Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa
File:                     Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa (raw, json)
Hash identifier:          rN5Z+pA8QZtSRthw7+FTVyvzPimxjBfphnCfLJWGwzU=
Subject key identifier:   67:E5:60:54:BB:58:09:F1:ED:A5:39:28:06:45:8A:3A:8E:7C:8B:44
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       040D4DD6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa
Signing time:             Thu 10 Feb 2022 13:03:24 +0000
ROA not before:           Thu 10 Feb 2022 13:03:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67980758 (0x40d4dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 10 13:03:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67e56054bb5809f1eda5392806458a3a8e7c8b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:51:01:06:bc:95:75:fd:66:5e:b4:0e:18:
                    85:39:46:c7:26:e1:48:1b:95:62:17:ab:87:ea:8f:
                    22:b8:6c:ca:13:87:d9:c7:0d:0a:e0:fc:49:7d:17:
                    92:23:19:91:e1:68:a1:ae:5d:05:11:31:64:7c:86:
                    24:9b:00:38:b1:fb:ef:7d:0e:1f:da:5a:36:4f:d9:
                    56:59:23:3f:46:23:d8:fb:a4:a7:ba:17:ab:e0:ac:
                    58:b2:93:be:51:d2:25:e1:f7:95:fd:f4:7d:91:52:
                    22:fc:d8:14:7c:78:07:1c:ba:4f:56:ea:88:f8:ed:
                    1d:49:75:9b:e8:48:ab:95:97:7c:52:39:83:61:c1:
                    ec:59:f9:43:c4:52:00:05:f2:33:a1:3d:0e:c9:65:
                    e1:ae:7b:d9:67:d9:56:88:24:ef:d0:f3:d9:d9:fc:
                    89:83:46:dc:6e:24:03:04:29:ab:88:13:4e:07:db:
                    d8:9d:fb:11:b2:5e:88:32:00:97:5b:95:d0:8b:08:
                    0c:ac:b8:c9:2d:c2:52:ef:19:f9:a5:a3:fe:e8:e5:
                    21:f9:66:08:5c:f7:53:a4:ef:42:57:0e:86:d3:d1:
                    94:c8:89:8a:94:08:87:19:a9:d0:e2:7a:fa:e1:fc:
                    a2:4c:13:e9:5e:33:e9:3d:03:30:df:f3:fb:b0:1f:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:60:54:BB:58:09:F1:ED:A5:39:28:06:45:8A:3A:8E:7C:8B:44
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z-VgVLtYCfHtpTkoBkWKOo58i0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:62:e7:1b:87:90:2d:cf:23:b0:18:ad:8c:8a:75:97:6e:6d:
         96:e3:79:17:d8:1f:bc:65:3e:83:55:56:3e:aa:c3:48:c0:98:
         c8:40:24:39:56:2e:d5:65:03:68:ca:bf:b2:aa:1b:48:c7:e6:
         64:b7:f0:da:f0:99:6c:af:30:eb:57:bd:36:51:b8:72:b6:4d:
         7d:32:a2:1d:b3:a3:03:53:41:77:fe:c1:cd:37:3d:c6:a8:3b:
         98:c3:0c:0e:bf:4a:dd:57:43:31:84:64:b5:98:8c:6a:ac:41:
         a0:e4:6d:60:55:83:be:11:b3:8c:d4:67:08:cb:fb:57:8f:44:
         60:86:05:1f:70:80:f8:d3:36:8c:25:bf:f8:37:c8:da:6e:5f:
         9d:0d:3f:13:c0:d5:73:13:30:4a:cf:b7:64:0d:a4:c7:91:a1:
         9f:72:c1:06:2d:93:2d:ae:5f:6c:84:56:c8:d6:a0:b1:da:92:
         75:e7:3f:b8:06:f0:cd:5a:82:de:61:cf:c0:5b:ab:27:4c:0c:
         4d:3b:f5:cc:f3:25:58:1a:e4:13:69:0a:ad:95:1b:85:f0:2d:
         12:02:3e:bf:9b:7c:50:e2:ee:4d:dc:89:a7:65:41:09:fc:e3:
         4d:a9:30:49:66:15:96:d7:b1:26:a2:9b:21:2f:45:7d:b0:09:
         83:b9:05:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----