Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa
File:                     lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa (raw, json)
Hash identifier:          TPfMLruucoxnA49xd7+oHmIA5tcV36aO6NZpl0ZEzvQ=
Subject key identifier:   96:FF:D3:F2:15:6D:E8:6A:1E:A5:84:FF:8D:0E:1C:E5:0D:C9:F2:06
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04418E1B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa
Signing time:             Thu 17 Feb 2022 01:42:22 +0000
ROA not before:           Thu 17 Feb 2022 01:42:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71405083 (0x4418e1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 17 01:42:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96ffd3f2156de86a1ea584ff8d0e1ce50dc9f206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:72:23:6d:14:f0:bf:6d:de:22:86:f8:f8:bb:
                    79:e6:23:46:bf:f7:b0:39:fb:08:30:f5:ac:0b:b6:
                    c8:d8:2d:97:0c:3a:d9:1d:7b:f1:81:22:0d:27:27:
                    7b:78:fe:52:41:cb:ea:96:ca:c3:10:1f:c4:5a:56:
                    bd:70:e8:2b:08:19:79:40:d2:46:9a:c0:04:80:2a:
                    b6:23:0c:ba:6b:24:c2:6c:e2:d0:c7:d7:39:c6:f5:
                    13:07:47:77:07:be:d9:c0:db:ec:9c:78:8b:42:c7:
                    7d:99:49:d7:1c:5b:ef:0e:29:21:08:83:6f:ef:72:
                    7a:ec:ff:dd:87:88:c4:38:29:0c:34:f5:b3:36:6e:
                    73:c9:b2:f4:32:6a:ca:11:10:a5:60:58:30:10:fb:
                    56:78:b7:d0:6f:ef:f9:fd:08:85:9d:18:9f:1c:c7:
                    75:3e:6e:42:88:db:e7:e2:9e:a5:d1:71:6d:4f:8e:
                    38:99:59:39:d4:9c:61:e1:4b:30:79:a1:dd:03:51:
                    d4:8d:07:57:09:d2:69:77:61:f9:f5:03:c5:14:52:
                    be:ce:3e:ea:c3:d3:19:c7:d9:d6:c6:ba:a6:05:0f:
                    c7:f8:60:39:b3:f0:cb:03:2a:6a:4f:06:e0:a0:4a:
                    dd:7b:71:56:39:f8:09:56:ac:4c:a6:f8:bd:54:3c:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FF:D3:F2:15:6D:E8:6A:1E:A5:84:FF:8D:0E:1C:E5:0D:C9:F2:06
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lv_T8hVt6GoepYT_jQ4c5Q3J8gY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:1b:84:51:cd:1d:78:b5:26:c8:50:29:41:38:a9:b0:42:
         67:20:34:bb:de:df:e7:0a:76:e7:cd:4c:01:9f:57:2b:4b:56:
         b0:e1:0b:d0:8f:cd:01:5c:3f:00:fd:3b:1c:20:27:22:cb:9e:
         9b:d0:8c:7d:20:b2:64:d1:f5:80:cf:d8:c8:ac:a8:2d:b7:84:
         4a:4a:c0:9e:77:e2:ca:54:83:b0:5d:ca:6e:de:28:a5:c5:5d:
         dc:15:c0:7e:18:7c:c1:49:5d:d5:46:64:de:ea:b8:60:44:f3:
         7d:a8:aa:67:fe:f9:20:a6:28:0b:dd:34:f3:c9:d9:61:0d:8d:
         57:44:a8:7c:67:e2:be:14:e3:dd:42:3c:ec:e5:5a:12:63:08:
         0a:4e:45:80:36:5c:13:7a:b5:6a:eb:e0:67:3d:81:85:95:ea:
         b2:88:83:8c:0e:e5:78:23:f0:d1:8b:92:dc:66:e5:62:ba:78:
         ce:62:1a:44:c7:fe:2e:2e:89:c0:5a:96:87:d5:59:ed:0e:f6:
         22:c7:7c:59:37:e7:9c:ff:ad:ea:4b:ea:a7:61:dc:f8:c3:76:
         84:37:e2:23:bb:2e:d3:79:b9:0c:7f:e0:0d:b3:50:4a:bf:1b:
         57:a0:47:e5:98:6e:60:e7:23:48:84:64:5e:60:94:bb:39:0d:
         0f:3e:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----