Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nrTkuFdilxtQ8zGLJGGyvBjUK3Q.roa
File:                     nrTkuFdilxtQ8zGLJGGyvBjUK3Q.roa (raw, json)
Hash identifier:          t5tA9fB7PrSx5u4pdTgV479+5cwiWbUklyX/LXB9vHc=
Subject key identifier:   9E:B4:E4:B8:57:62:97:1B:50:F3:31:8B:24:61:B2:BC:18:D4:2B:74
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       096897CF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nrTkuFdilxtQ8zGLJGGyvBjUK3Q.roa
Signing time:             Fri 01 Jul 2022 16:48:26 +0000
ROA not before:           Fri 01 Jul 2022 16:48:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157849551 (0x96897cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  1 16:48:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9eb4e4b85762971b50f3318b2461b2bc18d42b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:8b:1c:7f:9e:25:d8:a3:f5:4c:6c:b4:e6:
                    67:b2:89:8e:12:09:b5:85:ca:19:74:a2:4b:23:4f:
                    9b:5d:38:03:32:0b:b8:32:15:69:d3:9d:ec:79:5e:
                    f5:b1:fa:4c:08:65:29:c3:8b:df:c0:9b:cb:98:b6:
                    7c:62:ad:1d:ed:41:99:c6:cb:fc:fc:89:96:d8:7b:
                    17:c7:c3:53:5f:bb:57:54:3d:43:67:dc:7d:99:4c:
                    a8:86:34:24:85:d2:15:08:31:2b:d7:ed:f4:8c:c9:
                    bc:ff:b3:c4:02:55:dd:b7:03:20:32:b7:78:30:36:
                    a0:fe:c8:c7:e7:1b:52:5f:5b:50:8a:ce:61:34:ed:
                    f1:85:dc:d3:e4:72:a1:2f:10:1a:2d:9d:cf:16:86:
                    8e:88:2b:5c:04:f3:e7:19:b7:e2:e6:56:12:42:8c:
                    18:09:44:b0:83:9a:ec:df:34:71:81:2f:32:4e:c0:
                    31:5e:d7:95:f4:24:14:cf:58:26:3d:1c:22:0d:81:
                    41:9d:cb:9d:d5:eb:57:74:bf:ef:9a:45:f0:90:7f:
                    0c:11:8b:fd:3c:c9:c7:fe:86:a4:1b:11:c9:86:f1:
                    0f:2b:3c:12:a6:c7:04:3c:55:b0:83:b0:1c:79:c1:
                    7d:b9:0b:3f:30:2a:51:59:dc:98:db:39:ca:ba:92:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B4:E4:B8:57:62:97:1B:50:F3:31:8B:24:61:B2:BC:18:D4:2B:74
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nrTkuFdilxtQ8zGLJGGyvBjUK3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:2f:87:a1:f5:34:c9:d7:c6:2f:02:09:a2:54:25:80:f0:
         fa:ed:ef:31:40:ad:7b:92:bc:57:09:d4:2d:ef:ad:6a:8a:42:
         f4:89:f4:e3:f2:88:d5:a0:a2:b7:56:56:eb:63:01:59:52:9a:
         71:72:eb:6d:ee:4e:56:53:f4:89:d6:e8:13:7e:23:19:bc:af:
         de:8f:4d:f3:5a:d0:c4:3a:d4:d8:d0:7e:99:11:9e:09:b7:19:
         7b:7e:9a:29:b9:27:d5:25:30:82:19:f7:9e:1d:be:e6:b0:4f:
         8a:05:0d:dc:8c:58:c1:38:8b:9a:1a:7a:6d:33:8a:d1:c6:90:
         e0:5d:50:b2:86:af:49:c0:6e:fb:dc:ed:ec:35:6e:f2:6a:b4:
         7c:67:f7:32:09:d5:c2:da:6d:94:5f:c1:9e:e5:6d:1c:ff:65:
         8f:a0:00:c8:c9:13:23:0a:0e:b0:21:f2:51:c5:9a:80:bf:f1:
         ec:af:8b:79:7f:16:97:13:ff:fd:4e:b4:0f:90:1c:c9:ec:fb:
         95:02:9f:a4:2a:b1:d2:2f:f6:e2:27:af:c7:3a:6e:df:6f:a0:
         2f:c7:cf:d1:33:1c:6c:dd:f2:35:cf:61:bc:08:4e:1b:fe:21:
         b0:83:99:77:02:b8:bf:80:75:9c:bb:e0:dc:b1:11:af:64:7c:
         3e:13:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----