKh+9vl4fHvoy/FY=
Subject key identifier:   53:A2:B6:21:24:30:9D:19:28:3A:6B:76:A7:B0:7F:F0:80:47:AE:F7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05852DE2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa
Signing time:             Fri 01 Apr 2022 14:44:25 +0000
ROA not before:           Fri 01 Apr 2022 14:44:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92614114 (0x5852de2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr  1 14:44:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53a2b62124309d19283a6b76a7b07ff08047aef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:ea:81:95:a8:eb:f6:42:f3:46:b8:63:e1:
                    ff:84:ec:e0:e2:bb:37:e1:f9:66:1a:04:06:a9:bf:
                    1f:7a:87:b9:86:35:8a:04:55:24:85:30:d7:9f:e6:
                    34:e3:5c:cd:26:44:af:b8:70:4e:84:b8:80:da:0b:
                    d9:5e:59:6c:b1:3b:eb:1e:13:d6:c9:06:74:2f:e8:
                    0d:5a:47:38:b1:4d:1d:3f:8e:27:54:31:47:8d:42:
                    9c:af:14:c2:fd:68:98:b0:05:76:39:02:de:e2:92:
                    60:4c:94:f4:20:88:d6:03:fb:2c:8d:55:65:4c:86:
                    9d:14:2e:22:14:40:51:25:86:b1:e8:7f:8a:63:54:
                    26:d7:b8:de:0a:c0:52:ff:76:e3:92:8f:f6:67:9e:
                    df:d7:0f:4f:83:0b:90:4b:2c:c4:43:fd:b4:ba:1a:
                    7a:6d:83:12:71:5c:02:76:fc:b6:cf:c1:fb:4a:89:
                    ca:c1:10:71:c0:af:ca:44:56:45:83:fb:69:20:a1:
                    c3:a4:d7:f1:40:98:33:20:1a:9e:40:54:67:96:ca:
                    bd:e3:a5:ca:5a:20:e2:26:77:37:5e:52:78:67:a5:
                    b4:da:3d:4d:be:db:5a:77:bc:36:a6:ed:32:23:84:
                    2c:58:cf:9b:25:bf:c4:06:69:ab:03:bf:ba:c9:62:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:B6:21:24:30:9D:19:28:3A:6B:76:A7:B0:7F:F0:80:47:AE:F7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U6K2ISQwnRkoOmt2p7B_8IBHrvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:fa:9a:e4:48:5a:d1:d8:13:d6:00:d9:0c:12:a4:2b:47:
         ab:e0:cd:f5:33:f8:78:fb:92:7c:a6:df:23:0e:0d:22:99:17:
         0b:b7:67:79:eb:ac:4d:2b:20:44:b5:e4:5e:53:86:81:8b:3f:
         8b:05:5f:cd:d1:9d:e7:bf:25:94:a6:3d:b7:15:34:6e:2d:71:
         ed:4d:5b:25:19:38:1c:bd:05:f0:2b:2b:87:c0:48:bc:61:5f:
         7d:7d:ed:b5:24:30:19:ab:11:f8:26:23:70:f0:27:a5:f2:d9:
         f2:2f:77:4a:b1:e4:3b:88:31:ee:ef:62:56:ad:17:59:69:5e:
         87:f0:ce:02:86:80:18:14:32:99:ee:6d:d3:5e:53:15:ca:02:
         b2:f0:68:11:c8:d4:6f:68:dc:f6:11:c5:b4:c2:71:3f:20:80:
         57:29:3a:c0:6c:84:a8:1d:f7:fd:24:50:64:ba:04:3b:60:ed:
         73:e3:bd:df:44:af:b9:08:d5:fe:b8:57:8a:4e:32:18:4e:45:
         ce:fc:2f:9a:6d:ff:92:70:4d:8b:36:86:49:c2:f3:1f:9e:23:
         f8:a9:67:fd:1b:9f:1a:bd:5a:c8:56:e0:3e:91:87:52:67:34:
         6b:37:f1:03:07:4c:d2:7e:2b:80:ec:a4:1c:bc:98:e3:2f:2a:
         a9:75:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----