Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa
File:                     tCkEmCOxDSRsGj_nrSshJTq_8p8.roa (raw, json)
Hash identifier:          CGZ7qSZwyxtzcPl6+mDfRSw1FiQBgVpMaUSLEhFXvkw=
Subject key identifier:   B4:29:04:98:23:B1:0D:24:6C:1A:3F:E7:AD:2B:21:25:3A:BF:F2:9F
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       05EB03CF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa
Signing time:             Fri 15 Apr 2022 08:09:14 +0000
ROA not before:           Fri 15 Apr 2022 08:09:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99288015 (0x5eb03cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 15 08:09:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b429049823b10d246c1a3fe7ad2b21253abff29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:a3:de:e8:37:03:96:b9:ca:cd:2b:ca:1d:
                    02:24:07:02:d8:a9:6f:d2:38:68:a9:d6:45:f8:48:
                    86:ea:51:7a:e1:25:24:4c:0a:82:bb:b0:1f:1a:85:
                    a9:f8:39:75:05:48:3e:b5:dc:49:55:43:40:9a:42:
                    f2:3b:5f:81:2a:19:e5:82:ea:02:0c:fa:85:dc:8c:
                    f1:0b:ea:4b:a9:c7:df:3c:a0:12:88:bd:6d:6e:50:
                    85:69:44:65:68:ec:11:47:b9:28:fb:0c:de:50:d8:
                    0c:1c:10:28:13:5d:a3:78:8f:ef:44:27:3e:91:f0:
                    e5:27:55:6b:1a:8c:8e:d6:9a:5e:e7:50:2d:22:99:
                    ba:5b:73:b3:52:40:09:a8:5f:45:c1:4e:25:4f:4e:
                    fa:c9:3f:78:8e:f9:5e:f8:0d:8c:47:3a:50:e2:99:
                    25:5b:1c:a5:1d:63:a5:4c:87:13:df:b2:fb:ee:2e:
                    b0:74:08:18:39:e7:62:0e:2b:46:0c:42:f4:6c:88:
                    b9:ef:3d:16:76:d2:08:07:48:ce:40:97:7b:68:32:
                    99:e4:b4:5f:69:53:19:e4:6d:3b:36:8d:f1:01:aa:
                    e8:63:d6:a3:16:b3:60:fc:94:95:05:02:8e:ef:37:
                    fd:74:02:70:42:0e:19:1f:5a:d7:fa:21:a4:f9:41:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:04:98:23:B1:0D:24:6C:1A:3F:E7:AD:2B:21:25:3A:BF:F2:9F
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tCkEmCOxDSRsGj_nrSshJTq_8p8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:04:64:2b:a8:da:0f:d3:78:8c:11:a2:5b:4e:56:03:e6:ac:
         43:bd:d9:be:75:3e:14:84:bb:25:19:7f:3e:05:57:17:2c:b1:
         f1:e4:46:df:50:0c:45:c6:a0:99:0f:09:55:ac:2c:ef:d8:0f:
         04:40:b6:6d:9a:2e:bd:a8:fd:b0:f6:28:71:b9:8d:e7:89:24:
         68:d0:7e:19:05:0c:3d:7f:19:ca:19:1e:8e:de:2c:fc:ed:59:
         4e:a0:73:eb:b3:88:3f:4f:9b:e3:e2:ff:12:27:30:7d:d1:da:
         36:8e:4b:b7:47:11:69:12:1b:8e:bc:6c:83:6e:ae:13:f7:48:
         4e:b9:89:74:93:51:92:93:56:9c:58:50:80:31:0c:72:95:cb:
         f9:c5:73:c4:e5:54:04:3b:fd:7e:68:58:0e:ba:1f:d6:1d:1c:
         2d:49:35:a8:10:94:da:13:b3:ec:e6:ac:f6:8b:1f:88:e4:b0:
         14:49:c9:b3:b3:73:29:c0:a0:87:41:62:ff:42:be:07:67:91:
         38:a3:97:2c:9c:51:bb:72:df:d0:73:bc:4b:aa:dd:14:04:f4:
         6e:a8:4a:63:a8:18:89:b8:8e:df:ea:7d:58:68:c6:c3:1a:ce:
         b0:f2:38:b6:37:31:f8:f4:56:0f:c4:70:55:19:c6:53:aa:57:
         cd:97:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----