Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa
File:                     xRz4rFFA2c8n33sXsZjG7KneQuQ.roa (raw, json)
Hash identifier:          zTdiI3Ha3RjqkNGe8xvntgr8CQZwD7onXssrZsL1O/c=
Subject key identifier:   C5:1C:F8:AC:51:40:D9:CF:27:DF:7B:17:B1:98:C6:EC:A9:DE:42:E4
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       04CF4094
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa
Signing time:             Mon 07 Mar 2022 12:57:14 +0000
ROA not before:           Mon 07 Mar 2022 12:57:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80691348 (0x4cf4094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar  7 12:57:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c51cf8ac5140d9cf27df7b17b198c6eca9de42e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:82:7e:48:76:89:4a:34:59:ad:ce:02:a6:
                    91:6b:9d:62:13:51:15:c7:bc:d0:ee:63:89:3e:8b:
                    1a:5b:fd:8f:f1:a3:76:c2:63:06:6f:56:d0:c5:05:
                    ed:88:0a:c4:61:6f:53:da:ac:8d:69:ae:2d:68:c8:
                    88:e9:85:ea:0b:62:9c:ca:11:e9:c5:fb:7d:ac:b8:
                    f7:0c:4b:13:ab:f9:79:1c:8d:bc:81:49:ba:11:e5:
                    c1:9e:3e:e5:59:6d:08:e4:af:11:61:e2:5c:1f:1a:
                    56:75:de:03:70:cb:68:c4:a3:6c:88:9a:19:3c:07:
                    f3:bc:b8:cf:e5:6a:64:af:e4:87:96:3e:d9:33:19:
                    87:d8:8d:41:b9:aa:9b:82:43:28:2e:6e:e3:93:c6:
                    c6:53:1d:60:a0:a3:64:eb:9f:55:b5:7a:ee:b3:d9:
                    f1:25:83:c0:b4:b0:33:52:e3:97:ba:44:5c:c3:8d:
                    2a:86:7f:78:50:1e:a0:8d:13:ae:23:87:9e:ca:9a:
                    6c:0f:e5:f6:3f:ee:e8:77:de:4a:e2:af:71:6b:e6:
                    e6:40:12:7a:14:92:40:df:39:fa:07:29:87:7e:d8:
                    d7:38:13:9d:4e:18:74:26:28:a2:9a:2a:c6:4d:74:
                    d4:6e:7b:22:a9:7d:7b:d2:14:7c:2d:2c:8f:a3:19:
                    16:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1C:F8:AC:51:40:D9:CF:27:DF:7B:17:B1:98:C6:EC:A9:DE:42:E4
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xRz4rFFA2c8n33sXsZjG7KneQuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:88:5d:83:c0:25:03:7d:f4:68:27:81:5b:db:ec:5e:a4:
         a3:7c:35:03:35:07:68:5a:9c:63:3a:a9:be:15:cf:37:b2:b0:
         07:0c:72:98:79:42:c0:e4:d6:5d:da:60:0b:08:06:cd:e1:b9:
         79:9d:f1:52:b8:c8:43:db:7b:ee:89:03:c6:5c:7d:eb:6d:45:
         5a:62:0b:7e:8b:ec:f7:35:32:68:ab:08:99:97:21:99:bf:1a:
         1f:92:ba:1f:31:4c:56:e7:8c:a2:e0:7b:95:43:ac:08:b0:d4:
         a4:5b:c6:ea:ce:a5:f1:65:1d:ee:cc:05:88:22:08:97:ac:16:
         ae:97:7d:77:de:bd:b4:b1:8e:98:e8:2f:2f:c9:31:62:86:0e:
         4d:e0:74:c1:62:81:da:9e:42:e1:0d:80:bc:df:63:aa:c1:de:
         18:7b:31:55:ed:0c:35:72:1b:f5:0e:23:b3:41:6c:8c:50:17:
         f2:fb:69:91:5b:a2:8f:07:bc:52:02:4f:d7:e1:57:19:d0:8c:
         93:36:59:6f:c4:ca:19:2b:be:64:30:ee:35:fb:e7:8b:0d:36:
         c1:c9:f4:56:3a:da:37:3d:f1:b8:95:78:a9:52:f5:50:44:53:
         90:e9:a6:b1:d1:0d:58:ed:c2:a8:00:6d:0d:d1:41:3c:23:3f:
         dd:97:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----