Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa
File:                     u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa (raw, json)
Hash identifier:          FkpVZJvEbCXwRWYECRX78ZOxQYJaIxnxDlNHkRhA9rY=
Subject key identifier:   BB:C7:A1:C6:2E:8A:4D:5D:68:52:60:AE:16:4A:F0:8A:25:47:D2:AF
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       07832123
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa
Signing time:             Thu 26 May 2022 02:58:13 +0000
ROA not before:           Thu 26 May 2022 02:58:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48
                          2001:7fc:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126034211 (0x7832123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 26 02:58:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bbc7a1c62e8a4d5d685260ae164af08a2547d2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:14:20:a4:08:ea:be:36:42:05:58:cb:81:
                    61:b9:83:7e:35:77:ee:55:c8:a6:2d:52:89:d7:00:
                    86:f4:d2:9e:17:a1:4f:78:ea:69:15:b9:f8:8e:e3:
                    2f:0d:c3:84:70:d7:51:98:6f:e4:dc:4b:4c:6b:54:
                    90:fe:32:ca:75:68:15:3a:e9:03:03:22:27:dd:0c:
                    bd:d4:0b:43:1e:f1:66:17:5e:52:1b:ce:2c:22:f7:
                    06:52:b3:84:fa:00:85:a0:73:bf:9b:9b:2b:01:5c:
                    3f:c3:f2:6a:31:86:18:60:a9:c0:db:7e:d3:5d:ef:
                    c9:e6:ba:8e:1d:d6:d2:17:8f:39:ff:f9:90:67:ba:
                    cd:c3:24:87:40:85:79:f1:b8:e9:f1:11:fa:b6:ad:
                    2f:07:26:7b:8f:85:30:13:d3:d7:a3:7b:82:a9:e3:
                    8a:29:ee:47:53:4c:d3:69:71:76:d2:10:4a:a1:d7:
                    d1:93:c8:19:c5:3e:5e:56:28:02:7d:46:fc:7d:67:
                    10:0f:43:b8:5a:2f:ab:97:1b:c8:19:97:8a:2d:d4:
                    3e:28:7e:ef:25:58:7e:06:ba:84:d3:1f:c7:0d:83:
                    11:ec:70:c7:9d:66:35:a3:72:8f:12:51:2b:e8:32:
                    97:e8:55:80:bb:d8:a7:c2:b1:32:3d:d4:17:10:af:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C7:A1:C6:2E:8A:4D:5D:68:52:60:AE:16:4A:F0:8A:25:47:D2:AF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:01:fa:87:ae:cd:90:f8:57:65:62:f5:eb:b2:7e:99:b8:
         c0:b6:67:f5:ec:56:9c:04:be:6e:1d:37:89:33:78:f8:38:5c:
         44:bf:04:2c:ca:23:f0:db:0d:7d:07:02:bd:30:68:b6:36:51:
         76:3a:94:43:06:80:35:fb:4c:11:89:6a:8e:f7:30:b1:60:ad:
         b1:bf:a9:64:90:23:cb:a9:12:76:b4:3b:3e:7e:4d:7d:e4:fe:
         b1:86:b5:00:81:f3:fe:21:fe:ab:f4:94:dc:68:61:c6:ce:4b:
         74:2c:52:c7:82:2a:35:c3:ca:97:f1:d2:7b:fb:5f:ef:7c:be:
         ab:89:ed:e3:fe:cb:b8:6f:b9:05:58:f1:02:12:87:52:7f:82:
         15:26:f9:3c:8e:14:c4:c0:ba:5f:a8:8e:7e:6b:77:5d:76:19:
         d8:3c:35:9f:ef:cc:a1:12:59:be:c4:d2:43:15:b1:a1:eb:63:
         af:ee:c5:53:b8:33:8b:89:e1:72:2e:e8:9f:38:03:e6:19:c7:
         93:c5:61:bf:44:46:da:97:b7:eb:29:c3:fc:5d:d0:aa:00:a0:
         9b:54:ce:3d:f1:52:ad:f4:2a:df:fd:d8:7a:e0:af:51:92:ed:
         3a:7b:32:7d:17:1c:e6:57:be:08:36:ca:6e:63:9f:4d:68:98:
         4d:d2:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----