Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bTK7V9ZezGrFgGme4uYCL4IAXsE.roa
File:                     bTK7V9ZezGrFgGme4uYCL4IAXsE.roa (raw, json)
Hash identifier:          scoUMULZkm2zkdRm4SEVsfkYlVt8vMkrCZwRcDYmOYI=
Subject key identifier:   6D:32:BB:57:D6:5E:CC:6A:C5:80:69:9E:E2:E6:02:2F:82:00:5E:C1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       046BE53B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bTK7V9ZezGrFgGme4uYCL4IAXsE.roa
Signing time:             Tue 22 Feb 2022 14:21:15 +0000
ROA not before:           Tue 22 Feb 2022 14:21:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74179899 (0x46be53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 22 14:21:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6d32bb57d65ecc6ac580699ee2e6022f82005ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d9:1f:7b:3f:8f:f6:d1:1c:79:d9:8f:3c:45:
                    77:e2:c9:88:82:0e:b1:d9:bb:a5:41:6f:09:52:72:
                    3d:58:bb:17:f1:e8:af:6f:b3:7c:d2:3e:09:f1:1c:
                    f1:de:e6:29:b8:20:ab:ec:fb:af:10:cb:ff:9f:d4:
                    42:84:0a:d4:b8:7e:ed:0d:ef:57:41:31:76:43:bf:
                    63:09:99:a0:ef:b0:f5:c2:a3:64:68:a8:8d:56:64:
                    f9:27:bd:ad:82:e1:c2:c5:8a:61:1e:00:a7:87:24:
                    93:4d:82:06:49:14:cf:35:fa:f2:ab:fc:4d:4c:4d:
                    d3:64:3d:8a:5b:d3:bc:dc:1f:19:84:c2:81:3e:e8:
                    39:36:61:06:11:fb:45:ba:42:18:94:7f:ca:74:43:
                    80:d8:7a:3c:06:63:60:e0:94:9b:c2:97:28:26:a4:
                    57:43:c2:ae:71:34:6a:4e:e1:38:ca:b7:b2:1b:ee:
                    a3:59:d5:32:8d:25:69:71:c4:2d:d3:02:5d:20:54:
                    30:0f:71:c7:72:60:71:61:b9:35:8f:a9:fb:8b:e3:
                    94:ee:4b:5c:56:5a:83:25:7f:78:a1:d3:83:f4:52:
                    1e:aa:a4:ea:f2:ab:81:0f:06:36:8f:3a:96:be:f8:
                    4c:c0:48:4f:c8:69:fc:ce:23:4e:71:3c:45:42:84:
                    3b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:32:BB:57:D6:5E:CC:6A:C5:80:69:9E:E2:E6:02:2F:82:00:5E:C1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bTK7V9ZezGrFgGme4uYCL4IAXsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:70:4b:9c:e7:15:70:9b:09:79:12:46:8c:d7:61:68:6f:c9:
         2a:73:d5:8d:bb:61:03:5f:9c:0c:34:68:64:b5:c3:85:b4:87:
         79:63:fd:25:76:2e:10:7e:45:98:3b:93:07:b4:24:f8:1f:e9:
         15:21:b6:ad:c7:9c:2b:3e:7c:d0:92:a7:ef:d2:53:5e:fa:2b:
         36:e6:db:1d:c5:40:4e:fc:99:04:ae:10:b9:58:0c:8d:cf:86:
         6e:94:84:64:7d:5b:15:1c:87:3f:58:04:01:8a:be:b9:27:e7:
         1c:e2:6d:87:7d:68:67:95:41:95:1a:6c:1f:e1:ed:7d:c0:3a:
         8d:80:14:a9:46:cf:f1:8a:e2:15:10:01:bd:80:ba:7c:f9:b9:
         e4:7b:11:8d:32:1e:8a:ac:9d:79:1b:38:ff:c3:b9:c7:7f:90:
         2b:0c:21:83:c5:1c:47:3e:4a:0b:fe:40:9d:82:73:b7:69:a0:
         1c:2b:69:81:f2:07:51:dc:c8:92:81:61:a2:07:74:23:a7:a5:
         fc:7b:4e:c5:6c:d2:c4:a5:ab:0a:db:64:66:5a:c6:82:5a:be:
         c0:ff:79:79:39:6a:65:0f:93:1a:f6:f2:c5:34:07:b8:b4:e4:
         62:0a:65:1b:6a:23:25:a0:7d:c7:d1:4d:b7:36:98:d7:9f:26:
         15:14:2b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----