Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa
File:                     bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa (raw, json)
Hash identifier:          C4wtAKNyK2xKNQuq53j0H3VTs8hEIAOC1yd3/XtuN/s=
Subject key identifier:   6E:92:E6:2E:34:7E:E4:09:12:BF:0F:A6:23:DA:92:B0:E5:21:64:46
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181E86F166598EB3E351B7437B11EA700EE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa
Signing time:             Sun 10 Jul 2022 14:06:43 +0000
ROA not before:           Sun 10 Jul 2022 14:06:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:e8:6f:16:65:98:eb:3e:35:1b:74:37:b1:1e:a7:00:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul 10 14:06:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6e92e62e347ee40912bf0fa623da92b0e5216446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:fe:69:1e:86:2a:5a:aa:53:0a:38:31:38:
                    b8:ca:52:dd:26:b2:d0:f2:e7:92:be:3d:3e:5b:99:
                    a8:5a:e9:ec:34:42:bd:97:16:af:76:e8:64:bf:4e:
                    9b:81:c2:84:0b:cb:2f:96:f8:59:c6:70:16:49:63:
                    df:f7:37:80:9c:3d:0e:12:2c:ac:8c:0f:c4:76:9c:
                    ba:7c:5b:8e:50:56:0a:35:82:9a:7a:3e:7a:6b:07:
                    89:48:4e:6e:05:7f:0f:23:12:c5:a1:81:4a:26:60:
                    ca:e2:c3:40:a8:02:62:6e:bf:eb:ae:4f:cd:bb:e9:
                    df:78:21:31:fd:f7:dc:fb:a8:03:0e:2f:7b:fa:10:
                    6c:bf:ae:9d:77:22:f6:d2:82:19:6d:65:fd:28:c4:
                    8d:80:d2:56:ff:0c:06:89:84:39:c2:d9:9e:21:c3:
                    97:3b:92:b3:45:ad:27:b9:8d:de:b6:ef:5b:83:8d:
                    64:45:65:f3:fc:b4:67:1a:ec:f4:78:75:2e:c6:0e:
                    df:8d:80:cb:1a:37:41:9f:e9:a3:79:7b:39:55:1f:
                    98:04:5a:7d:8e:27:34:48:0a:44:27:40:ce:a4:b6:
                    8f:f3:cb:23:32:40:a5:3c:22:0c:01:f6:71:22:18:
                    b1:00:36:1a:36:ef:de:33:71:75:bd:af:97:ce:46:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:92:E6:2E:34:7E:E4:09:12:BF:0F:A6:23:DA:92:B0:E5:21:64:46
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:30:a4:07:46:19:98:95:87:65:ae:a0:b4:8b:5b:16:3e:ca:
         4a:ee:eb:ab:2f:de:d1:07:87:3c:08:ef:c5:26:8b:fa:34:02:
         31:e2:5e:04:cd:9e:6a:78:6c:5f:db:22:8d:e9:ac:90:5c:72:
         30:84:14:8c:52:2b:dc:fb:7c:1d:9c:95:e1:03:40:5c:df:aa:
         f8:64:78:aa:6a:c2:d8:ee:38:76:20:34:e0:ea:0f:b4:0c:42:
         9f:95:6b:fe:77:aa:e4:18:28:68:0d:eb:9d:9f:c3:63:d5:9f:
         df:c7:23:4f:29:0b:72:70:d6:95:3f:83:a3:c6:94:16:18:bb:
         99:86:32:d8:cf:aa:1c:ce:59:43:0d:65:b3:e3:eb:55:3e:ad:
         06:d5:f4:b9:fb:9c:58:0e:b2:0f:92:42:1d:59:c6:96:7b:57:
         36:51:4d:19:3c:5e:88:5e:26:6c:0a:4c:2f:75:a8:4f:e6:ee:
         ac:b0:d0:e6:9b:68:aa:04:de:5c:7e:d0:2d:cb:a8:79:cc:1a:
         81:78:19:c7:b3:e1:f9:f8:3a:23:b2:ac:2d:8d:18:88:86:c9:
         05:16:43:35:11:a6:1c:68:2d:07:e3:df:af:3d:3b:9e:9c:3c:
         b0:b7:aa:fa:08:ec:21:5f:26:1a:13:43:4a:50:89:3a:36:df:
         46:1a:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----