Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VYc6mqKbFOk4CRUkfm5vUuGlgpo.roa
File:                     VYc6mqKbFOk4CRUkfm5vUuGlgpo.roa (raw, json)
Hash identifier:          9UsvED/jJIvm33w2sF8Ak+jC3Mdg/ZpxsF7uHVDc9+4=
Subject key identifier:   55:87:3A:9A:A2:9B:14:E9:38:09:15:24:7E:6E:6F:52:E1:A5:82:9A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0572CD5C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VYc6mqKbFOk4CRUkfm5vUuGlgpo.roa
Signing time:             Tue 29 Mar 2022 16:36:07 +0000
ROA not before:           Tue 29 Mar 2022 16:36:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91409756 (0x572cd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 29 16:36:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55873a9aa29b14e9380915247e6e6f52e1a5829a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:e3:43:52:6f:bb:8b:ca:f8:a7:47:83:84:
                    da:a7:69:e0:90:fc:fd:8f:c9:2c:37:a6:ef:31:ba:
                    92:93:fd:03:7d:1e:65:b7:20:2f:0e:19:57:ba:1b:
                    40:58:04:eb:a9:f4:57:80:76:06:82:4a:19:09:31:
                    2b:65:78:68:07:39:30:a5:a5:50:b1:cc:1b:83:a2:
                    a9:2a:94:df:59:6a:c5:b4:42:bc:49:71:7e:a5:de:
                    d2:87:df:31:f8:b5:24:06:d3:f1:ba:b0:2c:fb:ff:
                    f3:4b:61:48:18:91:d7:63:aa:29:a9:74:8a:57:72:
                    42:d7:fa:c4:9b:ca:b4:06:04:94:a3:5d:86:b8:ab:
                    4e:3b:4a:94:87:8d:de:61:bb:55:86:44:ae:25:18:
                    63:94:68:1a:ff:11:96:f2:70:02:8c:d0:04:c1:3d:
                    85:ef:63:04:94:25:1d:26:1c:2a:50:77:04:29:4d:
                    8c:63:f4:67:cb:e0:9e:3b:06:6e:b3:c0:58:85:7b:
                    98:3d:5b:bc:d2:f3:19:b1:0e:7c:03:2f:94:f8:28:
                    8f:7c:7f:6f:c2:71:da:8d:35:1f:97:22:a1:17:b7:
                    8f:3c:6d:3e:ab:48:62:55:fb:b1:05:8a:be:c1:57:
                    e4:89:a3:5e:c5:9c:f2:ad:7a:05:79:aa:81:aa:20:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:87:3A:9A:A2:9B:14:E9:38:09:15:24:7E:6E:6F:52:E1:A5:82:9A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VYc6mqKbFOk4CRUkfm5vUuGlgpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:00:e3:3e:de:6f:d2:85:4f:92:f3:a9:57:87:f2:10:f0:f2:
         7a:4f:c8:fa:81:35:45:dd:d3:51:e2:df:ea:70:90:51:04:a6:
         69:ac:53:a5:8e:4b:46:30:2d:69:fb:b8:97:ac:dc:b7:f9:82:
         00:2c:ec:9b:79:ec:e7:81:c7:a1:32:75:21:a0:24:d2:ee:2c:
         47:7a:98:02:e1:a5:7f:0e:54:6a:99:dc:0d:85:fb:93:a0:d0:
         13:e2:3e:90:cd:09:f4:8d:08:48:55:72:d3:35:17:e0:61:bf:
         93:68:86:00:64:f1:05:8b:3b:e7:cc:c0:09:7f:2d:9d:71:66:
         71:95:5e:4f:2f:35:8e:65:57:73:51:4d:7b:59:80:96:e5:87:
         a1:e6:a1:af:66:5e:05:6f:30:55:03:da:6b:96:72:9c:bc:5b:
         fc:8c:cd:f0:57:f6:ec:b9:a9:c0:e1:86:e8:c7:df:b1:a0:5c:
         0f:1a:f2:ba:09:68:36:de:e6:9d:7b:51:dd:de:36:2f:3e:20:
         47:40:d5:89:ba:ed:f5:29:e8:6a:b2:48:3a:13:8f:d0:85:64:
         00:ef:24:aa:12:eb:92:51:09:1f:d2:7a:f1:50:f5:46:a3:83:
         ed:e5:b8:2a:b7:d3:ad:cf:9e:74:36:a1:8f:8e:7d:ef:4c:56:
         95:ac:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----