Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFGB2RBWwzsSZIUulndZTC-LmwA.roa
File:                     fFGB2RBWwzsSZIUulndZTC-LmwA.roa (raw, json)
Hash identifier:          6o1Yu/LBoTBEZlZrOE18EVMgEXcVMib28t0qkI+g5+k=
Subject key identifier:   7C:51:81:D9:10:56:C3:3B:12:64:85:2E:96:77:59:4C:2F:8B:9B:00
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0748498B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFGB2RBWwzsSZIUulndZTC-LmwA.roa
Signing time:             Sat 21 May 2022 12:41:29 +0000
ROA not before:           Sat 21 May 2022 12:41:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122177931 (0x748498b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 21 12:41:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c5181d91056c33b1264852e9677594c2f8b9b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:07:02:bc:dc:c9:17:0c:e7:f5:70:25:39:
                    a6:43:b6:f8:18:1b:de:c1:02:32:13:44:e6:58:c0:
                    cc:02:2e:97:ac:e7:b7:f4:f1:48:96:0e:9e:4b:1b:
                    3c:1c:06:cb:2b:75:43:c9:aa:47:26:d2:7a:7e:6e:
                    5a:9c:4d:de:10:83:91:6a:0f:13:4a:a1:53:aa:fa:
                    93:93:9b:30:18:a7:67:57:4b:3c:3e:1d:be:2d:1c:
                    76:19:05:18:98:27:d8:06:29:36:ad:1c:3b:8f:05:
                    5a:61:2e:e1:fe:c0:81:b2:69:32:fe:33:7d:4a:cd:
                    08:69:90:35:ca:32:e4:2b:75:aa:11:7b:79:1a:8f:
                    2a:c7:2b:77:41:b4:fa:27:27:ef:f8:39:d6:e4:6b:
                    5b:5a:a7:d4:01:2c:3c:f4:51:75:f6:39:1a:9f:3d:
                    b7:bf:88:16:1a:3c:e3:9c:48:ca:00:a6:c9:c5:c6:
                    d0:29:ab:98:ba:3e:fe:5f:73:b9:be:e4:1d:91:ee:
                    29:83:44:36:02:29:d4:13:6c:f2:a9:76:c3:de:5f:
                    98:34:8a:4f:48:99:f8:4a:f2:25:f0:98:67:51:5f:
                    96:48:0d:44:67:b6:30:6b:4e:2a:73:47:bb:6c:60:
                    5d:f2:40:97:5c:b6:48:8b:9a:9b:3a:dd:29:55:45:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:81:D9:10:56:C3:3B:12:64:85:2E:96:77:59:4C:2F:8B:9B:00
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fFGB2RBWwzsSZIUulndZTC-LmwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         95:99:23:7e:bd:6d:0e:14:5a:58:ef:f8:28:dd:40:c1:54:63:
         9a:9b:ed:64:26:50:17:74:49:21:b8:e9:88:b8:60:9e:12:21:
         32:5b:b5:50:e2:b6:32:7c:47:fd:35:94:e5:86:38:ab:a2:dc:
         1f:3c:64:64:2c:c9:22:81:12:c4:3f:69:78:07:cf:2f:38:52:
         6e:94:a6:ac:86:3b:89:2b:cc:08:47:a5:d5:b9:26:13:2d:cf:
         95:d4:e6:16:e7:6d:3a:05:7d:ea:16:81:d7:0d:da:8b:d7:23:
         f4:81:24:df:f3:83:62:85:f5:f6:49:8b:61:91:2a:f0:2e:3d:
         70:57:27:d4:ad:0a:ce:9b:4d:39:d2:56:b7:56:1e:1b:41:02:
         4c:68:a8:a4:42:40:82:ec:a1:b2:d7:3c:fe:df:6d:25:0e:fc:
         f6:2b:0c:44:ac:4c:a6:5e:e0:fe:97:17:08:ca:42:c2:fd:59:
         44:08:ca:77:51:d2:2c:23:d7:c0:7c:e6:05:99:ce:09:9f:2d:
         4d:d3:d6:64:9d:88:3b:15:99:2b:c1:48:46:c3:f0:10:53:b7:
         b8:b3:2a:46:39:f2:75:37:59:8a:98:e0:af:32:5a:e4:60:a3:
         97:f2:7c:e0:82:c7:91:15:06:97:41:70:b2:82:05:3d:79:e2:
         7d:9b:c2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----