Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa
File:                     UPRF0SzozvXJT9aKWfFytke08-s.roa (raw, json)
Hash identifier:          Ufa6/YhBT+r24MlH6UUh/p5eozHOPs+XqthFqmBsUeA=
Subject key identifier:   50:F4:45:D1:2C:E8:CE:F5:C9:4F:D6:8A:59:F1:72:B6:47:B4:F3:EB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06C4CAC0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa
Signing time:             Wed 11 May 2022 04:21:02 +0000
ROA not before:           Wed 11 May 2022 04:21:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113560256 (0x6c4cac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 11 04:21:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=50f445d12ce8cef5c94fd68a59f172b647b4f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:90:45:66:29:79:fa:67:aa:60:65:27:a1:
                    44:19:be:72:88:6e:a8:39:d8:a7:a6:60:2c:73:b3:
                    e6:ff:6d:a4:52:b7:c5:f1:1f:18:11:01:ac:1b:3e:
                    b1:9e:78:41:9f:59:de:2b:c8:82:63:cd:fa:10:cc:
                    ac:12:df:2b:52:3c:53:70:9c:2d:4a:af:e9:20:2e:
                    a6:06:32:31:d4:dd:64:bb:d4:02:2f:7b:41:ab:49:
                    99:05:79:1e:bd:b7:2b:a4:dc:6e:62:f1:ff:7e:87:
                    83:ac:fe:fe:ff:67:5c:b0:97:b6:2e:a3:44:9d:32:
                    87:64:61:76:57:97:82:e0:13:ca:67:20:38:2c:62:
                    88:0a:5e:9c:a6:12:e6:a2:9b:82:4f:71:fc:9d:96:
                    cc:c8:4e:97:5e:50:ee:b2:b4:af:f5:6f:13:1e:2a:
                    b8:22:2b:db:02:62:7e:84:46:96:f4:4b:e2:f7:2b:
                    06:63:62:f9:b2:70:82:61:20:08:69:58:b0:db:5e:
                    5d:2a:3f:3c:d9:54:39:6a:36:61:d8:77:74:7f:2b:
                    d6:3d:45:f7:4e:4d:67:00:6a:c4:b3:35:ae:8d:37:
                    85:2b:37:32:8d:20:b9:12:24:52:c1:24:1f:a3:47:
                    15:ae:4e:3b:5a:a3:0b:d1:c5:fa:5f:6a:c4:80:2b:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F4:45:D1:2C:E8:CE:F5:C9:4F:D6:8A:59:F1:72:B6:47:B4:F3:EB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UPRF0SzozvXJT9aKWfFytke08-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         97:be:76:82:b1:b0:db:31:d9:de:25:68:f8:82:51:5e:cc:62:
         dc:90:9b:b0:a0:6d:20:7c:86:0b:e5:8f:8d:d4:84:e1:92:1f:
         b5:63:ca:87:68:60:94:ce:a9:23:03:fc:5e:54:2b:f2:29:8a:
         9b:6c:df:43:34:9d:74:9c:83:a7:31:e7:82:ab:54:3f:c9:36:
         fe:5f:81:a9:fe:3f:8d:a7:49:2e:fa:b9:54:8b:6f:9d:f8:bf:
         9b:1b:a2:cb:28:29:d4:83:88:e6:19:10:07:a4:bb:a2:8c:f1:
         83:65:d3:73:29:2b:cd:5b:86:ca:7e:5d:f2:c6:e4:f3:87:d2:
         16:4d:80:a3:33:71:51:44:c6:6a:69:7c:55:60:39:24:69:ac:
         d7:73:f0:17:a9:e8:df:c8:11:04:a0:9a:01:1f:a9:55:f4:a0:
         c8:ea:99:b7:73:85:89:36:1b:8c:93:84:8a:dc:64:36:c2:fb:
         08:60:a2:f7:8c:a6:db:74:d7:e8:ae:53:f2:db:fd:e7:ed:6b:
         76:87:71:1b:0a:32:b3:e1:90:38:43:cf:e9:d7:79:75:57:7b:
         79:6a:69:52:fd:ec:ab:9c:e0:93:b5:eb:e1:31:6f:52:1b:ae:
         e9:5b:c9:c7:e7:ca:99:87:b1:05:6e:73:bb:f9:98:fb:24:ea:
         a9:8e:b4:f4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBsTKwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUx
MTA0MjEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBmNDQ1ZDEyY2U4
Y2VmNWM5NGZkNjhhNTlmMTcyYjY0N2I0ZjNlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN1SkEVmKXn6Z6pgZSehRBm+cohuqDnYp6ZgLHOz5v9tpFK3
xfEfGBEBrBs+sZ54QZ9Z3ivIgmPN+hDMrBLfK1I8U3CcLUqv6SAupgYyMdTdZLvU
Ai97QatJmQV5Hr23K6TcbmLx/36Hg6z+/v9nXLCXti6jRJ0yh2RhdleXguATymcg
OCxiiApenKYS5qKbgk9x/J2WzMhOl15Q7rK0r/VvEx4quCIr2wJifoRGlvRL4vcr
BmNi+bJwgmEgCGlYsNteXSo/PNlUOWo2Ydh3dH8r1j1F905NZwBqxLM1ro03hSs3
Mo0guRIkUsEkH6NHFa5OO1qjC9HF+l9qxIArme8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRQ9EXRLOjO9clP1opZ8XK2R7Tz6zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1VQUkYwU3pvenZYSlQ5YUtXZkZ5dGtlMDgtcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCXvnaCsbDbMdneJWj4glFezGLckJuwoG0gfIYL
5Y+N1IThkh+1Y8qHaGCUzqkjA/xeVCvyKYqbbN9DNJ10nIOnMeeCq1Q/yTb+X4Gp
/j+Np0ku+rlUi2+d+L+bG6LLKCnUg4jmGRAHpLuijPGDZdNzKSvNW4bKfl3yxuTz
h9IWTYCjM3FRRMZqaXxVYDkkaazXc/AXqejfyBEEoJoBH6lV9KDI6pm3c4WJNhuM
k4SK3GQ2wvsIYKL3jKbbdNforlPy2/3n7Wt2h3EbCjKz4ZA4Q8/p13l1V3t5amlS
/eyrnOCTtevhMW9SG67pW8nH58qZh7EFbnO7+Zj7JOqpjrT0
-----END CERTIFICATE-----