Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_1-UBxume-RBKYFwEKixTNNWzww.roa
File:                     _1-UBxume-RBKYFwEKixTNNWzww.roa (raw, json)
Hash identifier:          G89CSR9+t8QRGsGNdMQJSipdO+y21UY8WUm6vemEMhs=
Subject key identifier:   FF:5F:94:07:1B:A6:7B:E4:41:29:81:70:10:A8:B1:4C:D3:56:CF:0C
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       03E06794
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_1-UBxume-RBKYFwEKixTNNWzww.roa
Signing time:             Fri 04 Feb 2022 14:59:49 +0000
ROA not before:           Fri 04 Feb 2022 14:59:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65038228 (0x3e06794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb  4 14:59:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff5f94071ba67be44129817010a8b14cd356cf0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:3e:0a:a2:ce:52:eb:bc:77:3b:97:0a:f8:
                    08:03:40:5c:58:22:fa:e1:be:1e:c7:b1:a7:95:c7:
                    06:de:ab:29:74:4c:ec:b7:82:b8:8f:d6:cb:b1:91:
                    45:47:55:ef:70:ab:0f:cb:ec:e5:e3:31:7f:4f:6f:
                    75:8f:87:68:80:e4:d1:9f:fe:0d:ac:91:97:fd:97:
                    b6:c8:a6:8b:be:ff:9b:44:d6:b8:99:c7:8a:5e:f4:
                    74:d6:52:e4:58:17:c0:bf:e0:3e:7b:f7:2d:55:f6:
                    33:36:98:d1:34:2d:8d:13:26:9d:0a:6e:93:55:42:
                    ca:70:e3:3b:fa:2d:91:3c:54:f5:e3:75:e0:85:f0:
                    eb:d3:27:73:aa:ae:0f:84:71:73:c2:78:e7:53:f8:
                    00:fd:ee:df:90:42:56:43:8f:67:bc:ee:12:98:a0:
                    c0:7a:a9:92:b6:55:82:43:68:c6:be:70:30:30:81:
                    cc:1a:87:d2:39:3c:85:9e:70:bf:53:9c:c5:27:dc:
                    8b:3e:8b:ee:f1:e7:b9:0a:49:a0:8c:89:af:a2:c5:
                    ff:b4:60:a2:90:d3:06:8e:55:9c:82:18:af:d4:00:
                    95:6e:13:c9:8f:ca:65:f9:42:54:55:18:94:95:8b:
                    4b:ab:7d:27:cc:24:66:bc:e3:ff:cb:ca:75:e8:23:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:94:07:1B:A6:7B:E4:41:29:81:70:10:A8:B1:4C:D3:56:CF:0C
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_1-UBxume-RBKYFwEKixTNNWzww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:5f:3b:02:01:85:ab:fa:e5:2c:01:a5:91:89:ce:4d:e3:
         43:89:e9:60:f8:a6:76:98:41:b7:84:43:01:23:50:e7:38:80:
         8d:e4:ad:b3:1a:dc:a6:ec:f0:67:01:fc:57:8a:24:3a:5a:c2:
         74:9e:b2:53:33:3c:14:e9:4f:15:c9:a2:fa:73:06:0e:cd:d4:
         1c:57:01:47:aa:b5:0e:c9:62:55:df:75:24:6e:d1:46:3b:67:
         32:9d:46:9e:a0:e2:19:53:03:db:08:9b:cf:76:42:59:ed:2d:
         66:33:75:e2:99:f0:5f:ff:a6:d6:47:f9:6a:85:1d:00:f7:4c:
         42:e7:d9:7f:99:6d:e3:21:cf:dd:36:fe:3d:0b:56:d5:37:53:
         4a:e6:9b:7f:23:a8:f0:ad:a6:62:55:b4:92:88:8b:24:5a:b9:
         f2:c5:d4:52:fb:a4:e0:c0:2a:1b:c3:07:a2:83:cd:c1:0d:53:
         42:47:54:20:f5:e7:41:83:54:b5:00:87:b3:a9:8a:1e:88:2c:
         c4:9e:6e:c2:a0:24:84:03:13:23:b4:7c:75:ae:63:8d:f5:e8:
         3b:1b:02:70:89:e3:c7:8b:bd:a9:70:8d:ed:38:85:52:bf:8e:
         e4:1d:97:0c:84:68:6f:1e:e9:d0:f0:79:1c:d3:c8:54:9d:00:
         60:f9:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----