Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kT2yeZQDmeDc2dyEMVIpaLSEIf8.roa
File:                     kT2yeZQDmeDc2dyEMVIpaLSEIf8.roa (raw, json)
Hash identifier:          pmTTsczQYfxgmDBHk704AKImebWDxqEBH7hRhq0gYwk=
Subject key identifier:   91:3D:B2:79:94:03:99:E0:DC:D9:DC:84:31:52:29:68:B4:84:21:FF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       065C444D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kT2yeZQDmeDc2dyEMVIpaLSEIf8.roa
Signing time:             Fri 29 Apr 2022 17:50:32 +0000
ROA not before:           Fri 29 Apr 2022 17:50:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106710093 (0x65c444d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 29 17:50:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=913db279940399e0dcd9dc8431522968b48421ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:2c:de:32:31:2e:30:af:aa:84:2b:33:4c:
                    c2:03:90:39:24:8e:fd:61:cb:13:e9:d6:4d:c4:9f:
                    ee:88:f6:ae:24:97:cc:84:c1:f7:35:08:dc:29:25:
                    ba:28:00:90:50:80:29:67:2d:79:af:c3:c0:58:55:
                    8a:bd:3d:4a:d9:46:4c:6e:01:03:8c:f7:9f:9a:56:
                    58:5c:a3:37:94:84:44:84:f7:aa:86:8c:dd:ec:f9:
                    0f:86:28:96:49:75:c2:f6:f9:8c:cb:7a:ea:d4:35:
                    d5:8d:f8:05:b1:cd:a8:93:0f:ab:54:75:63:79:46:
                    aa:59:bc:13:0e:4f:91:1c:d9:7d:02:89:9d:9d:64:
                    cf:c1:3b:6a:ba:bf:9c:04:2d:02:01:bf:8a:0b:d9:
                    12:bb:79:0d:98:52:00:12:ee:74:b9:c3:cc:82:04:
                    0e:d3:1f:24:6c:9d:fe:b6:21:95:8a:11:40:c6:9a:
                    c1:e4:91:49:15:82:f0:05:df:10:8b:2c:34:fc:6c:
                    dc:6b:1e:a4:a0:5e:10:45:e6:2d:f6:d6:93:1d:45:
                    b9:35:d3:e5:a0:10:1b:ee:fe:fd:85:d2:c5:e6:84:
                    b1:68:1c:74:1e:00:21:97:99:8c:98:4b:b6:4d:5c:
                    8d:36:28:c4:5b:f7:11:76:a9:4f:5c:69:0f:3b:f1:
                    2d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:B2:79:94:03:99:E0:DC:D9:DC:84:31:52:29:68:B4:84:21:FF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kT2yeZQDmeDc2dyEMVIpaLSEIf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:4c:e6:14:e2:2b:13:22:f6:12:cf:cf:7e:70:e4:e9:c8:05:
         a7:94:f5:1a:74:ff:bc:77:51:a5:26:8a:db:80:b3:ce:2a:8c:
         0d:31:28:81:1e:6c:e6:04:b6:0e:b4:ac:5b:a3:9e:2f:63:a6:
         bb:47:5e:da:92:4f:2e:6a:e0:29:b1:a1:e6:18:e6:ac:3d:32:
         e6:ab:57:39:4d:8b:e8:0b:14:0c:6d:ff:d9:13:12:c1:18:d2:
         14:4f:15:4f:b3:80:50:88:b2:d6:8e:aa:5f:39:85:dc:44:a3:
         88:eb:51:7d:75:3a:d6:7e:3e:54:24:06:3b:02:26:61:cd:8e:
         dd:c1:04:02:e5:f5:5f:ef:62:cd:7c:eb:a4:04:be:e5:2e:fd:
         04:f6:33:6d:e2:ec:02:eb:9c:b7:0d:05:ee:fc:6a:f1:1b:17:
         98:19:38:cf:39:94:0b:fa:b1:73:c9:26:d7:85:b0:61:a5:63:
         b8:57:f6:1d:8d:2a:50:d5:2f:6d:35:6e:39:03:0a:1b:39:c4:
         29:0b:db:88:50:1c:ea:28:84:a7:6c:e3:88:13:45:6b:f9:35:
         13:d9:86:31:d5:2b:75:f2:bc:64:b8:35:f0:d7:b3:d5:91:f9:
         42:31:66:95:49:4b:b2:6f:c9:1c:5b:bf:36:7b:ed:d2:4e:d1:
         22:fe:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----