Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fpcKJzVEeGLVA18hWItE9Z03Yx8.roa
File:                     fpcKJzVEeGLVA18hWItE9Z03Yx8.roa (raw, json)
Hash identifier:          /lhWu0rKFy2j7mYPvclEWJVDUqj+p3UvWyBOY5yNLgE=
Subject key identifier:   7E:97:0A:27:35:44:78:62:D5:03:5F:21:58:8B:44:F5:9D:37:63:1F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04F23C79
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fpcKJzVEeGLVA18hWItE9Z03Yx8.roa
Signing time:             Fri 11 Mar 2022 15:13:51 +0000
ROA not before:           Fri 11 Mar 2022 15:13:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82984057 (0x4f23c79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 11 15:13:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e970a2735447862d5035f21588b44f59d37631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:26:bf:e6:28:46:12:4f:d5:31:9f:bc:89:
                    5a:43:92:20:8a:39:6b:8f:41:24:18:78:b4:db:7f:
                    f8:9c:c8:ce:92:43:cd:65:fb:eb:f6:e4:46:72:94:
                    58:9a:80:18:6b:76:61:a3:13:91:41:d1:a0:81:4d:
                    5d:c5:3c:7b:cf:eb:64:b1:1a:9b:50:40:72:47:a4:
                    13:69:4e:12:dc:57:0c:9d:87:b5:a5:61:7f:79:fd:
                    51:48:02:34:5f:ea:d6:a8:cc:6b:1c:59:7f:39:d2:
                    88:19:eb:b7:63:59:6c:f4:8a:0e:1c:04:75:84:30:
                    46:d7:78:32:23:e2:53:29:3b:9c:d1:ca:a7:7f:e5:
                    5c:91:d7:77:64:69:78:e5:1c:2f:1c:e3:11:41:9e:
                    a9:4d:8a:40:8e:43:55:20:6c:a0:4b:cf:47:b3:1c:
                    5f:06:35:e2:2b:f4:03:78:d4:ac:f5:81:b9:3a:ff:
                    ad:c8:1e:f6:98:b0:84:8d:50:c7:cf:69:5a:e5:5a:
                    90:23:e7:69:19:d7:84:f0:67:e1:d6:a7:1b:af:f9:
                    2c:d7:61:96:6e:4b:b0:1a:32:f3:7c:82:a9:16:d7:
                    25:9c:a4:cb:05:53:8c:32:5c:9a:87:b2:6d:f8:c5:
                    c3:00:b4:96:9e:12:1e:c7:45:19:6c:78:6b:07:c7:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:0A:27:35:44:78:62:D5:03:5F:21:58:8B:44:F5:9D:37:63:1F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fpcKJzVEeGLVA18hWItE9Z03Yx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:aa:08:e4:38:d5:ab:01:80:e0:b1:63:c0:48:ce:74:76:
         76:08:50:db:a1:6d:2d:3b:ec:b2:35:99:6c:8b:d3:dc:59:ba:
         92:92:8e:35:c2:bd:ef:a2:65:b3:d1:91:0b:68:2b:fc:0c:38:
         8f:0e:d2:00:dd:8a:83:19:6c:58:e3:10:88:85:27:19:39:75:
         4b:93:90:bc:3a:aa:78:6c:4c:d6:4d:8e:de:45:b2:2e:eb:1f:
         bd:dd:ab:8c:a4:73:6d:28:c7:f7:b5:4c:db:ea:0d:e2:ff:f0:
         4e:a0:d4:62:f3:dc:8d:d6:c2:1d:e3:53:63:42:a3:90:6a:a1:
         c5:d0:c9:46:4e:93:3d:61:68:cd:ed:1d:38:7c:7d:79:9f:90:
         96:e9:d3:cc:0d:7d:49:4f:df:51:45:ec:4a:0b:e5:44:99:bf:
         da:c5:57:c4:d2:ac:89:db:8a:1e:49:fa:04:79:39:88:08:c9:
         1c:c7:f3:f7:c4:ab:b0:9f:28:40:ae:b4:05:ea:f1:17:32:40:
         8e:ce:38:3b:10:27:e7:31:54:57:fb:44:1d:2b:8f:b8:45:de:
         af:46:c6:09:f1:c1:79:ff:c2:c6:72:7f:98:6a:ac:ca:36:18:
         b0:f9:27:ed:7b:69:26:2a:10:ea:6f:51:85:1d:48:2b:73:b9:
         0e:2e:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----