Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d-45UDlDfwOZfNcCMATY-jXiRrs.roa
File:                     d-45UDlDfwOZfNcCMATY-jXiRrs.roa (raw, json)
Hash identifier:          VXJ/jgU8N8GtsxQo+PeMrY69NCi5B6gQXNR7fDPjjuQ=
Subject key identifier:   77:EE:39:50:39:43:7F:03:99:7C:D7:02:30:04:D8:FA:35:E2:46:BB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0566018F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d-45UDlDfwOZfNcCMATY-jXiRrs.roa
Signing time:             Sun 27 Mar 2022 12:16:24 +0000
ROA not before:           Sun 27 Mar 2022 12:16:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90571151 (0x566018f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 27 12:16:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77ee395039437f03997cd7023004d8fa35e246bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:b6:03:e0:3a:ec:4d:84:10:82:9a:24:be:
                    d8:cf:46:60:cb:a1:a3:9a:b6:68:7e:e5:01:11:01:
                    56:c3:ab:6a:7a:8b:bb:72:e4:dd:cc:ad:c3:98:0d:
                    bb:5e:e4:c4:b6:eb:d4:cd:b9:62:64:dd:81:98:a7:
                    26:71:83:eb:5b:8a:47:7c:db:4d:6c:c2:a0:bd:f4:
                    ce:26:eb:b3:30:5e:27:4a:58:af:2d:45:1a:b0:e6:
                    99:d9:a7:0b:54:32:d5:cf:8c:6b:4d:48:0d:d0:05:
                    22:25:51:73:5b:65:b6:48:44:a8:5f:e3:2c:b8:af:
                    29:56:ac:76:16:03:0e:7c:1f:9c:4f:f7:8d:57:7b:
                    57:a6:d7:43:16:f7:94:57:4a:b5:5e:29:2a:c1:dc:
                    b0:67:80:ac:0e:e4:99:12:f3:01:25:43:78:9a:d4:
                    2e:3d:0a:61:c7:d8:ac:35:29:4e:94:24:7f:80:70:
                    09:1f:32:99:f0:03:c6:0b:b2:53:66:68:49:ba:16:
                    ab:82:95:18:0e:f9:30:f6:23:e1:8a:55:36:b5:88:
                    da:de:ea:c7:dc:c0:16:d5:2a:69:72:30:98:37:eb:
                    9a:2b:32:f2:ee:8e:dd:98:75:c6:0a:a7:a4:ed:de:
                    12:04:cb:57:c3:32:84:64:45:0b:ba:7f:56:1c:2e:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:39:50:39:43:7F:03:99:7C:D7:02:30:04:D8:FA:35:E2:46:BB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d-45UDlDfwOZfNcCMATY-jXiRrs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         7f:d6:78:cd:3c:8f:3a:5a:b7:da:f7:17:07:98:fd:7d:db:e3:
         a9:6c:da:f7:9b:ae:cc:00:fb:79:23:e6:19:51:04:a8:6c:2a:
         52:e0:23:bc:8e:f9:28:62:30:3a:8a:f1:55:3f:53:f4:2a:54:
         96:fa:26:2c:69:b8:70:5e:8c:fb:87:c5:2b:2b:07:95:ad:bf:
         9a:16:60:4e:42:08:87:4f:45:c4:e9:5f:9a:00:14:da:30:5e:
         a8:c9:af:71:85:67:51:7a:81:1d:29:66:31:97:9b:99:19:fe:
         55:76:5b:ef:6e:c4:63:c1:f4:92:af:d6:8c:c5:2c:36:d9:b1:
         e4:04:b9:9d:10:03:35:82:b7:b9:11:6a:b1:ba:90:f3:65:72:
         79:0f:22:b4:5c:c4:30:2d:be:60:7e:ba:5d:15:b7:b8:5a:c0:
         c7:ff:da:8f:07:88:27:29:91:b8:88:0b:a7:69:10:c5:aa:d3:
         6d:07:37:ea:b8:03:8c:14:78:d8:e0:7b:68:ca:59:91:24:b0:
         21:f2:72:b5:64:25:dd:4a:98:ef:63:84:56:73:6f:84:24:ff:
         3a:3f:38:77:f9:0c:62:fd:c4:07:0b:8a:27:25:5b:78:a0:ea:
         e2:40:48:1a:5c:c8:58:25:4c:ae:f4:e4:61:1d:a1:3c:1e:e5:
         ed:5e:d5:28
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBWYBjzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMy
NzEyMTYyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzdlZTM5NTAzOTQz
N2YwMzk5N2NkNzAyMzAwNGQ4ZmEzNWUyNDZiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALj5tgPgOuxNhBCCmiS+2M9GYMuho5q2aH7lAREBVsOranqL
u3Lk3cytw5gNu17kxLbr1M25YmTdgZinJnGD61uKR3zbTWzCoL30zibrszBeJ0pY
ry1FGrDmmdmnC1Qy1c+Ma01IDdAFIiVRc1tltkhEqF/jLLivKVasdhYDDnwfnE/3
jVd7V6bXQxb3lFdKtV4pKsHcsGeArA7kmRLzASVDeJrULj0KYcfYrDUpTpQkf4Bw
CR8ymfADxguyU2ZoSboWq4KVGA75MPYj4YpVNrWI2t7qx9zAFtUqaXIwmDfrmisy
8u6O3Zh1xgqnpO3eEgTLV8MyhGRFC7p/Vhwu710CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR37jlQOUN/A5l81wIwBNj6NeJGuzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2QtNDVVRGxEZndPWmZOY0NNQVRZLWpYaVJycy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQB/1njNPI86Wrfa9xcHmP192+OpbNr3m67MAPt5
I+YZUQSobCpS4CO8jvkoYjA6ivFVP1P0KlSW+iYsabhwXoz7h8UrKweVrb+aFmBO
QgiHT0XE6V+aABTaMF6oya9xhWdReoEdKWYxl5uZGf5VdlvvbsRjwfSSr9aMxSw2
2bHkBLmdEAM1gre5EWqxupDzZXJ5DyK0XMQwLb5gfrpdFbe4WsDH/9qPB4gnKZG4
iAunaRDFqtNtBzfquAOMFHjY4HtoylmRJLAh8nK1ZCXdSpjvY4RWc2+EJP86Pzh3
+Qxi/cQHC4onJVt4oOriQEgaXMhYJUyu9ORhHaE8HuXtXtUo
-----END CERTIFICATE-----