Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yFEc0YRYmNJUIFDy9Ix6spK9F_E.roa
File:                     yFEc0YRYmNJUIFDy9Ix6spK9F_E.roa (raw, json)
Hash identifier:          xPjVc6LTPUb5yeI2pusH2Epx5TG56bCIuHXUOHELNLs=
Subject key identifier:   C8:51:1C:D1:84:58:98:D2:54:20:50:F2:F4:8C:7A:B2:92:BD:17:F1
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       056E42C4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yFEc0YRYmNJUIFDy9Ix6spK9F_E.roa
Signing time:             Mon 28 Mar 2022 16:54:19 +0000
ROA not before:           Mon 28 Mar 2022 16:54:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91112132 (0x56e42c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Mar 28 16:54:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c8511cd1845898d2542050f2f48c7ab292bd17f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:e2:7a:d4:c2:95:7e:6f:70:79:9b:49:b1:
                    2f:4e:e1:42:19:1e:f9:e8:fc:79:3c:ad:c4:0a:5e:
                    d8:8d:2b:3b:bc:04:f6:45:46:08:6e:c9:55:4f:6f:
                    42:57:42:4c:53:d8:40:4f:f0:3b:f1:e6:90:a7:74:
                    5f:d4:45:09:7e:c9:e8:af:dc:b9:79:ed:28:f2:2e:
                    11:e0:7b:28:51:2c:0a:d8:74:36:11:19:e5:e6:7a:
                    6d:73:c0:68:8a:18:a9:3d:3b:10:a0:74:28:84:f2:
                    2e:35:e4:77:17:4b:6c:0f:1e:42:8c:28:8e:52:d7:
                    44:ef:5d:01:92:38:28:80:99:6b:3a:23:f0:5d:62:
                    40:51:fd:ef:29:8e:a2:c8:7c:ff:8e:75:86:56:ff:
                    b8:a9:1f:31:b9:08:a5:11:33:d5:68:b4:44:d9:a4:
                    84:a7:e6:81:6e:11:0a:ea:74:f1:c5:41:d0:1f:9f:
                    e4:33:8e:ee:8a:6c:84:7f:24:cc:3e:78:31:3c:aa:
                    dc:bd:5b:88:4b:72:e1:81:57:65:b4:9a:5b:8f:4c:
                    04:ab:44:16:97:a0:cb:b0:49:00:6a:6d:3c:af:48:
                    2a:03:12:be:31:d8:ed:c9:9e:82:f9:d8:e3:aa:be:
                    db:46:0a:3d:66:2e:35:f9:de:2d:69:aa:d4:7c:4c:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:1C:D1:84:58:98:D2:54:20:50:F2:F4:8C:7A:B2:92:BD:17:F1
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yFEc0YRYmNJUIFDy9Ix6spK9F_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:53:29:2f:06:ae:b2:f5:a5:1d:7b:ab:bd:f7:95:8d:67:9c:
         04:c3:1b:fd:fd:9e:c4:6e:bf:c3:37:f2:2f:aa:52:af:64:50:
         44:d3:d7:0f:32:f8:dc:9f:02:26:4b:9b:4b:06:bc:bc:27:66:
         90:72:25:41:7a:68:d4:5a:26:08:be:ca:54:a0:4d:e2:8c:df:
         16:67:f6:82:ee:9c:c5:8a:4e:31:8d:26:91:cb:3e:ab:62:a0:
         ec:63:9b:8f:fb:21:c6:4a:32:38:53:27:ab:58:d4:20:0e:e7:
         3c:b2:4d:ec:b2:7b:59:8d:2c:b0:01:5b:4e:c2:2e:9c:ff:d7:
         19:bf:17:c8:a2:24:94:8f:20:d3:a8:2c:32:5c:98:dc:de:73:
         ed:7e:c8:ea:f4:6d:cd:33:e3:0f:f7:18:e6:bc:08:87:f7:61:
         a2:54:69:97:10:ff:8e:cf:fd:05:2a:6a:16:ed:7c:41:66:64:
         b5:c1:f3:17:67:f2:d4:4a:14:f7:ea:d9:3d:64:eb:07:26:7e:
         f1:18:7a:05:10:23:70:b9:3b:ae:12:a3:d1:1b:f7:28:25:1f:
         25:bc:c4:de:c6:2f:c3:59:35:da:3b:42:42:ed:d7:c4:26:a0:
         64:5d:0f:a9:55:cc:c0:2e:84:d0:7a:80:c7:70:8f:21:93:c5:
         20:68:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----