Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa
File:                     k7d__UF1eYzLmhLvnDBYslm78KE.roa (raw, json)
Hash identifier:          T9dFbdT2Cx61rZCDWv+qF8WuUfKfbhZEugUlTX7nA2g=
Subject key identifier:   93:B7:7F:FD:41:75:79:8C:CB:9A:12:EF:9C:30:58:B2:59:BB:F0:A1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0436C241
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa
Signing time:             Tue 15 Feb 2022 15:13:38 +0000
ROA not before:           Tue 15 Feb 2022 15:13:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70697537 (0x436c241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 15 15:13:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93b77ffd4175798ccb9a12ef9c3058b259bbf0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:38:26:3f:f4:ed:a2:79:0e:76:aa:ff:3f:
                    ee:64:d3:40:d5:5b:66:f7:8a:e9:34:91:61:54:98:
                    98:07:4d:01:ea:ce:55:12:5f:2c:aa:6d:13:21:54:
                    b8:08:0b:92:ab:15:71:8a:73:32:dc:11:f2:f9:04:
                    62:b5:83:6f:6c:46:34:c0:90:d5:95:93:66:e9:48:
                    77:80:c6:27:f4:56:c0:b6:87:3c:45:30:f0:4b:0d:
                    cd:38:47:4c:96:93:f9:fe:b6:2e:e2:90:42:fb:56:
                    34:d7:36:ad:7f:52:01:d5:09:6f:ee:26:a5:e6:48:
                    98:1a:c7:da:a5:aa:c6:49:f8:cf:cc:4b:6a:b6:f2:
                    f5:34:2a:71:75:cb:1d:8a:ec:e5:24:19:23:b8:78:
                    98:bc:04:cc:28:11:07:af:1f:9f:86:03:25:7f:a1:
                    f3:20:3d:d3:ea:f7:af:ba:21:88:19:a8:02:f9:de:
                    82:67:ed:36:21:c3:16:88:4e:de:24:78:4f:b9:51:
                    72:1e:8f:6b:8e:f4:de:1c:40:47:24:f7:30:61:08:
                    66:e1:fe:42:a3:dc:29:e8:07:4a:85:2f:df:90:bb:
                    68:b8:53:85:1d:04:23:74:3d:1e:1a:11:f7:9c:7a:
                    3f:1e:7f:9b:32:41:66:d1:e5:3e:16:dd:e0:2a:e3:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:7F:FD:41:75:79:8C:CB:9A:12:EF:9C:30:58:B2:59:BB:F0:A1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/k7d__UF1eYzLmhLvnDBYslm78KE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:09:d6:c7:f7:4c:89:7e:87:37:5f:0d:4f:53:ab:6b:84:5a:
         9e:0a:2e:cb:a4:1a:0b:7e:ae:1d:24:4e:b9:5b:8a:d5:bb:e8:
         bb:d6:ef:df:06:80:a6:67:c4:7a:4a:d3:95:ff:be:68:f2:b9:
         60:2c:b0:bb:60:8c:6f:7b:fe:05:bc:48:5f:98:86:a7:b0:c8:
         fd:e6:1a:a8:a9:58:8c:7f:22:9d:55:9d:9c:ad:0a:a9:23:cc:
         f5:09:9d:6d:c5:12:06:26:67:61:35:c1:09:dc:70:8b:2b:41:
         b4:f1:98:e4:86:a8:62:fc:89:63:c2:11:22:29:68:5e:eb:22:
         0d:7d:ae:c1:e8:9c:fc:c4:d3:aa:08:96:78:9b:6d:41:76:ee:
         2a:50:12:d3:3f:a6:42:c1:a6:95:23:66:c6:60:f7:ce:e8:dd:
         f8:cb:85:a3:53:33:fb:57:7a:16:a6:d6:01:c2:66:0f:ea:28:
         a9:19:1f:8b:08:09:2c:9a:91:d7:94:68:94:fe:40:f2:95:50:
         3c:00:25:aa:1c:7d:8d:2d:f8:1f:07:ad:97:60:aa:f5:23:1f:
         56:aa:7c:e4:4b:ce:3c:3a:3e:de:87:a1:db:66:6f:e9:7d:4c:
         01:96:0c:ac:a4:79:d6:93:26:70:63:12:ff:ed:eb:ea:e2:ca:
         8e:2b:82:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----