Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa
File:                     i4m9H46UEgPK2_YHZHkhD4zVXf8.roa (raw, json)
Hash identifier:          BHi/zoDP7jd86c5VRBNOixusTL90JWGQpJy7drfqqJw=
Subject key identifier:   8B:89:BD:1F:8E:94:12:03:CA:DB:F6:07:64:79:21:0F:8C:D5:5D:FF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       047A303E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa
Signing time:             Thu 24 Feb 2022 12:57:15 +0000
ROA not before:           Thu 24 Feb 2022 12:57:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75116606 (0x47a303e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 24 12:57:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b89bd1f8e941203cadbf6076479210f8cd55dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:74:e0:bd:97:bd:bd:46:7f:dd:36:a6:54:
                    08:5f:aa:0a:d3:80:60:2f:cd:3c:05:a2:9d:20:85:
                    5f:14:ca:7b:bb:47:af:60:54:38:4a:a2:05:f6:f1:
                    70:0b:f5:0e:76:0e:e3:ae:1e:9d:4b:8d:72:b5:b6:
                    cd:e4:68:ba:5d:49:8d:17:db:2e:57:f4:ac:60:98:
                    65:99:8d:60:4a:e6:17:9e:fd:1e:fc:89:d2:7d:bd:
                    ef:7a:71:e1:84:20:09:06:85:50:2a:18:5b:62:51:
                    66:07:b0:ff:64:a0:24:f8:49:ee:c8:f1:5a:43:8d:
                    af:4f:27:1b:13:98:6a:c3:c9:88:b7:b6:2a:fc:6e:
                    2b:f8:c6:b2:f5:73:02:27:d7:24:99:f8:72:14:44:
                    4a:90:f9:f3:e3:09:9a:62:de:03:44:b7:9e:0d:8c:
                    9e:e5:31:33:e4:52:75:68:95:53:96:94:13:31:b0:
                    48:0f:60:45:8c:6f:5c:d6:06:96:87:e6:ea:b9:81:
                    b2:6f:9d:64:df:9d:b8:5e:68:4f:46:3b:cd:6a:b5:
                    7c:e5:11:bb:0f:58:84:d2:b9:49:60:7b:f4:c3:d9:
                    e6:ab:8d:39:9e:c6:76:85:7d:7a:07:1a:c1:7c:6d:
                    0e:13:6e:2c:11:9e:7d:b2:50:9b:bd:e9:98:46:72:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:BD:1F:8E:94:12:03:CA:DB:F6:07:64:79:21:0F:8C:D5:5D:FF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/i4m9H46UEgPK2_YHZHkhD4zVXf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:0f:0d:65:53:90:c9:c0:5a:62:85:3b:8d:63:0a:7d:1d:
         35:8b:23:60:62:2b:7d:a5:0f:73:cf:9a:16:dc:1a:16:9d:8e:
         6d:1d:c7:8f:91:81:fc:91:90:30:45:38:e4:54:d4:e0:a5:98:
         d7:e7:93:ae:92:be:55:b8:cf:54:c3:c0:e2:79:96:d2:d4:5c:
         6f:7b:5a:95:4a:5b:d3:c0:4b:2f:10:8c:cf:98:27:c3:26:3e:
         96:29:73:fa:50:9c:32:10:ea:0b:6b:dd:51:51:d8:48:8c:41:
         9a:72:b4:f7:78:d8:5f:8d:ae:9a:a3:d3:11:69:e0:9d:6f:7d:
         eb:45:cb:41:e2:c2:06:23:2b:1d:71:96:7c:ee:7b:0f:e9:da:
         8f:0a:fa:45:c9:25:2b:b7:ec:bd:69:8b:b8:d2:6f:12:75:87:
         20:3a:f2:81:29:d3:f0:41:a9:9e:64:a4:8b:94:74:cc:a0:33:
         e6:33:ce:7d:7a:a8:a9:fb:cc:26:da:b0:28:fc:e6:7f:1d:dd:
         77:ab:08:97:f6:03:ec:cf:d0:9d:80:dd:fb:39:3a:b0:36:8f:
         71:3f:99:30:d9:cd:eb:ae:1e:24:f2:a2:48:45:2a:15:e9:df:
         b3:59:61:77:ca:e4:83:ef:e9:db:28:8d:1b:00:0b:95:75:ac:
         ef:b4:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----