Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa
File:                     ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa (raw, json)
Hash identifier:          T0T84KLlCFbb7khLVzf+Np9qdespHT2HNkeCTN+p9Vk=
Subject key identifier:   BA:34:D4:BC:99:18:E6:AE:00:8E:57:75:14:CC:A1:53:88:5C:EE:3D
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06EEDE8A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa
Signing time:             Sat 14 May 2022 17:23:31 +0000
ROA not before:           Sat 14 May 2022 17:23:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116317834 (0x6eede8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: May 14 17:23:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba34d4bc9918e6ae008e577514cca153885cee3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:66:b3:20:88:ff:ee:d7:20:05:2e:a8:67:
                    0f:70:82:55:dd:c5:a2:ef:07:de:f3:02:7f:9b:11:
                    c7:65:14:f2:6c:7c:18:c5:bb:70:30:5c:cd:0d:e8:
                    e7:65:1d:e7:5e:64:dc:64:46:e3:98:8d:39:d0:b9:
                    25:5c:a4:5b:61:36:16:86:90:93:63:46:ef:9b:ca:
                    7c:80:72:99:55:6a:ca:4e:e0:6c:9f:0c:7d:08:57:
                    3e:00:d2:b4:d0:6a:24:27:a8:68:ca:a9:e1:45:5e:
                    be:1d:c0:29:b6:3e:55:f2:32:d5:e5:99:c7:76:a0:
                    0a:2c:4f:ea:0b:ee:48:67:55:f5:15:45:6a:25:2f:
                    5b:fe:bc:fc:30:b2:26:52:bc:94:84:54:76:88:f2:
                    8e:20:a7:db:b6:07:5c:47:e0:5b:7c:8e:b3:2c:e7:
                    16:fe:c4:a2:fd:1c:56:f9:25:9e:d3:0d:05:9f:02:
                    bd:9c:6c:28:13:31:cb:ac:ec:ee:fb:ea:56:37:7b:
                    c9:1a:d8:39:f8:88:51:53:19:56:18:c8:4f:78:4f:
                    c5:85:bb:d5:9a:9c:8e:d7:fe:53:39:65:dc:7c:b2:
                    3c:ae:7e:d6:af:4a:1f:8b:82:ba:7e:44:d8:37:a9:
                    e0:fe:a3:23:72:83:77:ca:9c:44:d8:2a:de:2e:db:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:34:D4:BC:99:18:E6:AE:00:8E:57:75:14:CC:A1:53:88:5C:EE:3D
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ujTUvJkY5q4Ajld1FMyhU4hc7j0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:2d:31:26:84:18:95:af:c0:5e:c9:96:a2:b7:c5:c5:bd:
         f9:f6:68:b8:e5:7d:13:d3:78:7c:7c:c3:2e:02:41:9a:f2:06:
         32:da:21:ff:44:4a:41:9d:37:36:b6:80:f1:4c:57:3b:de:b6:
         d6:1f:0c:13:bf:a8:36:fa:2e:d3:f1:05:7c:94:b6:9d:ab:8e:
         89:c2:c9:dc:46:64:39:89:83:f6:a0:60:5a:c0:36:61:2e:21:
         54:e2:4d:1f:2d:e3:1b:37:99:ec:0b:b5:b7:fb:4e:6d:77:99:
         05:a0:ea:1d:de:0e:2c:28:35:c2:ca:29:78:f5:b2:80:e1:cf:
         f4:5b:86:50:10:3b:b3:c9:7e:ab:11:16:e8:fb:31:92:4f:b2:
         5e:a3:1d:cd:08:f8:0b:90:65:17:5c:11:54:2d:22:27:aa:92:
         58:7a:2e:c7:49:73:bf:ff:1a:fd:80:7b:f6:bf:df:b1:eb:96:
         77:f4:da:c1:9c:6d:f8:79:1b:ce:4f:33:c5:2c:6d:ae:0a:64:
         ee:37:83:77:54:b5:b0:53:82:ab:a1:90:ae:27:69:87:67:ba:
         1d:de:e4:7a:34:86:b4:2a:8f:f2:74:0d:00:d8:55:bb:7c:da:
         fc:43:da:29:fd:a0:d5:ee:9a:9e:23:e5:93:44:32:37:f1:da:
         ce:4d:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----