Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xczR1U6CvKbpLAAgUUGRajtF36k.roa
File:                     xczR1U6CvKbpLAAgUUGRajtF36k.roa (raw, json)
Hash identifier:          bYe5gGcxyPZyVIsQ3+qc9rG/WG1pYTORDGOM2psge3I=
Subject key identifier:   C5:CC:D1:D5:4E:82:BC:A6:E9:2C:00:20:51:41:91:6A:3B:45:DF:A9
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0912326E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xczR1U6CvKbpLAAgUUGRajtF36k.roa
Signing time:             Sat 25 Jun 2022 17:47:21 +0000
ROA not before:           Sat 25 Jun 2022 17:47:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152187502 (0x912326e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jun 25 17:47:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5ccd1d54e82bca6e92c00205141916a3b45dfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:83:b9:fd:d4:ea:a0:2c:8f:6f:a5:cc:cf:
                    82:6b:4c:03:e5:f8:78:33:1d:91:85:4c:67:ae:d7:
                    8e:94:25:5d:df:69:61:41:86:6e:3d:db:b0:71:d5:
                    c7:65:df:60:1d:91:3b:be:ae:f3:f0:ff:ea:8a:e3:
                    12:e3:ad:f8:92:10:8f:75:db:d6:93:6b:1c:da:55:
                    6e:13:68:75:bf:31:24:9f:7c:ec:6c:4b:9a:b2:a3:
                    63:61:1f:6d:c8:4e:8b:5f:ea:35:c3:fa:46:ac:3e:
                    03:7d:8e:0a:2d:37:d5:37:46:f6:35:39:4d:3b:5a:
                    40:c9:ab:05:a3:f0:0e:ec:a4:1b:c3:0f:29:9e:dc:
                    07:fe:69:54:f2:80:a7:45:ae:7a:22:32:b9:f2:26:
                    62:2a:5c:37:a7:bb:06:3a:36:0f:56:82:9d:cd:c1:
                    ca:5c:82:83:91:64:bc:19:d0:f4:22:77:f1:e1:7d:
                    6f:94:81:b8:fd:90:83:5c:8b:c5:e2:e7:56:57:51:
                    62:5a:c6:78:83:67:0d:77:75:5a:c7:f0:d7:f7:40:
                    c5:35:80:32:b2:ac:e2:42:22:56:e3:c9:1c:dd:32:
                    c3:aa:a4:9f:59:ba:da:bd:f5:58:1b:2b:56:c0:aa:
                    14:df:8a:2c:45:1c:e0:8e:e9:e3:04:70:72:4d:ab:
                    ca:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:D1:D5:4E:82:BC:A6:E9:2C:00:20:51:41:91:6A:3B:45:DF:A9
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xczR1U6CvKbpLAAgUUGRajtF36k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:35:91:b4:3f:02:a7:b2:e7:5c:a3:ee:08:91:5c:17:5d:
         c2:d2:28:90:7f:18:ea:b5:f3:42:5b:46:d4:11:e3:b8:8a:82:
         c4:b2:18:f0:5d:78:01:0a:e3:7e:21:65:8f:76:01:f7:be:7e:
         a1:c3:26:f3:8f:4b:b8:fa:83:b0:08:7c:bc:b7:c3:bd:91:d2:
         c7:56:e3:e4:ad:06:a9:84:e5:df:e1:8f:ec:27:ab:2b:2a:14:
         5c:97:ab:5b:be:7d:a3:8c:58:e0:20:ff:c2:95:0d:16:80:49:
         02:37:95:83:75:31:78:ca:67:94:c6:27:9e:0a:31:66:9c:9a:
         4b:70:98:f0:10:28:5b:23:a1:c7:2f:ca:6c:e5:ed:02:f2:e9:
         8c:d4:f6:7f:9d:6f:91:a2:69:a6:56:02:64:21:8e:cc:60:a7:
         72:87:47:d0:97:12:4d:97:43:b7:10:d0:cd:83:9f:a5:93:4d:
         11:30:4b:66:8d:4b:a3:6a:82:0b:c5:1e:4c:20:05:22:bf:5c:
         20:4e:44:ac:3a:f8:c1:58:82:d8:58:66:7e:89:cd:ce:b5:42:
         6a:22:71:4d:dd:cd:49:ac:04:c1:51:da:92:1e:9e:51:33:75:
         e9:18:5e:74:14:8a:72:bf:ce:22:0c:5e:a6:1a:2a:b1:23:15:
         93:58:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----