Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nPXMr0LBElUwORNFFwKTcPkhlg8.roa
File:                     nPXMr0LBElUwORNFFwKTcPkhlg8.roa (raw, json)
Hash identifier:          v29/YQrkRSq8BLjo4CF+aNs2h4TEOrLiSFVgT27TtKQ=
Subject key identifier:   9C:F5:CC:AF:42:C1:12:55:30:39:13:45:17:02:93:70:F9:21:96:0F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05226E6E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nPXMr0LBElUwORNFFwKTcPkhlg8.roa
Signing time:             Fri 18 Mar 2022 16:50:08 +0000
ROA not before:           Fri 18 Mar 2022 16:50:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86142574 (0x5226e6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 18 16:50:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9cf5ccaf42c112553039134517029370f921960f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:f3:31:07:2b:a4:56:e1:a0:e1:74:a6:42:
                    7e:88:f6:33:84:f0:84:45:e0:3a:68:ba:5b:b4:b2:
                    3d:7e:1a:2d:97:08:55:da:d6:40:ef:f9:0b:d0:9f:
                    f3:bb:4e:a8:f0:46:13:e7:5b:18:7e:e5:8d:65:73:
                    4d:9c:fd:66:ed:e9:a0:3e:00:1e:03:32:c2:5c:2e:
                    52:ee:33:40:68:49:bb:50:f2:bd:cf:37:50:eb:3d:
                    d0:c5:e5:f1:25:79:8d:33:be:48:ad:e0:cd:21:82:
                    5a:60:de:01:5c:94:a0:16:f7:44:30:5b:82:f8:61:
                    e0:02:96:bf:71:54:db:c5:b3:4e:c7:81:14:20:ed:
                    68:c3:f7:16:51:71:fb:85:99:23:26:a3:19:5f:5c:
                    28:07:33:db:4d:51:d4:00:99:13:ec:e1:7d:e0:b7:
                    b7:dc:28:0f:fe:09:53:8a:c9:ac:fc:93:19:1d:08:
                    6e:4c:42:fe:2e:d1:77:64:49:04:e9:0b:88:54:15:
                    fe:0e:bf:90:4e:0f:61:29:c2:5e:df:7f:3f:5f:0f:
                    32:c7:8d:f1:34:05:18:2f:32:f3:fb:2c:6c:70:01:
                    b2:e4:d4:06:dd:8c:58:31:fd:92:ab:91:7c:fb:60:
                    73:68:fe:1d:2f:6f:af:10:7c:da:b0:cd:8e:03:f5:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F5:CC:AF:42:C1:12:55:30:39:13:45:17:02:93:70:F9:21:96:0F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nPXMr0LBElUwORNFFwKTcPkhlg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:43:32:50:ed:47:47:9b:46:68:88:0e:ff:21:f8:8f:6f:b0:
         18:10:ce:c6:2f:74:e6:d9:d6:ac:c6:bb:37:71:b0:f7:26:79:
         48:24:ee:b3:29:49:26:73:61:c2:b5:6e:fe:3e:34:2b:98:38:
         5e:f0:b9:bb:e0:23:13:7d:9e:37:43:03:e3:02:7a:1f:0f:dc:
         fd:41:6e:90:6c:54:f3:f4:65:ea:e5:a1:57:02:03:81:a3:b1:
         91:76:cb:de:a7:b6:e4:46:a0:de:a0:d3:e8:f3:46:76:34:72:
         bd:ba:92:ad:6b:be:fb:c7:98:60:9d:65:0d:66:fa:93:70:7a:
         26:2b:ed:ef:f3:e4:15:4f:76:d6:da:0b:e7:d9:ad:8d:d3:8f:
         8b:97:83:14:ed:f3:91:d6:73:d8:e9:10:7e:ef:2f:c7:14:44:
         f6:53:8a:d2:49:d2:58:68:36:54:6a:a1:4b:ca:8c:bf:e7:55:
         95:99:65:5f:13:8c:3b:6f:28:c7:64:8e:90:95:8d:04:c2:bb:
         ac:35:04:e1:60:5d:21:7b:c5:39:36:4a:a2:1d:0e:f4:a2:e4:
         21:f2:e1:cf:5f:fb:3d:48:d8:0e:41:0f:56:75:9e:d1:5a:d0:
         19:d3:8d:63:4f:78:09:ee:0e:5b:00:76:dc:92:cc:0b:2a:54:
         96:da:09:a9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBSJubjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMx
ODE2NTAwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWNmNWNjYWY0MmMx
MTI1NTMwMzkxMzQ1MTcwMjkzNzBmOTIxOTYwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+b8zEHK6RW4aDhdKZCfoj2M4TwhEXgOmi6W7SyPX4aLZcI
VdrWQO/5C9Cf87tOqPBGE+dbGH7ljWVzTZz9Zu3poD4AHgMywlwuUu4zQGhJu1Dy
vc83UOs90MXl8SV5jTO+SK3gzSGCWmDeAVyUoBb3RDBbgvhh4AKWv3FU28WzTseB
FCDtaMP3FlFx+4WZIyajGV9cKAcz201R1ACZE+zhfeC3t9woD/4JU4rJrPyTGR0I
bkxC/i7Rd2RJBOkLiFQV/g6/kE4PYSnCXt9/P18PMseN8TQFGC8y8/ssbHABsuTU
Bt2MWDH9kquRfPtgc2j+HS9vrxB82rDNjgP15GMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSc9cyvQsESVTA5E0UXApNw+SGWDzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L25QWE1yMExCRWxVd09STkZGd0tUY1BraGxnOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAOQzJQ7UdHm0ZoiA7/IfiPb7AYEM7GL3Tm2das
xrs3cbD3JnlIJO6zKUkmc2HCtW7+PjQrmDhe8Lm74CMTfZ43QwPjAnofD9z9QW6Q
bFTz9GXq5aFXAgOBo7GRdsvep7bkRqDeoNPo80Z2NHK9upKta777x5hgnWUNZvqT
cHomK+3v8+QVT3bW2gvn2a2N04+Ll4MU7fOR1nPY6RB+7y/HFET2U4rSSdJYaDZU
aqFLyoy/51WVmWVfE4w7byjHZI6QlY0EwrusNQThYF0he8U5NkqiHQ70ouQh8uHP
X/s9SNgOQQ9WdZ7RWtAZ041jT3gJ7g5bAHbckswLKlSW2gmp
-----END CERTIFICATE-----