Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xr9-0gPa5L2iqTBSa2y9Xrui-6g.roa
File:                     Xr9-0gPa5L2iqTBSa2y9Xrui-6g.roa (raw, json)
Hash identifier:          GcCnUxb5AwmxtGzLEvmppJ5PWx0WD4hvXK+sZfGWHws=
Subject key identifier:   5E:BF:7E:D2:03:DA:E4:BD:A2:A9:30:52:6B:6C:BD:5E:BB:A2:FB:A8
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06A7CE1D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xr9-0gPa5L2iqTBSa2y9Xrui-6g.roa
Signing time:             Mon 09 May 2022 14:04:46 +0000
ROA not before:           Mon 09 May 2022 14:04:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111660573 (0x6a7ce1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May  9 14:04:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ebf7ed203dae4bda2a930526b6cbd5ebba2fba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:16:79:36:79:2a:38:9d:01:69:05:1b:12:
                    11:f6:f1:46:d5:7e:6f:05:23:fc:63:95:ce:27:ae:
                    ce:a6:4f:bb:62:1e:36:07:98:d4:01:df:e8:78:2d:
                    7c:87:5a:c0:9f:bd:e6:67:02:7c:02:f6:46:fa:dc:
                    5f:96:90:48:1f:92:d7:e6:7e:bd:f2:8e:db:11:d1:
                    40:31:ce:a2:f2:6f:3f:7a:2f:7c:d9:99:14:f7:21:
                    5e:2a:1d:76:48:24:26:56:68:a3:21:f2:11:09:72:
                    9f:36:a2:f3:32:df:0c:10:ec:eb:ea:23:b2:bb:d4:
                    98:ec:ff:b8:1c:81:a3:a5:b6:9b:e7:d2:94:4c:d7:
                    58:91:52:58:f0:72:93:61:d4:73:4f:c3:e9:58:ac:
                    c7:51:7a:4d:a3:19:5f:ba:62:f4:c3:01:35:a6:2a:
                    47:61:1f:a4:1c:88:35:a7:8e:ea:db:b3:0e:07:cd:
                    44:7f:b8:a2:f3:ce:9e:f9:91:49:24:41:37:1b:fb:
                    ed:7e:53:e6:49:70:0a:10:b0:e9:a1:27:94:71:99:
                    21:65:6d:bd:af:d6:db:1b:42:71:ea:a0:59:26:92:
                    d1:80:aa:c8:1c:df:57:01:76:88:55:c2:42:f5:1a:
                    49:a8:29:d8:d2:cd:4e:89:4b:67:ea:6e:7f:a9:45:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BF:7E:D2:03:DA:E4:BD:A2:A9:30:52:6B:6C:BD:5E:BB:A2:FB:A8
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xr9-0gPa5L2iqTBSa2y9Xrui-6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:6c:4f:fa:00:b9:16:35:8f:17:ba:80:0e:09:99:a3:0e:e8:
         8a:0d:b2:3e:70:de:30:3f:69:79:cf:fe:f5:59:96:54:72:1e:
         b3:2b:15:31:02:c5:29:73:08:cb:a3:c4:93:ba:e6:a9:1e:fc:
         1a:6d:83:43:4c:a1:ce:bb:63:09:d8:5b:a1:8e:1f:44:76:5c:
         f3:49:e4:de:f6:30:e9:53:e8:7d:63:68:3a:a8:cc:8e:bc:43:
         78:f0:79:05:96:6f:45:1d:ec:9c:1d:f3:bc:97:b8:14:49:f5:
         e0:a6:21:86:a4:f2:19:8a:a2:d4:df:bc:c2:84:2b:c1:2b:60:
         1c:de:b0:05:33:ea:21:56:0d:5e:aa:ef:d9:56:4c:07:ac:82:
         8c:a4:ce:b9:55:94:50:96:58:9c:59:e0:81:48:52:b6:37:34:
         a1:6e:69:34:03:5c:80:b3:98:8b:82:d9:31:d8:7a:d7:f9:d0:
         46:c9:00:26:12:ac:a7:7f:95:0e:7f:5a:ee:77:43:d6:e3:04:
         b1:a5:a3:4b:bd:cd:11:a0:db:e5:4f:16:98:9e:aa:6c:59:b1:
         76:6c:e9:85:fd:6a:1b:1e:55:a1:a7:d9:f5:3d:b5:bf:7c:f4:
         1e:19:97:c8:68:2b:2b:ff:6d:f9:39:aa:8f:b4:92:cc:8a:65:
         c4:bf:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----