Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa
File:                     v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa (raw, json)
Hash identifier:          t8Fa9FL1Zaepnbg38CssiwWCyGzl/0dWpkHlOmJJDYo=
Subject key identifier:   BF:7C:70:36:FC:50:5B:CD:06:B7:51:A0:07:E2:C6:04:FB:C1:CB:41
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0514B52D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa
Signing time:             Wed 16 Mar 2022 14:13:28 +0000
ROA not before:           Wed 16 Mar 2022 14:13:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          151.216.5.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85243181 (0x514b52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 16 14:13:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf7c7036fc505bcd06b751a007e2c604fbc1cb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:8c:15:fb:18:3a:66:61:2a:5f:5d:39:85:
                    2b:b7:f3:49:74:ec:03:ae:bb:9f:a0:b8:6c:88:03:
                    49:5c:0b:40:92:ad:8c:fd:a4:07:a8:fa:cc:d4:b5:
                    c3:02:0f:97:a6:9b:06:94:9a:26:54:da:d9:80:5c:
                    87:49:d1:ea:d7:15:fd:ff:99:20:7e:4f:41:56:1e:
                    91:bb:71:1f:30:17:e7:6a:1a:03:c0:83:d7:68:3c:
                    4b:98:4f:af:a3:89:73:d7:ac:40:39:d3:c6:44:97:
                    01:96:05:c8:f4:9e:61:92:70:77:c5:a6:e3:79:8f:
                    6b:7a:41:8f:0e:f5:e1:4c:27:bc:c6:67:c9:4f:29:
                    08:24:a0:b9:a2:fd:e6:c3:32:91:5c:ea:e4:13:7c:
                    19:85:ac:bb:8a:b7:65:8e:a8:92:f8:3c:a0:d9:2f:
                    9b:f3:49:04:73:e9:c4:6f:81:17:44:d2:2f:11:55:
                    27:52:2f:55:ac:fa:05:38:38:9e:05:7e:65:39:b8:
                    91:f4:ba:4b:04:64:8e:fe:9a:27:e8:d6:f7:2d:0a:
                    b5:4f:9c:06:85:2c:22:57:b4:70:13:c5:8f:7d:1d:
                    bc:a4:58:81:5f:bd:e6:7e:48:d7:65:a3:89:3e:49:
                    c8:6f:f2:c1:28:32:05:85:bf:fd:65:ef:bb:b3:f6:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:70:36:FC:50:5B:CD:06:B7:51:A0:07:E2:C6:04:FB:C1:CB:41
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/v3xwNvxQW80Gt1GgB-LGBPvBy0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/23
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:e0:90:fc:a6:34:d5:93:88:d1:ce:5d:db:30:ef:c2:4b:
         2e:35:8a:71:b6:7c:d9:f0:3f:0d:90:09:19:c0:d3:4f:c2:5c:
         b3:55:41:f9:b1:04:dd:5a:bf:c7:27:dc:43:2b:64:0c:24:12:
         27:af:fa:09:e2:92:d3:da:05:bf:3a:b5:9e:81:80:7e:db:cf:
         fe:e0:0a:e8:5c:94:a8:cf:55:cd:de:b3:2c:d0:4d:9d:d4:7f:
         5a:e9:77:ca:94:6c:b7:71:92:c9:7a:79:12:9a:0e:40:28:dd:
         fb:7b:fa:77:01:55:c0:27:74:5e:35:62:46:63:28:42:87:c0:
         6d:35:60:75:22:62:7c:32:fa:86:b0:85:41:07:17:3c:99:e4:
         60:31:f2:c3:08:2f:21:e0:80:12:f5:d2:25:61:c6:47:94:b7:
         2b:26:f9:cf:45:ff:4f:31:9b:18:88:02:5f:a2:10:8d:2c:cf:
         a9:8f:e7:38:0d:07:a4:fa:97:82:32:7f:ec:46:7e:c3:f9:b7:
         e5:e4:cb:2d:67:69:16:1a:e7:a1:fc:44:c5:79:b8:28:e7:24:
         4f:04:07:72:b3:b3:93:cd:63:20:d4:77:dd:b8:66:b0:6b:4c:
         96:e8:dc:44:10:c6:29:3f:23:9d:e8:5f:b6:07:7b:16:97:07:
         21:47:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----