Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa
File:                     YCzw7lG19wQv5QZSd137y0xxJRk.roa (raw, json)
Hash identifier:          2wm3iuBcAao2QRddaG3/HMwJ2Kq3IdbgWwQQjXWsOe4=
Subject key identifier:   60:2C:F0:EE:51:B5:F7:04:2F:E5:06:52:77:5D:FB:CB:4C:71:25:19
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06288759
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa
Signing time:             Sat 23 Apr 2022 21:08:06 +0000
ROA not before:           Sat 23 Apr 2022 21:08:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103319385 (0x6288759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 23 21:08:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=602cf0ee51b5f7042fe50652775dfbcb4c712519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:c9:72:a0:a4:cb:e9:6a:2a:99:1e:72:04:
                    ad:93:f4:a2:6b:6b:49:1e:86:bb:e6:32:a3:9e:ab:
                    32:7d:8c:db:a0:af:af:5a:31:c0:81:04:62:11:ee:
                    30:63:4f:6b:07:fa:4e:30:f9:a4:82:45:7c:6f:dd:
                    ee:fb:98:59:52:6c:93:d6:f3:39:f6:8b:d1:51:b9:
                    7c:55:08:bc:5e:b6:3d:ec:f8:ce:ae:4d:46:4f:c3:
                    d1:75:6f:ee:a8:7a:71:8e:c6:94:97:52:c4:e0:11:
                    81:bb:c8:a8:a7:c4:bf:44:d4:48:68:6d:39:a9:07:
                    d3:0c:92:4e:02:94:b8:55:08:ba:a0:a6:ba:90:3e:
                    c3:f7:38:44:52:76:c0:35:9c:b0:e2:67:2f:80:86:
                    6a:8a:32:61:9e:a0:6f:9c:a6:12:6b:7e:b1:da:6b:
                    39:5d:65:79:d7:4a:ff:6e:16:32:15:bf:d1:8b:92:
                    68:6e:b1:df:48:d6:dd:29:00:71:3c:98:ac:87:92:
                    d0:40:08:aa:ae:e5:b3:1e:86:05:18:11:09:b0:0a:
                    c9:a3:c5:4e:e7:aa:c7:9f:99:ff:d6:35:10:26:ee:
                    22:7c:c6:14:1f:f4:e4:6c:77:73:ce:ed:1e:98:14:
                    a8:62:95:a4:fd:38:20:81:ac:c9:b5:23:eb:4c:30:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:F0:EE:51:B5:F7:04:2F:E5:06:52:77:5D:FB:CB:4C:71:25:19
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YCzw7lG19wQv5QZSd137y0xxJRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:76:f4:8a:b4:13:5a:cc:04:f9:f5:74:e6:ef:4a:3b:9a:68:
         f9:2c:7c:13:6f:71:ff:c0:8e:4b:24:1e:1b:de:d3:18:ae:45:
         1d:fa:ec:d8:72:89:0a:49:92:93:9e:d9:bc:53:45:bd:bf:ab:
         dd:a2:a2:64:c2:3c:53:bf:0a:09:30:66:42:48:a0:9b:51:78:
         27:05:94:8c:c4:a3:8c:24:ce:a8:33:37:ee:6d:d2:54:7f:0b:
         15:21:8e:0a:05:7b:32:22:5a:6b:eb:02:91:c7:27:ae:04:74:
         71:09:5c:26:5e:b8:11:98:05:b6:5f:ce:2c:45:56:54:71:45:
         87:88:e6:be:27:7c:dc:e0:2d:55:8e:65:56:54:43:24:63:e4:
         e3:71:13:43:51:40:12:99:d6:0c:13:9f:21:97:e4:ff:29:9c:
         80:89:e9:63:85:c1:2d:24:93:20:77:5f:f5:5a:16:2b:61:e3:
         53:d9:e5:c4:55:55:04:bd:16:a8:ea:f2:a9:83:5c:c0:59:1f:
         46:42:37:c6:c5:89:df:2a:65:b5:f3:be:f7:c3:ea:97:e4:4b:
         f5:d8:e8:d5:a1:86:fe:b2:79:34:96:68:27:ff:ff:67:3c:e8:
         69:02:e6:ee:12:1e:80:e9:b1:6b:51:1c:f4:c3:c2:ca:67:51:
         cb:35:ae:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBiiHWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQy
MzIxMDgwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjAyY2YwZWU1MWI1
ZjcwNDJmZTUwNjUyNzc1ZGZiY2I0YzcxMjUxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANEQyXKgpMvpaiqZHnIErZP0omtrSR6Gu+Yyo56rMn2M26Cv
r1oxwIEEYhHuMGNPawf6TjD5pIJFfG/d7vuYWVJsk9bzOfaL0VG5fFUIvF62Pez4
zq5NRk/D0XVv7qh6cY7GlJdSxOARgbvIqKfEv0TUSGhtOakH0wySTgKUuFUIuqCm
upA+w/c4RFJ2wDWcsOJnL4CGaooyYZ6gb5ymEmt+sdprOV1leddK/24WMhW/0YuS
aG6x30jW3SkAcTyYrIeS0EAIqq7lsx6GBRgRCbAKyaPFTueqx5+Z/9Y1ECbuInzG
FB/05Gx3c87tHpgUqGKVpP04IIGsybUj60wwMLsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRgLPDuUbX3BC/lBlJ3XfvLTHElGTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1lDenc3bEcxOXdRdjVRWlNkMTM3eTB4eEpSay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBXdvSKtBNazAT59XTm70o7mmj5LHwTb3H/wI5L
JB4b3tMYrkUd+uzYcokKSZKTntm8U0W9v6vdoqJkwjxTvwoJMGZCSKCbUXgnBZSM
xKOMJM6oMzfubdJUfwsVIY4KBXsyIlpr6wKRxyeuBHRxCVwmXrgRmAW2X84sRVZU
cUWHiOa+J3zc4C1VjmVWVEMkY+TjcRNDUUASmdYME58hl+T/KZyAieljhcEtJJMg
d1/1WhYrYeNT2eXEVVUEvRao6vKpg1zAWR9GQjfGxYnfKmW18773w+qX5Ev12OjV
oYb+snk0lmgn//9nPOhpAubuEh6A6bFrURz0w8LKZ1HLNa46
-----END CERTIFICATE-----