Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zdi7WfERogIuWDegmAIN5bA3Gdk.roa
File:                     zdi7WfERogIuWDegmAIN5bA3Gdk.roa (raw, json)
Hash identifier:          L019X5T5/YSkmDLR6bt6Do+rF0sEk4oRmnLS11hIBNQ=
Subject key identifier:   CD:D8:BB:59:F1:11:A2:02:2E:58:37:A0:98:02:0D:E5:B0:37:19:D9
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       06631D2B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zdi7WfERogIuWDegmAIN5bA3Gdk.roa
Signing time:             Sat 30 Apr 2022 15:23:22 +0000
ROA not before:           Sat 30 Apr 2022 15:23:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        151.216.4.0/24 maxlen: 24
                          2001:7fc:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107158827 (0x6631d2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Apr 30 15:23:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cdd8bb59f111a2022e5837a098020de5b03719d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e9:d5:6a:b6:24:34:34:f8:d9:7b:da:29:21:
                    4e:c2:3c:e2:fe:69:62:6d:8f:e2:a9:c6:ac:51:dd:
                    86:05:36:b3:4e:13:5c:ba:ce:14:80:86:15:90:c9:
                    c0:f7:cd:1a:d7:1a:d3:a9:80:f1:7d:c1:13:87:8f:
                    2d:3a:40:28:9d:09:52:23:f3:3b:39:93:e7:a3:a6:
                    2b:d4:45:95:63:7c:98:ca:17:38:ef:be:75:c1:bb:
                    dc:02:4e:69:ee:31:3c:26:e7:cb:a8:e0:38:7e:95:
                    d7:07:94:6e:ec:f9:36:c9:ff:84:05:c8:e6:81:0e:
                    f7:a4:55:46:38:c4:16:f6:e9:dc:38:77:cd:81:97:
                    b3:7a:13:20:09:cd:22:0b:ca:7c:9d:e0:b2:cf:bd:
                    d8:d4:d0:1d:48:9c:6c:96:b1:97:97:e4:1a:4f:82:
                    01:1a:7d:09:ce:e1:d0:ec:e4:b4:ee:41:0e:d5:45:
                    f9:41:6d:67:2d:49:53:a8:90:cf:29:5b:85:da:9b:
                    8d:aa:5d:a2:86:08:16:9d:9e:75:03:d3:90:a3:b4:
                    b2:83:26:ca:fb:60:16:64:33:6c:ab:01:c8:1e:b3:
                    9d:a0:be:8b:af:9a:b0:c3:e7:6b:66:1b:cf:ee:31:
                    de:c4:9e:5b:c2:6d:34:09:64:79:fa:43:cb:b3:18:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:BB:59:F1:11:A2:02:2E:58:37:A0:98:02:0D:E5:B0:37:19:D9
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zdi7WfERogIuWDegmAIN5bA3Gdk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.216.4.0/24
                IPv6:
                  2001:7fc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:68:f3:8c:ec:c0:0c:90:97:47:f5:c1:7e:40:ae:b4:05:
         28:74:9e:3e:6e:30:3d:1b:cf:2d:7a:50:0c:a1:f4:98:1c:e4:
         2a:73:94:0d:90:ec:dc:87:b8:ce:46:a0:2a:f9:93:48:ec:09:
         28:af:93:45:cb:9f:c6:33:04:a4:5b:b6:ff:36:d4:14:50:7f:
         9f:0b:15:44:22:ac:2c:9e:00:da:7c:98:33:88:b9:bb:26:0b:
         0f:74:36:35:89:c2:d1:b6:fe:15:16:d9:85:bf:91:87:85:b8:
         85:ed:47:df:6e:1c:a3:f4:88:b8:31:6f:29:4e:e8:80:f0:0c:
         70:b9:8c:ae:d0:4c:52:03:28:27:f1:dd:7f:6f:16:f5:08:b1:
         9d:1f:50:2f:c6:b6:e2:bd:9b:c6:2a:92:d0:fa:ba:f5:f5:76:
         8a:f7:28:5e:2d:4f:74:6c:af:b9:5b:13:9a:bf:40:77:2f:68:
         5e:7c:40:af:60:02:58:d8:aa:75:f0:67:8d:47:97:51:f4:4f:
         41:95:74:1b:1b:7a:e0:23:69:99:45:93:bb:3f:87:c9:08:98:
         93:20:83:4f:74:43:b5:52:6d:ad:f4:55:f1:ea:e2:c7:74:75:
         e8:59:0e:51:6e:4d:1a:fb:e7:0c:12:f3:3f:8d:bf:18:fe:bc:
         73:e8:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----