Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa
File:                     mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa (raw, json)
Hash identifier:          N9naQp6A++eQ7Y388iZ5y/AAeqhjoKkAX8kYUM3IGKk=
Subject key identifier:   99:BC:DA:A4:80:0F:AA:53:55:FB:6C:EE:5F:D4:C9:CC:EF:06:59:E4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       078E5697
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa
Signing time:             Fri 27 May 2022 01:35:15 +0000
ROA not before:           Fri 27 May 2022 01:35:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126768791 (0x78e5697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 27 01:35:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99bcdaa4800faa5355fb6cee5fd4c9ccef0659e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:40:e2:24:e2:31:be:b9:47:d3:e8:38:0f:
                    1d:2f:04:c1:4f:f5:16:60:a9:93:8d:8b:28:00:15:
                    e9:21:e9:3b:79:b6:db:3e:1a:62:34:ab:f0:da:85:
                    87:f9:1d:10:f7:56:b0:2c:b6:f9:99:8f:8e:38:a2:
                    44:0f:99:93:cb:f3:f7:30:69:cf:7e:29:75:43:69:
                    46:ac:f4:23:b2:73:70:46:20:8a:fd:6b:0d:e6:e4:
                    6e:c6:4b:21:d7:25:f3:37:76:a5:64:08:22:1b:35:
                    e3:6f:7a:00:3f:ae:43:d2:e4:83:db:f3:b3:0f:d3:
                    b6:3d:3d:ff:a3:ad:bf:f6:96:fe:75:3a:4c:1e:3e:
                    6b:c2:69:98:34:a9:95:a2:11:92:fa:42:3d:0f:6e:
                    bf:8d:2a:6d:88:1c:1d:7b:de:79:40:5a:13:ab:b7:
                    03:d4:c8:9d:c0:67:31:96:43:e2:64:04:61:51:a3:
                    b4:23:6d:69:87:58:e8:9c:8d:f1:45:cd:7f:6b:2d:
                    d8:a7:de:7d:1e:f1:86:c6:5d:4c:e3:56:7f:8a:5d:
                    e2:5b:ad:51:eb:d7:66:e1:86:c7:cc:ec:fe:fa:12:
                    ee:85:de:52:93:d8:6a:13:96:ea:74:8e:44:4b:d5:
                    89:4b:99:ca:e5:e4:ad:a3:be:9d:52:94:57:ca:75:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BC:DA:A4:80:0F:AA:53:55:FB:6C:EE:5F:D4:C9:CC:EF:06:59:E4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mbzapIAPqlNV-2zuX9TJzO8GWeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:1a:a2:5a:c6:4b:0f:c9:63:3f:48:54:90:13:8c:98:52:
         ad:86:95:a5:90:3b:b2:e1:7c:bb:8c:3c:88:c8:98:b5:42:6a:
         fe:e6:47:7f:11:4c:1f:16:4b:f6:0e:ae:9b:50:f7:a8:4e:6b:
         c4:9d:af:34:0e:40:28:31:51:c8:80:f0:b2:31:b5:6e:16:a4:
         02:d1:75:aa:a1:49:d2:4d:79:38:66:fd:33:70:95:5f:24:27:
         cd:76:a6:c2:43:5d:bf:0d:b4:ae:bc:12:6c:c5:38:9c:53:e4:
         6f:d3:11:a5:3e:cd:40:02:46:bb:d4:3b:ac:2b:5c:b3:fb:80:
         51:d6:af:14:cb:be:6f:95:d3:a8:ac:86:59:ad:ef:65:b9:3f:
         63:b8:ee:13:9d:05:9b:ec:b8:8e:17:35:18:95:2f:34:62:6b:
         75:ca:a2:7a:29:01:c7:4f:1c:e9:55:71:fe:d4:91:e2:76:f8:
         14:2a:fd:7a:28:6f:10:18:89:98:42:0e:8f:22:84:70:6c:fc:
         b8:3d:e3:75:f7:4e:e2:9d:19:68:83:90:f8:9b:af:0e:90:48:
         2a:45:5b:a2:e0:f5:d5:19:f8:ec:f6:4c:93:7c:cb:e6:b8:26:
         69:53:71:b1:03:89:a4:fe:e3:35:c0:9e:86:b8:df:24:06:ac:
         31:f3:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----