Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/boM-dGOFIcU4zuSEnT4Qt_Jo3QU.roa
File:                     boM-dGOFIcU4zuSEnT4Qt_Jo3QU.roa (raw, json)
Hash identifier:          QkZ1iuOXi/X6XM3L+XoWQ7R0/TWhW/xou5EbBUcsPM4=
Subject key identifier:   6E:83:3E:74:63:85:21:C5:38:CE:E4:84:9D:3E:10:B7:F2:68:DD:05
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06B55F68
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/boM-dGOFIcU4zuSEnT4Qt_Jo3QU.roa
Signing time:             Tue 10 May 2022 05:04:31 +0000
ROA not before:           Tue 10 May 2022 05:04:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17660
IP address blocks:        151.216.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112549736 (0x6b55f68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 10 05:04:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e833e74638521c538cee4849d3e10b7f268dd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:25:45:17:75:b8:5f:1d:23:16:c4:d4:84:
                    8a:c0:19:fe:23:8e:e8:e1:cd:d8:8d:b8:d6:5e:f9:
                    ef:fd:83:33:04:e5:44:44:4b:c0:ca:bc:c9:ae:eb:
                    e9:1f:e1:3f:1f:21:56:68:a4:a3:78:fe:ce:f3:97:
                    b9:10:7f:ed:29:ff:80:27:d3:e6:24:74:b0:0e:a6:
                    c7:72:12:ee:e3:1e:90:68:41:22:4a:a1:06:d7:1a:
                    b9:7f:7c:19:18:2f:dc:43:40:a7:ae:4d:14:c7:9b:
                    b6:93:00:ec:03:6a:a3:3a:e1:29:e7:1b:84:f3:ab:
                    b1:0a:c4:33:78:9a:06:87:c7:5d:f8:e0:5a:64:56:
                    c9:a6:99:20:c6:bc:40:41:3b:d4:a6:54:56:59:c1:
                    a1:fd:5c:a8:c8:ff:59:0e:23:82:7c:3f:80:fa:25:
                    84:aa:01:79:42:b2:51:e1:a2:9c:f1:de:0b:d4:ba:
                    06:42:0b:9c:ba:f4:51:5b:85:d2:a5:72:c4:bd:80:
                    df:89:8c:16:23:06:9f:4a:21:c4:0b:3d:92:7d:31:
                    9e:44:bd:3e:5b:01:79:dc:99:91:0a:8a:e5:69:c7:
                    15:40:50:f0:d7:70:eb:44:6f:34:a6:c8:d0:b9:bc:
                    35:dd:b0:5f:a9:09:83:3c:da:f8:d1:9a:5e:ff:13:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:3E:74:63:85:21:C5:38:CE:E4:84:9D:3E:10:B7:F2:68:DD:05
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/boM-dGOFIcU4zuSEnT4Qt_Jo3QU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:74:cb:df:25:59:e2:34:ac:ff:c6:e0:e6:4e:8a:6d:00:5c:
         8b:1e:35:67:f0:a4:7e:fe:b5:81:97:54:74:f1:a9:57:d6:31:
         49:08:81:85:1f:d3:d7:34:04:73:bf:95:1d:1b:f8:62:9b:c8:
         82:de:e1:3e:1e:16:d3:6b:b0:96:4c:17:c3:c1:f4:9b:6d:b7:
         b8:ee:76:2d:5b:c8:b3:5a:4d:13:9b:b2:b9:18:07:17:6c:bb:
         9d:44:bf:e3:84:df:fb:25:4b:4e:10:21:85:3c:61:22:0c:44:
         eb:49:0b:68:2b:e1:6d:70:64:da:56:02:93:f8:4d:0a:70:4c:
         87:93:c3:94:a6:ff:4a:47:68:31:a2:8e:4c:aa:ef:f1:0c:80:
         86:62:c0:24:21:30:36:81:28:c4:06:61:c9:0d:e6:5c:37:a9:
         f6:53:7f:65:4d:b9:06:e6:69:f4:b9:fe:8f:e8:6b:00:27:48:
         58:02:3f:ba:6d:70:37:41:df:2c:fc:7d:9e:86:60:34:be:82:
         64:04:3a:41:6d:42:7c:f0:d6:8b:d6:1e:54:eb:59:3a:96:c5:
         53:af:9d:01:f0:2d:fc:54:84:aa:bc:67:32:ba:75:07:d8:7b:
         6f:1b:26:ed:39:e0:7c:54:1b:02:ca:62:50:da:5d:12:f3:db:
         e9:29:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----