Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mUMlC0_vTxitB3QrUGt2ryse2dA.roa
File:                     mUMlC0_vTxitB3QrUGt2ryse2dA.roa (raw, json)
Hash identifier:          O2GxFgwPVqG/5/I61opMVV/8duwxC6fUYGB1oz7VTyg=
Subject key identifier:   99:43:25:0B:4F:EF:4F:18:AD:07:74:2B:50:6B:76:AF:2B:1E:D9:D0
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0181D9390BFA8B320F267004C37819E59ACF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mUMlC0_vTxitB3QrUGt2ryse2dA.roa
Signing time:             Thu 07 Jul 2022 15:13:23 +0000
ROA not before:           Thu 07 Jul 2022 15:13:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d9:39:0b:fa:8b:32:0f:26:70:04:c3:78:19:e5:9a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  7 15:13:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9943250b4fef4f18ad07742b506b76af2b1ed9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:92:ba:b6:e0:32:c6:0a:99:64:a0:b9:08:
                    ff:44:2e:f4:10:4f:fd:73:8a:ed:db:0e:3d:78:83:
                    0f:a5:2d:55:e7:3a:c0:1b:9d:bf:80:8b:cd:20:e1:
                    c7:42:f4:aa:06:e3:75:b3:b5:a0:1f:46:69:74:ef:
                    16:c1:68:a7:0e:ca:da:5c:47:ac:cd:a9:be:b4:6e:
                    55:de:5e:be:58:e1:fb:35:ff:58:00:9f:d5:47:3e:
                    e4:8f:5e:5f:ca:c6:ea:f6:2d:51:25:75:c3:64:89:
                    87:c0:08:f4:b4:85:9b:39:da:1f:61:f3:8e:e9:ea:
                    cc:74:97:a3:63:88:13:df:21:30:21:a5:34:5f:42:
                    a0:6b:93:f2:a5:2b:7a:09:9a:eb:81:b9:8d:a8:d5:
                    24:ff:29:ac:6a:85:1e:98:25:e4:a0:a2:c8:6c:87:
                    fe:ba:e8:82:54:d9:02:ea:70:e9:fe:3f:64:07:c5:
                    41:d0:9f:82:a0:29:c0:7b:68:b8:bf:fb:b5:2f:02:
                    68:71:6f:8d:6f:6f:c7:90:fc:01:d3:c5:5d:24:dc:
                    a4:6d:0a:a7:ab:0a:29:f9:34:30:0a:c5:0c:52:77:
                    82:41:d0:12:72:37:6c:50:24:80:68:30:95:78:97:
                    8f:30:41:64:fe:cc:4d:4b:f5:dc:97:a4:8c:47:ca:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:43:25:0B:4F:EF:4F:18:AD:07:74:2B:50:6B:76:AF:2B:1E:D9:D0
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mUMlC0_vTxitB3QrUGt2ryse2dA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:e9:99:c6:aa:98:17:ad:8a:91:11:2c:63:de:98:ac:8b:
         e5:c5:3a:3e:c1:63:c2:d4:fb:e0:5f:3b:21:4d:58:08:db:5d:
         44:82:00:7a:7f:d2:27:31:30:cd:eb:53:01:5b:96:00:7b:a1:
         e8:e8:4d:2b:46:85:a0:89:af:dc:bd:6e:5c:17:bd:17:7c:d5:
         7c:2f:27:bc:bd:89:fe:a0:ff:9d:7e:5e:69:8f:2c:17:51:1d:
         03:c1:ea:c6:9b:92:7d:b1:46:1b:cc:0e:49:2d:42:8e:61:55:
         66:06:df:15:b5:46:ad:b7:1a:eb:20:1a:81:a2:7e:31:2d:6f:
         54:62:b3:d4:47:90:cc:69:79:7e:67:13:0e:60:fa:f0:d2:96:
         7e:fa:60:a3:18:44:0d:e0:db:36:8b:6b:da:d6:80:2a:d3:d0:
         35:55:54:01:ff:84:a0:b0:02:6d:44:ea:48:de:72:52:6f:cd:
         59:ba:c5:db:46:67:dc:0c:db:d2:20:8a:4e:13:36:0e:2f:2e:
         9f:8b:be:3a:0d:d5:6c:d4:81:cd:35:97:da:83:34:4c:cd:7e:
         d4:01:17:5f:e9:41:89:d0:13:62:18:19:ac:9b:52:56:78:c7:
         ba:c6:60:03:fe:47:db:47:72:4f:30:41:ae:08:4a:d1:43:7f:
         18:df:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----