Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa
File:                     Z1pthuS4af6lc6o2TGaEs0R6U4o.roa (raw, json)
Hash identifier:          YxYJs12TMELoXJFMaTD/eyfAbGlNts2KbwD1pwAcPeo=
Subject key identifier:   67:5A:6D:86:E4:B8:69:FE:A5:73:AA:36:4C:66:84:B3:44:7A:53:8A
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08888FFA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa
Signing time:             Wed 15 Jun 2022 01:18:44 +0000
ROA not before:           Wed 15 Jun 2022 01:18:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143167482 (0x8888ffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 15 01:18:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=675a6d86e4b869fea573aa364c6684b3447a538a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:c5:db:9c:2d:98:68:7e:06:1b:54:1c:bb:
                    4f:58:0c:2f:28:82:f2:8e:47:2a:32:c2:d7:6f:2b:
                    cb:34:18:bc:16:d7:80:01:13:cf:79:5e:00:f5:2a:
                    ce:bc:c8:3c:a6:99:00:8d:30:9b:0b:68:86:38:12:
                    2c:4f:39:b6:61:82:ae:a3:c7:df:02:bc:2e:1b:31:
                    b4:2f:1a:49:08:1d:2c:ee:53:66:12:af:ab:25:dc:
                    47:61:34:f1:57:86:58:32:b9:49:34:d7:2f:41:6f:
                    b8:ed:25:02:e5:70:86:c3:af:f2:9f:c1:99:42:38:
                    e4:cd:75:a3:08:54:95:43:ea:90:02:86:84:96:d1:
                    fd:bf:2e:f9:7e:73:9c:86:22:3b:61:bd:6c:e3:ea:
                    66:67:2d:87:d4:85:23:f3:69:e4:88:84:71:b4:ed:
                    e5:c8:ad:86:69:5a:de:ed:01:8e:c5:ab:8f:a4:92:
                    2e:d3:85:d0:c7:2f:f0:70:0b:c7:b1:e5:e7:03:f1:
                    8f:94:82:e4:98:ee:6c:80:9f:04:6d:82:97:64:b1:
                    ec:dd:28:94:4c:f6:d1:a7:9b:39:57:5b:39:48:1d:
                    cf:e8:a7:bc:62:56:a7:1b:9e:24:f9:00:86:4e:87:
                    6f:7b:0b:71:8f:84:ee:81:46:4a:29:a7:c3:6a:8b:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:6D:86:E4:B8:69:FE:A5:73:AA:36:4C:66:84:B3:44:7A:53:8A
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Z1pthuS4af6lc6o2TGaEs0R6U4o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:0f:d5:f2:0f:8d:8a:42:e5:70:31:a1:33:c3:11:db:61:
         59:35:74:26:33:7a:ca:3f:58:be:91:30:d5:7f:ed:79:45:04:
         a8:1c:5c:06:bd:90:bb:2f:99:2e:9b:f3:8e:9d:78:de:c5:4a:
         05:a3:f7:aa:5b:7f:96:5a:54:31:99:15:15:17:e6:87:ab:ee:
         5e:ac:28:cb:df:c3:a6:90:46:1b:a2:07:ce:15:03:82:cd:b9:
         e8:90:7d:51:83:d5:cc:cb:4e:92:ab:06:80:1f:95:60:38:ac:
         3b:8d:c1:e9:af:21:61:e4:58:0c:04:a1:51:97:ad:c3:1b:d6:
         d4:05:5d:81:c4:b8:16:c9:99:66:ae:32:ef:5e:ba:20:22:9b:
         76:04:06:38:44:09:61:f2:20:83:39:27:e6:0c:b8:1f:de:fc:
         c0:67:b7:1b:c5:6a:4b:98:2f:4e:30:f7:69:6f:7f:11:9f:8c:
         dc:47:c7:90:40:56:25:89:01:c7:95:55:36:64:f8:26:1e:75:
         0e:ed:ff:e9:69:66:f4:42:46:52:45:8d:6b:58:ae:5d:5b:2d:
         01:f3:b7:87:6d:47:89:05:cf:95:5c:df:69:11:ea:bf:65:c5:
         e3:c1:30:13:57:f3:50:26:dc:f4:1d:74:11:5b:f9:49:af:f0:
         b3:f8:89:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----