Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aAQdes2SEJ_kubv0l6rRIjnZoQE.roa
File:                     aAQdes2SEJ_kubv0l6rRIjnZoQE.roa (raw, json)
Hash identifier:          4GfjQu0mJaWx9sduu0srMJ9jo5M2+7VgeB658GEQvrU=
Subject key identifier:   68:04:1D:7A:CD:92:10:9F:E4:B9:BB:F4:97:AA:D1:22:39:D9:A1:01
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0430EE2F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aAQdes2SEJ_kubv0l6rRIjnZoQE.roa
Signing time:             Tue 15 Feb 2022 02:18:13 +0000
ROA not before:           Tue 15 Feb 2022 02:18:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70315567 (0x430ee2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 15 02:18:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68041d7acd92109fe4b9bbf497aad12239d9a101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:23:77:b1:48:49:8f:85:9e:0d:fe:97:7f:
                    ed:c8:3b:88:75:d2:00:31:13:c1:42:f2:22:4b:ec:
                    e0:73:a3:20:fd:5d:01:1f:22:86:39:95:ce:f9:1b:
                    88:03:03:74:03:35:8f:1f:1b:1c:32:b8:4a:1c:38:
                    b2:46:00:e0:bd:a9:72:dc:2c:07:83:94:3d:e7:32:
                    2a:d1:d5:1a:5e:20:be:18:1d:d2:f5:07:e9:2e:f4:
                    9e:80:b0:82:84:f9:88:99:35:ef:a3:30:26:c9:0d:
                    49:6a:3f:32:2a:16:2f:c3:97:ec:a6:f8:e5:c4:4d:
                    94:85:53:5a:9f:bd:5c:cf:8b:23:7a:41:e4:42:5d:
                    f0:19:7a:53:bf:6c:c1:ee:75:c3:9b:ec:97:ab:ea:
                    23:a1:1c:8a:f3:1c:ff:59:ad:bd:a5:55:91:3e:f9:
                    d3:2c:01:a9:89:b1:c5:c0:9e:f7:13:bc:df:b0:a2:
                    f6:f6:2d:31:91:a9:9d:d3:1d:9c:92:77:51:82:09:
                    61:9d:11:bc:0b:ab:d7:79:f0:27:f9:8d:f8:cd:e2:
                    8e:e1:6f:ba:15:47:b6:5d:7c:45:79:d7:33:4c:16:
                    b3:b1:ae:a6:d3:f6:ee:03:da:aa:8e:bf:77:e0:8e:
                    67:b0:93:0b:7c:2f:c3:fb:06:c8:78:82:fa:fd:85:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:04:1D:7A:CD:92:10:9F:E4:B9:BB:F4:97:AA:D1:22:39:D9:A1:01
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aAQdes2SEJ_kubv0l6rRIjnZoQE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:4a:4a:57:cb:96:70:dd:84:13:27:06:15:78:d0:d7:e5:ac:
         c7:84:fe:6f:74:2d:c0:74:80:5a:6b:ab:43:01:98:ae:47:92:
         d9:26:10:de:5f:33:73:a3:62:4c:91:38:9e:65:59:ee:a1:12:
         fa:5b:32:72:f0:a0:7b:90:ec:82:76:8a:5a:c0:9a:1d:37:02:
         93:d0:fc:b9:5f:77:7d:fd:29:6a:70:c9:c0:b3:fc:c9:52:f0:
         4e:31:20:b2:a9:ec:2b:1a:24:7c:df:e4:80:9b:55:27:13:3f:
         88:00:03:9d:2b:91:e7:48:76:ee:b5:d6:af:01:f7:68:4f:fe:
         ca:fd:89:83:17:fb:82:bd:c0:8c:a9:cd:c9:e4:fc:54:ac:e9:
         5d:03:21:25:c8:0d:df:4b:d9:4c:f5:14:60:ef:7f:2e:0b:39:
         94:88:8a:0d:9b:bf:af:88:b5:a5:b7:64:f6:47:69:c3:85:73:
         4b:8d:a0:8d:cb:80:53:3e:31:48:5d:2c:60:58:bd:50:fb:87:
         48:9d:f1:b7:52:7f:83:ed:42:cb:3e:bf:fe:0e:90:20:2b:6a:
         0c:03:a6:ee:1d:b6:30:a6:d7:31:b4:23:d5:62:52:0f:d0:77:
         20:92:71:9f:ce:db:2c:91:a3:a0:d0:58:67:55:b5:8b:69:72:
         58:2e:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----