Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa
File:                     oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa (raw, json)
Hash identifier:          06IOhBR7grC64uqGkJj4NCVYIULjhZCxzOFpwVW3pBo=
Subject key identifier:   A0:6C:75:DE:F3:3F:2F:1B:71:42:3E:AC:71:9F:E6:EA:03:F9:41:D7
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       093CC3C1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa
Signing time:             Tue 28 Jun 2022 17:21:02 +0000
ROA not before:           Tue 28 Jun 2022 17:21:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154977217 (0x93cc3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 28 17:21:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a06c75def33f2f1b71423eac719fe6ea03f941d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:a3:56:2f:ff:0e:27:50:d4:93:9a:74:c7:
                    19:fd:c6:ec:d4:6a:96:2d:57:57:0f:fd:79:7f:a7:
                    ec:08:ec:fe:7c:f3:e5:76:4d:c7:86:6f:00:35:6f:
                    22:69:07:ea:f0:c3:9e:f8:38:e2:64:36:42:79:8d:
                    87:b7:b4:de:50:24:fa:18:2c:6d:3a:f1:04:8b:a6:
                    c2:df:6c:0b:9e:39:cd:b5:56:33:03:e2:1a:e3:77:
                    51:5b:92:bf:ab:c6:d8:6d:62:89:a1:34:38:57:a0:
                    e5:90:4f:18:99:8d:1e:12:ab:98:73:c9:bb:79:d2:
                    b7:43:bd:89:bf:9b:02:ab:3d:e8:c6:51:cf:11:b7:
                    de:fc:16:1e:13:55:8c:cd:2c:05:c6:55:ac:d9:60:
                    2c:80:1b:7a:c1:5e:06:cc:61:c0:90:86:19:01:26:
                    e5:a3:f1:f1:49:1e:9c:f1:18:da:62:28:16:15:5a:
                    b1:42:71:b2:89:2d:4b:f3:22:80:d4:24:6e:00:3e:
                    6d:8e:93:4d:82:3a:79:8c:c9:07:8a:0e:2c:b5:08:
                    06:e4:82:26:43:bd:4f:87:b9:e1:1a:e2:03:47:86:
                    f7:29:22:d6:ec:cd:06:7b:0f:9a:09:93:5c:d4:e6:
                    7e:c0:69:ff:ac:a8:4a:ed:33:9c:01:fe:84:2f:66:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:75:DE:F3:3F:2F:1B:71:42:3E:AC:71:9F:E6:EA:03:F9:41:D7
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oGx13vM_LxtxQj6scZ_m6gP5Qdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:33:d8:4a:67:d1:90:72:c4:67:28:17:f4:35:aa:f9:f3:fb:
         5f:a7:60:55:ed:7f:ca:8b:0a:c2:04:44:73:6e:74:d5:24:9c:
         25:12:ae:c4:00:aa:4b:83:2f:d4:e2:9f:7a:00:d0:96:a8:b6:
         9f:54:ee:47:4b:30:d2:25:17:ac:ab:7e:9c:99:b9:49:a6:4d:
         bc:04:f0:93:37:2e:44:9a:78:75:7e:87:f7:cc:f4:76:52:99:
         9b:81:02:67:1e:09:4c:f4:98:0b:21:5f:56:31:1f:22:c7:42:
         5d:4d:1e:59:c3:4b:be:cf:b7:db:14:66:1d:71:41:2a:09:5f:
         d6:a7:e5:b5:9c:54:90:e1:44:a5:a6:2f:5b:37:16:fd:5a:f7:
         a2:dc:08:08:ec:74:34:4e:4e:30:14:af:be:62:8d:a7:e0:72:
         29:d0:52:70:37:85:c7:7b:84:b2:a2:b5:36:65:72:92:f1:5f:
         8c:ce:bf:a8:76:0c:11:85:fe:e5:b2:c5:c0:f5:3d:79:a2:d8:
         ad:82:57:03:a6:db:78:c4:7a:ad:2c:41:3a:34:b9:c8:de:58:
         54:ea:82:0d:43:bc:00:80:77:19:ad:9f:79:ff:32:35:ae:85:
         af:25:d1:68:c3:14:4c:f7:97:4f:3d:ad:b7:13:21:7a:c1:56:
         e1:58:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----