Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa
File:                     cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa (raw, json)
Hash identifier:          WXSNWztsk3YC9t+/78utm2Ki/FQENYAibV3e7ZpYAr4=
Subject key identifier:   71:90:CA:BB:E3:50:59:73:F8:BB:AC:F8:78:E4:D5:60:51:4A:9F:83
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0997FDF2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa
Signing time:             Tue 05 Jul 2022 01:11:25 +0000
ROA not before:           Tue 05 Jul 2022 01:11:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160955890 (0x997fdf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  5 01:11:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7190cabbe3505973f8bbacf878e4d560514a9f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:00:49:d2:5f:23:1b:fb:17:ed:38:d8:a7:
                    e6:84:e5:0e:bf:1d:15:9c:08:bc:63:5b:4d:e8:14:
                    3e:1c:56:1b:c3:ff:6d:75:c8:32:aa:c6:2e:df:5b:
                    3a:dd:e6:d2:9f:a1:8b:03:62:80:77:98:b8:85:05:
                    f6:5d:4c:a6:4d:fa:aa:48:6b:55:38:e7:3f:28:96:
                    e2:7b:3f:83:bf:b7:42:53:ec:61:77:3c:04:6f:25:
                    44:7a:9f:67:74:fd:cf:a0:a9:42:bf:13:03:2c:5c:
                    33:d1:b8:1a:e4:a4:77:ba:7b:9e:8d:c9:e4:49:e0:
                    21:0e:f5:f4:98:3f:08:ff:79:4c:ed:f7:db:71:1a:
                    94:ad:51:7b:0a:3a:74:f3:3b:fe:76:d6:c2:ba:d1:
                    04:7e:a6:b2:d4:5f:ae:25:6c:57:65:2f:89:69:35:
                    36:c9:d6:90:82:17:75:0e:38:2c:3c:4c:f3:11:05:
                    9a:80:86:c6:37:92:12:15:ca:8e:32:d8:a9:c4:df:
                    99:c8:5c:b3:5b:45:fe:8a:1a:38:dd:ec:fc:06:9f:
                    ce:b4:5b:30:72:9f:ad:ed:ad:f9:12:97:92:7d:1a:
                    fb:30:5e:3c:2b:dc:04:d1:b4:c1:28:09:9e:04:73:
                    69:0e:cf:95:26:80:20:98:c6:80:2f:ce:44:23:83:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:CA:BB:E3:50:59:73:F8:BB:AC:F8:78:E4:D5:60:51:4A:9F:83
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:ba:fb:ae:2c:66:e1:09:7f:b5:84:fc:18:45:26:e2:5a:
         b7:7a:a1:4b:7a:db:0d:e2:d3:24:6f:32:86:5e:d9:53:53:86:
         47:b1:00:d2:27:9a:1c:ec:8e:db:f5:24:3b:03:76:7b:11:21:
         1c:47:ad:a0:7d:e2:41:5b:f9:f8:86:11:2e:1d:24:69:92:fb:
         f5:ac:57:d3:9f:5c:0d:2d:2c:f9:a1:62:87:88:4f:f7:56:b3:
         7d:fa:21:10:b7:bc:18:67:de:00:39:85:58:69:b5:95:26:0f:
         87:ad:78:20:6b:d7:e3:37:af:b8:90:31:7f:ab:5b:14:de:88:
         db:af:6b:0f:70:8b:69:5b:86:e8:34:b6:2a:cc:07:fd:6c:16:
         d3:4f:9b:1f:51:aa:67:0a:fc:ee:54:76:81:b0:58:ed:87:7f:
         24:1c:29:1b:50:b7:ab:ca:12:91:89:0d:1a:c6:23:61:1d:2b:
         80:2e:a1:23:a6:61:75:2b:7a:43:0b:27:57:54:1f:a3:85:2d:
         68:1a:5f:2e:5f:31:d1:4f:52:9e:23:e3:f6:6d:99:7b:f0:08:
         3e:2d:40:7e:62:93:c8:7d:23:dd:87:bb:61:3d:35:5f:04:e1:
         eb:d0:39:0f:a2:65:f1:82:6a:11:e8:1f:9f:1c:3f:79:8d:92:
         24:a7:7c:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECZf98jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDcw
NTAxMTEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzE5MGNhYmJlMzUw
NTk3M2Y4YmJhY2Y4NzhlNGQ1NjA1MTRhOWY4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9AAEnSXyMb+xftONin5oTlDr8dFZwIvGNbTegUPhxWG8P/
bXXIMqrGLt9bOt3m0p+hiwNigHeYuIUF9l1Mpk36qkhrVTjnPyiW4ns/g7+3QlPs
YXc8BG8lRHqfZ3T9z6CpQr8TAyxcM9G4GuSkd7p7no3J5EngIQ719Jg/CP95TO33
23EalK1Rewo6dPM7/nbWwrrRBH6mstRfriVsV2UviWk1NsnWkIIXdQ44LDxM8xEF
moCGxjeSEhXKjjLYqcTfmchcs1tF/ooaON3s/AafzrRbMHKfre2t+RKXkn0a+zBe
PCvcBNG0wSgJngRzaQ7PlSaAIJjGgC/ORCODU6cCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRxkMq741BZc/i7rPh45NVgUUqfgzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2NaREt1LU5RV1hQNHU2ejRlT1RWWUZGS240TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQARjLr7rixm4Ql/tYT8GEUm4lq3eqFLetsN4tMk
bzKGXtlTU4ZHsQDSJ5oc7I7b9SQ7A3Z7ESEcR62gfeJBW/n4hhEuHSRpkvv1rFfT
n1wNLSz5oWKHiE/3VrN9+iEQt7wYZ94AOYVYabWVJg+HrXgga9fjN6+4kDF/q1sU
3ojbr2sPcItpW4boNLYqzAf9bBbTT5sfUapnCvzuVHaBsFjth38kHCkbULeryhKR
iQ0axiNhHSuALqEjpmF1K3pDCydXVB+jhS1oGl8uXzHRT1KeI+P2bZl78Ag+LUB+
YpPIfSPdh7thPTVfBOHr0DkPomXxgmoR6B+fHD95jZIkp3yQ
-----END CERTIFICATE-----