Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qHzilwfWHq0bgFn2wM3OWLqELPs.roa
File:                     qHzilwfWHq0bgFn2wM3OWLqELPs.roa (raw, json)
Hash identifier:          XZVsPtgWkTDNTaMXN09G4jYT4ToSuQCkNLeaYbcsrmU=
Subject key identifier:   A8:7C:E2:97:07:D6:1E:AD:1B:80:59:F6:C0:CD:CE:58:BA:84:2C:FB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       08DF839B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qHzilwfWHq0bgFn2wM3OWLqELPs.roa
Signing time:             Tue 21 Jun 2022 15:00:45 +0000
ROA not before:           Tue 21 Jun 2022 15:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148865947 (0x8df839b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 21 15:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a87ce29707d61ead1b8059f6c0cdce58ba842cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:b1:99:3e:b5:25:b5:5b:e0:88:d6:97:99:
                    ca:5b:d6:08:0d:34:35:f1:c9:47:bd:a6:e0:9d:7a:
                    0e:08:e8:0e:30:df:91:80:40:f9:75:73:a2:93:05:
                    f1:18:58:ce:62:a1:ce:b1:0d:d8:95:b3:07:ed:c0:
                    fe:95:bb:6b:47:13:14:9e:9f:19:56:4f:1a:89:48:
                    25:b6:d7:b3:5b:09:b8:09:1b:85:f5:7a:99:ed:2f:
                    bc:f0:8d:0e:77:c9:89:4b:06:fe:f2:92:90:2b:55:
                    7e:0f:44:91:b9:ce:60:42:89:3a:e1:10:91:48:ea:
                    db:3d:91:71:5a:a8:48:17:14:e7:ce:98:4d:83:87:
                    ab:b6:72:0b:e8:b5:31:7d:93:a9:5c:37:de:b6:95:
                    da:1a:7c:8c:97:cd:6a:37:13:29:07:dd:cd:af:45:
                    50:9b:be:be:c4:f9:a7:93:d5:6a:6e:d1:95:ff:df:
                    cb:19:f9:eb:7c:81:89:6c:aa:38:e3:43:d7:7b:58:
                    77:45:e1:39:9a:25:48:a3:46:2c:bc:87:25:e7:a2:
                    c5:ca:9a:ee:42:76:50:52:00:3f:98:f0:a5:c1:ce:
                    2a:4a:46:4c:a7:e2:6b:cd:d4:f3:61:96:65:f8:39:
                    4e:1a:e9:6a:fb:7b:2e:b9:82:c0:ab:49:9d:a9:f4:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7C:E2:97:07:D6:1E:AD:1B:80:59:F6:C0:CD:CE:58:BA:84:2C:FB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qHzilwfWHq0bgFn2wM3OWLqELPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:f0:a5:e9:8e:b4:6c:1d:e1:d9:6f:23:88:c3:bc:c7:6b:
         39:48:7d:8b:a5:df:d7:11:5f:4c:91:dd:c9:29:a3:af:64:d3:
         eb:59:87:b7:5c:68:4d:58:16:3c:5d:fe:23:a9:a9:8f:ff:ae:
         f2:67:e6:90:32:e1:05:5c:4c:ad:1e:bd:63:82:e9:87:33:75:
         be:9a:fb:ed:a4:70:4c:5c:c9:ce:97:0e:c8:40:06:cf:8c:f0:
         b9:1f:77:7e:ff:a5:b3:81:0f:75:3c:05:8c:36:88:66:89:8d:
         fc:ca:d2:68:54:be:52:8e:cf:17:5c:0e:3c:53:d4:d8:6c:15:
         bc:63:d6:9d:59:6f:2e:a2:85:98:76:16:aa:be:bc:1a:b5:5c:
         67:9e:f6:34:65:24:04:c7:c1:c2:f4:1f:f7:a1:80:36:a3:7c:
         02:28:43:de:3b:b9:85:53:06:03:ef:f5:84:64:c5:6b:05:8a:
         53:f0:b6:21:6d:e0:f1:aa:ee:9a:de:58:ed:c3:f4:0a:10:41:
         52:f7:b2:d3:d1:65:af:a3:91:91:49:ef:0b:4e:e7:f7:0c:5e:
         a7:91:8e:ec:38:d2:84:f7:d1:c7:52:89:95:29:d8:4f:7d:18:
         01:6e:57:c0:e4:73:05:08:69:35:bf:fe:dc:b2:75:56:2a:3f:
         c3:70:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----