Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YnvvdbQnPnYB85-CWJAWMX7PPvU.roa
File:                     YnvvdbQnPnYB85-CWJAWMX7PPvU.roa (raw, json)
Hash identifier:          3LL3vANh75fZxkPlRsp2/acjmLs8/+bX2cuSXSbLxIo=
Subject key identifier:   62:7B:EF:75:B4:27:3E:76:01:F3:9F:82:58:90:16:31:7E:CF:3E:F5
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08479808
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YnvvdbQnPnYB85-CWJAWMX7PPvU.roa
Signing time:             Fri 10 Jun 2022 02:51:02 +0000
ROA not before:           Fri 10 Jun 2022 02:51:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138909704 (0x8479808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 10 02:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=627bef75b4273e7601f39f82589016317ecf3ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:53:cb:9e:d5:c5:8e:b5:13:eb:ea:b0:4b:
                    4d:5e:36:81:f3:aa:d9:c8:9e:72:66:a0:ce:60:10:
                    48:60:c7:c8:d3:44:de:03:3e:eb:5b:c2:dc:80:11:
                    e6:34:2f:40:f8:7f:1a:6a:df:17:84:9e:c2:0b:50:
                    08:9d:c4:0b:6c:76:79:78:ff:67:56:de:b7:39:b4:
                    58:ec:14:f0:1f:c0:2e:ee:d0:a1:d3:40:bd:4a:fb:
                    22:ca:72:c5:17:b7:1e:0b:a7:a7:c5:66:d0:8a:70:
                    b5:a8:ad:b6:56:96:15:a3:dd:cb:cb:4d:3d:3f:99:
                    97:c1:dc:bc:58:b6:77:3c:dc:9d:5c:db:1b:03:b1:
                    72:eb:44:31:44:9b:14:d0:05:e9:bb:1d:c1:8c:b3:
                    5e:b8:e0:f7:48:c0:53:05:14:69:e7:f3:ed:76:d2:
                    f6:5c:f7:57:b6:08:24:12:de:f6:36:f2:26:98:2a:
                    e9:dc:11:b6:dc:e2:e5:87:e9:70:59:98:92:39:50:
                    ac:d4:0f:c2:af:b5:27:d2:7d:bd:3e:d5:66:f2:64:
                    f9:21:4b:58:8b:61:37:3e:ca:9d:e1:a2:be:8f:d8:
                    e9:21:bd:2e:85:45:74:10:21:ab:13:9d:10:5e:c7:
                    b0:da:fd:5a:ab:ac:37:e6:f5:dd:c2:dd:a9:ae:ba:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7B:EF:75:B4:27:3E:76:01:F3:9F:82:58:90:16:31:7E:CF:3E:F5
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YnvvdbQnPnYB85-CWJAWMX7PPvU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         69:c6:b5:f1:94:47:cb:55:48:48:ce:08:00:df:27:d8:41:f3:
         c7:85:32:1e:91:ac:1e:5f:e1:03:4b:e9:20:9e:b8:b6:2b:6d:
         4c:25:b7:64:11:6c:01:30:94:f1:e6:69:1c:69:87:f4:d8:a0:
         9b:a3:21:ab:da:b6:73:de:1c:d6:cd:ae:25:5b:36:f1:42:5e:
         00:bf:cc:63:0d:37:06:2c:b4:00:5c:2a:a9:09:7c:cd:11:92:
         57:4d:06:89:f3:e2:da:b7:b1:50:5e:8b:c2:0b:c6:c5:46:18:
         d2:1c:8a:c9:d8:0a:71:58:6b:f5:f5:3a:e1:75:6a:34:ef:70:
         ae:22:a7:e6:09:87:c7:57:94:bc:9d:57:3a:1a:c4:19:ca:c8:
         02:03:25:aa:d3:2a:a7:8b:4e:5e:bd:5f:25:26:c5:15:56:a6:
         c2:32:6c:2a:77:84:30:bc:a7:94:dc:b8:6f:c7:c3:2e:98:ac:
         e5:da:83:59:26:64:3c:d6:c2:54:ac:b2:ee:8b:a7:fb:6d:69:
         ab:10:c9:41:17:62:35:b4:17:36:22:2f:32:15:16:d9:1a:51:
         eb:b2:11:69:08:38:d8:a6:e3:8d:29:7b:a9:ec:92:25:76:7b:
         13:1c:04:a2:f3:a8:d9:e4:3c:51:d8:4f:10:31:95:0a:01:13:
         7a:64:1c:ce
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECEeYCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MDAyNTEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjI3YmVmNzViNDI3
M2U3NjAxZjM5ZjgyNTg5MDE2MzE3ZWNmM2VmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJQ1U8ue1cWOtRPr6rBLTV42gfOq2ciecmagzmAQSGDHyNNE
3gM+61vC3IAR5jQvQPh/GmrfF4SewgtQCJ3EC2x2eXj/Z1betzm0WOwU8B/ALu7Q
odNAvUr7IspyxRe3Hgunp8Vm0IpwtaittlaWFaPdy8tNPT+Zl8HcvFi2dzzcnVzb
GwOxcutEMUSbFNAF6bsdwYyzXrjg90jAUwUUaefz7XbS9lz3V7YIJBLe9jbyJpgq
6dwRttzi5YfpcFmYkjlQrNQPwq+1J9J9vT7VZvJk+SFLWIthNz7KneGivo/Y6SG9
LoVFdBAhqxOdEF7HsNr9WqusN+b13cLdqa66jwkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRie+91tCc+dgHzn4JYkBYxfs8+9TAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1ludnZkYlFuUG5ZQjg1LUNXSkFXTVg3UFB2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBpxrXxlEfLVUhIzggA3yfYQfPHhTIekaweX+ED
S+kgnri2K21MJbdkEWwBMJTx5mkcaYf02KCboyGr2rZz3hzWza4lWzbxQl4Av8xj
DTcGLLQAXCqpCXzNEZJXTQaJ8+Lat7FQXovCC8bFRhjSHIrJ2ApxWGv19TrhdWo0
73CuIqfmCYfHV5S8nVc6GsQZysgCAyWq0yqni05evV8lJsUVVqbCMmwqd4QwvKeU
3Lhvx8MumKzl2oNZJmQ81sJUrLLui6f7bWmrEMlBF2I1tBc2Ii8yFRbZGlHrshFp
CDjYpuONKXup7JIldnsTHASi86jZ5DxR2E8QMZUKARN6ZBzO
-----END CERTIFICATE-----