Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uq4aSto0JgkdojhUmUCgIcmW3qE.roa
File:                     uq4aSto0JgkdojhUmUCgIcmW3qE.roa (raw, json)
Hash identifier:          sSdHwj3aIH99cZAaPY5dsmJPRddqkjlURa+rW0aGQ5o=
Subject key identifier:   BA:AE:1A:4A:DA:34:26:09:1D:A2:38:54:99:40:A0:21:C9:96:DE:A1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       084E9D27
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uq4aSto0JgkdojhUmUCgIcmW3qE.roa
Signing time:             Fri 10 Jun 2022 13:05:02 +0000
ROA not before:           Fri 10 Jun 2022 13:05:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139369767 (0x84e9d27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 10 13:05:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=baae1a4ada3426091da238549940a021c996dea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:da:5a:b3:49:f8:74:01:25:58:39:24:73:
                    1e:55:53:5f:94:bb:b7:9d:06:42:7a:6f:7e:e1:eb:
                    03:95:71:8d:26:f5:b3:ea:2a:a4:2e:51:14:69:9e:
                    4d:ff:3b:d4:28:7d:1e:b8:66:e1:04:69:ee:9b:6d:
                    a0:7b:17:93:d3:ca:8f:fc:0b:14:79:02:90:02:14:
                    3e:a5:b5:53:00:ae:dd:77:e9:c9:9a:92:c3:05:92:
                    90:43:5c:c4:ca:5e:18:5d:e0:72:23:46:a8:0a:4f:
                    a7:0d:4f:c2:66:3b:78:23:4a:1e:48:8a:e0:b8:91:
                    07:a5:c9:bf:5b:32:dd:65:e2:22:c3:aa:95:d8:08:
                    60:ca:ed:3e:2f:16:e1:d5:44:af:4e:35:ac:27:d1:
                    4c:3a:cf:08:3a:75:27:75:17:a1:bb:3b:8b:1c:76:
                    e0:e9:62:10:5b:de:f5:d1:60:c8:09:12:60:c0:59:
                    d7:db:a8:8a:bf:19:0d:d5:37:3f:dd:b6:e3:2c:1c:
                    45:74:42:d1:7c:52:f1:97:a5:29:77:bc:2d:81:3c:
                    1f:3d:16:89:7f:e8:21:9b:34:78:b7:26:34:20:ab:
                    8f:3b:11:1c:b7:f5:cb:ed:e5:c0:49:0f:4f:16:18:
                    ae:76:c0:57:4b:7f:3b:46:a4:eb:44:ea:86:41:e3:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AE:1A:4A:DA:34:26:09:1D:A2:38:54:99:40:A0:21:C9:96:DE:A1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/uq4aSto0JgkdojhUmUCgIcmW3qE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:f0:f0:4f:12:10:7f:88:39:0c:4e:28:9d:a1:7a:9c:e7:
         b1:3d:21:75:01:51:a8:21:c6:75:8f:b0:1b:51:a2:b6:c2:e5:
         f6:89:26:03:82:6b:d7:7b:d6:76:7e:45:f8:2a:53:5a:9d:db:
         57:36:16:62:0e:3a:09:77:6c:7f:a0:10:6f:dd:03:39:cb:7a:
         e6:70:89:4a:7c:e5:dc:ad:60:de:d1:0a:8b:64:af:c7:d0:3b:
         03:49:f3:23:de:3b:3b:15:aa:53:b5:04:ce:9c:8e:1b:ad:9f:
         2b:b1:a6:8a:31:10:e6:e9:95:b4:06:b3:ef:76:1a:82:ca:d4:
         9c:c9:90:98:64:3d:cd:4b:33:13:87:9a:50:b3:9a:61:bd:e7:
         29:59:bd:80:2f:82:00:7a:90:b1:a2:6f:ee:85:95:f5:f1:e3:
         43:47:c9:fd:83:cb:4f:39:a1:3c:7f:de:b3:fe:b9:d1:38:d4:
         64:0e:e7:3e:0a:66:b5:0d:71:6e:25:81:0b:bb:a9:f2:44:07:
         29:20:4c:ba:9c:34:2a:a2:1e:71:1b:72:a0:e5:10:60:25:2c:
         cc:13:f2:fb:88:00:eb:92:2b:79:ef:a6:d3:bc:f1:14:de:e5:
         ee:8c:28:f3:26:8e:52:b5:b8:97:43:a2:99:72:6e:d7:88:40:
         35:ba:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----