Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/s5mWV3o5Rlwi016-XPd4rRA4aOI.roa
File:                     s5mWV3o5Rlwi016-XPd4rRA4aOI.roa (raw, json)
Hash identifier:          l56ysZyn+scyxoSEx0D6u37JkbD+6mgtpy7VL1p5WGc=
Subject key identifier:   B3:99:96:57:7A:39:46:5C:22:D3:5E:BE:5C:F7:78:AD:10:38:68:E2
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05CD8DA0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/s5mWV3o5Rlwi016-XPd4rRA4aOI.roa
Signing time:             Sun 10 Apr 2022 22:44:35 +0000
ROA not before:           Sun 10 Apr 2022 22:44:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97357216 (0x5cd8da0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 10 22:44:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b39996577a39465c22d35ebe5cf778ad103868e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:43:dd:7a:25:74:55:52:34:b4:1b:74:8a:
                    67:3c:17:b8:1b:ca:29:f6:2c:b5:5d:69:c8:e0:7d:
                    39:d5:e1:ee:22:f4:15:a9:e4:2c:f0:62:b6:f1:a5:
                    a6:c0:a2:6b:47:e4:e7:72:91:60:5e:c9:a1:0f:e3:
                    e2:9f:70:c6:01:8d:ba:16:6d:9a:2d:89:1f:08:69:
                    28:6f:a3:8b:17:1d:ca:58:32:39:d9:12:50:72:db:
                    32:8b:f6:46:78:3f:da:4d:81:75:3e:3f:44:ad:1b:
                    c3:db:1f:d5:72:ed:4e:8f:01:74:f4:64:2b:94:e5:
                    87:46:86:aa:97:93:3a:1b:93:fe:53:76:b1:f6:b2:
                    8c:0f:a0:5c:2f:a7:6d:05:98:fb:08:f8:0e:f7:85:
                    b7:90:ff:78:d3:0b:85:47:0c:14:0e:c6:b9:be:0b:
                    3a:0b:b0:34:ea:91:b0:4d:8b:cc:99:20:2e:20:3b:
                    b7:84:6e:f5:79:ed:01:2e:6d:a6:43:1b:31:9f:6d:
                    74:02:86:cf:44:96:a7:f9:d9:a3:61:79:44:6a:34:
                    b5:ef:72:80:20:11:43:ca:d3:5e:80:58:a1:30:d3:
                    b5:63:7f:a1:58:ac:e6:b7:68:97:49:97:33:4f:31:
                    c9:c7:61:47:41:e9:f7:1d:ba:06:2f:c7:25:a1:b4:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:96:57:7A:39:46:5C:22:D3:5E:BE:5C:F7:78:AD:10:38:68:E2
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/s5mWV3o5Rlwi016-XPd4rRA4aOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:b2:6b:94:63:9c:c3:43:4e:7e:6b:2b:ac:03:08:d6:4f:
         d8:33:d4:08:17:2a:bf:02:9c:33:3d:56:c6:a4:55:d9:b8:e9:
         54:1d:5c:3a:a5:f9:09:02:15:01:d5:c8:31:9f:aa:1b:d8:a9:
         cd:82:da:ad:e0:6e:6f:4e:3a:ae:31:3d:89:65:5a:7a:c6:72:
         38:7d:85:f1:c5:eb:66:78:8e:19:f1:74:c5:50:8c:e1:6c:87:
         85:a5:d9:da:42:7d:38:fd:c5:ae:87:2a:e1:90:55:77:0b:b4:
         b9:80:4f:39:b1:ec:42:db:84:00:d1:e6:ce:a3:89:28:48:db:
         82:b3:d2:2e:af:98:6b:e1:6f:b8:8d:dd:eb:36:33:f6:ab:7b:
         54:9d:3c:d0:0f:04:c4:22:8f:50:71:41:48:b3:ff:57:53:2e:
         23:bc:5d:15:7c:35:0b:dd:46:49:9b:68:f8:07:39:6e:8d:a4:
         c8:6b:d3:80:da:45:10:36:fe:14:2d:af:ef:0e:4e:02:88:e0:
         28:d6:53:d2:63:ae:bc:0b:b5:4f:bd:0a:12:69:26:a8:ef:1d:
         6a:ab:94:74:aa:c2:d0:48:76:01:23:6b:f4:56:bc:b3:f1:b8:
         59:9c:ed:3f:f2:0e:9c:ae:4b:89:b7:c4:80:79:7d:36:fd:66:
         a9:a5:58:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----