Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLdIHdgZXrchtlazSz7uiL4TMQo.roa
File:                     YLdIHdgZXrchtlazSz7uiL4TMQo.roa (raw, json)
Hash identifier:          uV+F58cDs7gJC9frf6JA+De1mV2cBwgKDlTBcPtMIW8=
Subject key identifier:   60:B7:48:1D:D8:19:5E:B7:21:B6:56:B3:4B:3E:EE:88:BE:13:31:0A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07AA70F0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLdIHdgZXrchtlazSz7uiL4TMQo.roa
Signing time:             Sun 29 May 2022 02:28:15 +0000
ROA not before:           Sun 29 May 2022 02:28:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128610544 (0x7aa70f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 29 02:28:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60b7481dd8195eb721b656b34b3eee88be13310a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:44:4a:45:d5:d8:08:48:e6:ce:d2:9c:68:
                    71:ba:ef:9c:b8:43:fc:16:b5:98:41:10:2e:12:88:
                    c2:67:9e:84:3c:fa:1b:bd:58:2e:cc:78:2f:ef:5b:
                    7c:14:81:cd:5e:fa:96:f7:2b:ba:63:1f:12:18:62:
                    53:5c:fb:a3:5b:f7:c8:ad:a3:5e:14:33:fa:cf:9d:
                    ef:4a:e3:8a:1f:3a:68:f9:3c:f7:99:58:82:05:9f:
                    60:a3:6f:1d:8d:ac:3f:be:a7:10:d4:71:a3:37:5f:
                    d9:3b:66:9e:66:35:a2:5a:53:0a:b9:87:ce:a9:f8:
                    3e:3c:e2:ee:a8:5f:f4:d3:7a:c6:b5:92:42:8d:42:
                    ba:6b:86:63:2d:c6:33:a5:76:ac:77:ae:6a:5c:9f:
                    4c:e6:a5:a3:b5:29:45:8a:20:3e:83:61:52:9c:a7:
                    7e:b6:7e:46:db:7a:57:6f:92:9f:40:bd:03:46:7b:
                    a7:d5:ec:8c:16:52:31:51:e4:85:44:9b:88:ad:a8:
                    58:fb:91:8d:2c:8f:29:96:fd:49:7d:2d:94:55:3d:
                    06:39:14:da:99:ed:ad:8b:bf:8e:ed:a7:0d:85:dc:
                    81:79:1d:2f:eb:d9:14:23:c4:45:4c:81:6d:be:cc:
                    16:3c:35:26:be:2f:56:9a:a1:34:57:8d:18:81:bb:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:48:1D:D8:19:5E:B7:21:B6:56:B3:4B:3E:EE:88:BE:13:31:0A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLdIHdgZXrchtlazSz7uiL4TMQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:43:fd:7f:cb:dc:5b:48:79:f1:ab:cf:22:d8:26:60:cb:cc:
         04:ff:65:00:b8:d7:63:9e:0d:d5:2b:d6:46:79:dd:39:52:4a:
         5c:27:6c:d1:f3:cb:19:a5:70:26:6d:88:83:d8:67:47:21:e8:
         6a:fe:0b:8f:72:14:e8:a2:b5:46:42:24:dc:86:50:a4:91:fc:
         d6:fd:bf:fc:84:bc:a6:98:66:1c:1f:69:a8:6e:b7:67:e0:5a:
         ab:01:66:8f:3f:90:65:e9:d0:eb:e1:85:3a:73:36:2e:d4:88:
         24:c8:1b:92:f2:80:5d:d5:b1:cf:2d:d6:9e:93:e7:e0:8d:c2:
         85:c7:a0:9e:d0:33:ac:48:7c:63:e9:1a:d3:fa:27:de:ce:e5:
         5b:c7:a3:96:10:14:5b:64:14:9c:71:ae:d4:1e:43:53:cd:78:
         a3:22:0e:fd:20:c4:5c:b8:3b:b8:fd:f9:e4:bd:10:97:36:1e:
         6b:53:ce:71:f8:52:f1:ca:ef:2a:c7:28:af:2b:c2:dc:26:a7:
         06:e9:bb:5a:0e:49:c0:6f:fe:a1:df:5f:5a:8e:d9:a3:86:26:
         13:e2:93:3e:b6:e6:99:71:49:ec:72:17:b2:2f:26:61:4f:e5:
         10:f2:12:a1:84:45:24:de:cf:f4:35:78:c1:04:9d:dd:be:35:
         c1:ac:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----