Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vuRLSTDLQO2nrM80wUVJFI1_jQk.roa
File:                     vuRLSTDLQO2nrM80wUVJFI1_jQk.roa (raw, json)
Hash identifier:          lQefrWYdiAPXGqVXTaiC68eWKLPpm90030n6RJbJXsY=
Subject key identifier:   BE:E4:4B:49:30:CB:40:ED:A7:AC:CF:34:C1:45:49:14:8D:7F:8D:09
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       043E0CFD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vuRLSTDLQO2nrM80wUVJFI1_jQk.roa
Signing time:             Wed 16 Feb 2022 15:18:14 +0000
ROA not before:           Wed 16 Feb 2022 15:18:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71175421 (0x43e0cfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Feb 16 15:18:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bee44b4930cb40eda7accf34c14549148d7f8d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:48:ca:04:5b:40:2d:aa:4c:6f:ae:aa:ac:
                    af:cf:d0:3b:e8:08:b1:a4:f8:17:ec:79:6e:c2:c2:
                    f7:bc:e4:14:07:27:04:3c:65:d5:90:5d:a2:33:10:
                    3e:54:a9:e0:d9:0b:a2:15:f4:54:b4:9a:4b:cc:25:
                    6a:7d:51:d7:8d:c5:b5:03:21:d5:a5:11:59:cd:e6:
                    9d:28:ac:cd:48:f6:60:6e:87:dc:73:fd:01:94:02:
                    1a:d4:64:16:a9:1e:8f:36:e9:48:74:d6:08:fc:88:
                    f6:74:5a:6b:96:62:5e:54:a1:61:47:10:5c:cd:39:
                    29:0e:53:49:b8:50:5f:01:d6:a2:f4:a0:55:5d:51:
                    2d:fd:28:cf:cb:ca:7c:76:c2:fb:46:76:72:2d:1c:
                    8d:67:85:fe:52:95:7c:4d:a1:7e:8d:df:26:88:27:
                    04:45:7c:eb:1d:ba:e0:fe:68:bb:86:ff:43:69:50:
                    a1:73:b8:89:30:35:72:5d:64:de:1e:3a:92:c6:e6:
                    96:c6:73:b8:5e:fe:c8:17:d6:68:e3:21:4f:bb:cd:
                    20:b5:8a:74:d6:15:68:c4:af:19:57:fb:8c:c7:c6:
                    97:6a:f8:3d:91:f6:3e:bb:55:f0:88:9e:03:85:66:
                    8c:49:c1:3a:5d:1c:85:c1:92:25:78:d3:80:a4:ee:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E4:4B:49:30:CB:40:ED:A7:AC:CF:34:C1:45:49:14:8D:7F:8D:09
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vuRLSTDLQO2nrM80wUVJFI1_jQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:0b:11:03:eb:5e:c8:de:24:85:df:7d:97:c2:0a:a0:22:
         eb:98:81:51:7e:6d:8d:c9:f0:f1:51:b6:8c:b5:7d:f7:6b:b1:
         51:f9:b6:0c:b4:26:cf:75:a0:6d:f5:9b:30:22:5b:ab:ae:04:
         30:f3:04:fd:7d:5d:83:2e:6a:8a:12:70:1d:72:bb:92:cd:30:
         be:ab:8b:6a:ba:13:51:db:49:60:c4:88:4b:c2:0b:64:74:c1:
         08:48:1c:7a:21:64:86:5f:87:9d:cf:f7:bd:99:54:fa:82:33:
         0d:cd:45:11:33:02:73:dc:ad:f9:39:96:7c:95:6a:d1:fa:3e:
         06:f7:ed:96:75:67:78:a7:03:0b:3e:51:e5:72:b6:be:ef:96:
         eb:e0:0f:63:ed:7a:e7:be:43:a8:9e:f2:10:0a:22:be:8b:2f:
         60:4b:15:ea:a7:b8:39:16:2f:21:3a:bb:0a:81:7e:2f:2d:51:
         45:9f:9f:a9:f7:eb:e9:84:e6:08:ae:5c:e4:b3:30:4a:28:57:
         6f:de:8e:76:a5:e1:cd:11:67:2a:f5:cf:7c:a4:d2:f9:0f:dc:
         ec:bf:0f:ab:77:30:80:2e:bd:27:4c:11:d0:ac:c5:db:58:0f:
         b3:9c:b9:b1:44:dd:95:cf:29:f7:65:f8:96:31:ca:b6:0e:6c:
         74:33:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----