Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/V278hJi7i8bd5WbhZDOTF0dGzXo.roa
File:                     V278hJi7i8bd5WbhZDOTF0dGzXo.roa (raw, json)
Hash identifier:          JdCw5Dq3DOsDjvtEWrH8eCOBky5OexTqLqul4BJ45nY=
Subject key identifier:   57:6E:FC:84:98:BB:8B:C6:DD:E5:66:E1:64:33:93:17:47:46:CD:7A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08FB2931
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/V278hJi7i8bd5WbhZDOTF0dGzXo.roa
Signing time:             Thu 23 Jun 2022 16:15:08 +0000
ROA not before:           Thu 23 Jun 2022 16:15:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150677809 (0x8fb2931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 23 16:15:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=576efc8498bb8bc6dde566e1643393174746cd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:90:e3:c4:4f:06:da:42:6b:00:4d:5f:a5:
                    07:57:c8:4c:12:9f:ac:85:2e:bf:55:82:b7:9c:58:
                    6d:f0:7a:81:2f:95:bf:11:33:cf:6e:8a:fc:22:4b:
                    44:c7:18:f2:8f:97:3c:88:4f:29:49:b9:53:ef:68:
                    c9:5d:37:95:b2:5a:de:07:7e:ce:ac:d9:84:3c:79:
                    fe:62:b9:39:eb:e3:a6:04:4a:da:d0:18:20:4d:f0:
                    92:2e:25:a0:9e:2e:06:5f:ce:63:bf:d0:7c:55:f0:
                    1e:9d:d7:f1:ef:94:80:62:7f:76:e0:c9:14:2b:66:
                    56:06:d9:db:67:8b:7f:90:84:58:77:f8:36:e1:d6:
                    70:b0:59:4b:50:8b:ee:48:41:12:6f:a5:17:d9:6f:
                    81:3e:f4:ea:e7:ca:37:31:13:cd:66:a9:8e:f1:f5:
                    d4:7b:54:91:fe:6c:db:5f:61:c6:9e:6a:e8:03:33:
                    e9:81:2c:7b:6d:73:4a:8d:8f:49:ac:b4:f1:9f:90:
                    6d:97:f1:42:04:44:14:d8:cc:bf:d9:85:4e:49:cf:
                    51:0c:d9:ff:48:36:74:4b:17:e2:55:44:ef:07:56:
                    fd:af:15:70:4c:d8:9a:f8:43:d7:9a:29:48:79:6b:
                    4d:84:2c:36:be:fc:03:0a:8f:f8:1c:df:68:d2:87:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6E:FC:84:98:BB:8B:C6:DD:E5:66:E1:64:33:93:17:47:46:CD:7A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/V278hJi7i8bd5WbhZDOTF0dGzXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:31:a3:3b:c9:e5:ce:a3:4b:c1:1d:39:b1:de:a8:c9:f7:
         88:61:20:20:81:00:70:e6:19:bb:49:14:25:d5:bd:1d:60:ed:
         11:de:a8:fe:f3:72:e8:2d:b4:d6:30:15:e6:bc:47:dc:ec:5e:
         f3:7f:ac:78:3c:84:7f:23:96:06:18:76:1d:96:95:3f:a2:30:
         d2:ca:d5:c4:7b:a6:a3:c6:18:a4:c7:a8:11:f1:03:2d:68:09:
         15:5f:78:85:1b:11:55:38:e1:6f:17:91:31:d8:b3:f0:17:c3:
         13:8d:e0:6d:0f:ee:d9:5e:54:0c:c7:a7:89:9e:a4:75:fc:a9:
         88:9e:d4:c7:7f:b9:cc:4b:15:07:9c:97:83:14:fe:23:d7:7d:
         9f:ce:17:c1:8b:ec:99:60:03:ee:bf:e4:56:74:65:51:46:48:
         43:2b:5b:9c:17:e1:78:42:ad:10:c6:55:66:9e:3b:43:39:90:
         da:8b:61:ee:c3:e8:c7:7a:3d:e7:3a:78:c1:94:bd:49:71:b2:
         10:8a:6a:be:e6:bf:97:54:f1:05:b6:5e:66:04:ed:25:d0:33:
         1c:f7:45:56:35:f0:b8:1c:b2:e0:e6:50:c1:d9:ae:4f:8c:a1:
         de:43:29:b7:16:b7:ad:55:86:27:a2:9d:5e:d4:26:e7:82:93:
         36:b4:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----