Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa
File:                     xhN1c-aMkviSplwM5FBkANzfZOs.roa (raw, json)
Hash identifier:          FWqWQ3UsfN0kiNDqedir0L0Y5Va5p56MteFqRu1xDuA=
Subject key identifier:   C6:13:75:73:E6:8C:92:F8:92:A6:5C:0C:E4:50:64:00:DC:DF:64:EB
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0996C270
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa
Signing time:             Tue 05 Jul 2022 00:29:25 +0000
ROA not before:           Tue 05 Jul 2022 00:29:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55722
IP address blocks:        151.216.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160875120 (0x996c270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jul  5 00:29:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c6137573e68c92f892a65c0ce4506400dcdf64eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:c3:eb:a1:82:6a:63:93:84:cb:60:67:e3:
                    b3:33:72:8f:07:77:9c:cb:14:b2:44:2d:7a:2f:c7:
                    c0:80:8d:38:fc:a7:18:5c:13:fa:f4:73:ac:7c:88:
                    81:f9:e2:84:2f:1d:6e:d1:90:10:1c:e5:4f:d8:95:
                    68:69:dc:b7:39:f9:3a:a0:61:3f:ff:27:96:71:1a:
                    c0:96:41:86:25:d5:71:73:2b:29:2a:33:f9:59:bc:
                    66:29:d2:77:dc:43:bd:66:77:75:b9:46:34:5e:3d:
                    99:3e:95:5b:0d:87:78:6b:d9:62:f1:8d:44:70:28:
                    7b:0f:f8:2a:bd:0b:db:29:42:4c:4c:c2:73:3a:bf:
                    5f:c6:42:e4:13:ef:2e:0c:e3:5f:b3:13:01:b0:40:
                    02:dd:d3:bd:9d:d2:cc:86:80:b7:c0:a6:a5:d6:69:
                    4c:40:a6:8a:be:7d:ad:24:c9:a3:b8:40:ad:c6:7d:
                    aa:bc:2b:23:b8:5a:a4:07:da:2e:1b:1e:74:b0:5e:
                    8d:fb:29:d3:f3:94:e8:7a:92:18:88:25:36:c5:ef:
                    9f:c0:97:3b:3c:5a:50:46:4c:80:47:1b:a5:e1:a1:
                    9b:4b:3b:e4:43:53:41:20:8e:e5:e5:01:57:17:62:
                    23:5c:55:e7:c8:9c:1e:17:42:17:41:29:a2:2c:4a:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:13:75:73:E6:8C:92:F8:92:A6:5C:0C:E4:50:64:00:DC:DF:64:EB
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/xhN1c-aMkviSplwM5FBkANzfZOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:ce:3f:50:db:7e:31:c2:9a:1f:71:0a:e1:77:30:0a:61:
         a2:c7:d8:6c:96:d4:29:c7:41:ff:09:72:b1:cb:10:ab:cf:b8:
         d0:ed:0a:cb:dd:af:ca:d3:d9:6f:67:c7:a7:46:62:8c:51:3b:
         f1:22:1c:30:7e:c6:c9:32:a6:a7:55:15:c8:76:98:24:ac:34:
         4e:5c:58:30:d0:97:20:a1:68:a2:d7:d3:e2:00:76:b3:af:f9:
         92:0a:7d:3f:83:11:3f:97:2d:26:88:98:c4:2f:02:7f:92:62:
         14:c6:c8:48:b6:d3:fa:d1:7e:35:38:a4:45:27:38:20:35:f3:
         2c:9b:2b:c1:29:2d:dc:df:05:2b:15:aa:26:e5:f5:81:0d:b9:
         7e:37:1c:42:e4:3c:93:64:58:32:10:ce:74:71:10:99:42:e1:
         8a:94:87:44:2f:7f:ab:bb:72:79:b0:52:85:33:47:7d:0c:67:
         8c:5b:86:30:09:43:be:30:44:b3:44:96:02:02:33:b5:52:1b:
         ef:e3:a7:08:55:66:cb:1b:d3:e2:5e:22:61:1f:31:83:d1:f3:
         ef:12:0e:65:1a:3d:e8:1a:42:f5:7c:b8:6a:e6:86:0d:5e:c7:
         8f:49:cf:41:fb:5d:9e:32:d9:e5:be:16:f2:46:17:96:9a:28:
         b9:3c:c2:b9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZbCcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDcw
NTAwMjkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzYxMzc1NzNlNjhj
OTJmODkyYTY1YzBjZTQ1MDY0MDBkY2RmNjRlYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIdTw+uhgmpjk4TLYGfjszNyjwd3nMsUskQtei/HwICNOPyn
GFwT+vRzrHyIgfnihC8dbtGQEBzlT9iVaGnctzn5OqBhP/8nlnEawJZBhiXVcXMr
KSoz+Vm8ZinSd9xDvWZ3dblGNF49mT6VWw2HeGvZYvGNRHAoew/4Kr0L2ylCTEzC
czq/X8ZC5BPvLgzjX7MTAbBAAt3TvZ3SzIaAt8CmpdZpTECmir59rSTJo7hArcZ9
qrwrI7hapAfaLhsedLBejfsp0/OU6HqSGIglNsXvn8CXOzxaUEZMgEcbpeGhm0s7
5ENTQSCO5eUBVxdiI1xV58icHhdCF0EpoixKtlcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTGE3Vz5oyS+JKmXAzkUGQA3N9k6zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3hoTjFjLWFNa3ZpU3Bsd001RkJrQU56ZlpPcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEApI/OP1DbfjHCmh9xCuF3MAphosfYbJbUKcdB/wlyscsQq8+40O0Ky92vytPZ
b2fHp0ZijFE78SIcMH7GyTKmp1UVyHaYJKw0TlxYMNCXIKFootfT4gB2s6/5kgp9
P4MRP5ctJoiYxC8Cf5JiFMbISLbT+tF+NTikRSc4IDXzLJsrwSkt3N8FKxWqJuX1
gQ25fjccQuQ8k2RYMhDOdHEQmULhipSHRC9/q7tyebBShTNHfQxnjFuGMAlDvjBE
s0SWAgIztVIb7+OnCFVmyxvT4l4iYR8xg9Hz7xIOZRo96BpC9Xy4auaGDV7Hj0nP
QftdnjLZ5b4W8kYXlpoouTzCuQ==
-----END CERTIFICATE-----