Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6_D2OQRG4BCwSbozy997aAiN9B0.roa
File:                     6_D2OQRG4BCwSbozy997aAiN9B0.roa (raw, json)
Hash identifier:          QQY9zZrjjcrWwtAS8+5BpJ6K8g9eRaCtYfKbmzPVjcE=
Subject key identifier:   EB:F0:F6:39:04:46:E0:10:B0:49:BA:33:CB:DF:7B:68:08:8D:F4:1D
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       05B652E2
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6_D2OQRG4BCwSbozy997aAiN9B0.roa
Signing time:             Sat 01 Jan 2022 02:57:37 +0000
ROA not before:           Sat 01 Jan 2022 02:57:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34078
IP address blocks:        109.122.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95834850 (0x5b652e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Jan  1 02:57:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebf0f6390446e010b049ba33cbdf7b68088df41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:02:27:cb:38:98:58:5a:68:86:81:87:a8:
                    82:11:c9:21:d0:d1:1e:df:02:f3:eb:03:88:22:ed:
                    f0:35:fe:2e:99:05:50:24:b8:22:50:34:14:01:f7:
                    50:47:ee:00:f5:c9:82:8b:06:09:5a:ab:38:97:53:
                    fb:94:2b:f3:99:35:e1:23:b6:d0:1b:c7:4a:13:8c:
                    a1:03:ba:84:fb:90:de:22:2e:26:ea:8c:8e:45:0e:
                    53:fb:e8:0c:09:ef:61:4d:c0:3f:64:1d:b5:f4:87:
                    0f:c9:b9:91:e8:7c:01:66:40:43:87:3e:6e:70:a0:
                    b0:39:67:4b:c5:1f:bf:09:98:09:8f:6a:a3:09:ef:
                    f5:cd:42:88:c6:0b:5f:a8:ec:da:53:a8:68:3d:94:
                    b5:d6:db:75:0e:aa:fb:c3:26:7c:ad:92:de:15:e7:
                    3b:f0:2c:25:6f:50:03:53:f9:d6:6e:f6:a6:39:e0:
                    bf:b3:45:ba:8c:07:f6:cc:46:0f:e4:13:a7:d6:89:
                    dc:f5:0c:fe:c2:e0:97:a2:7a:f4:f8:eb:78:1a:b1:
                    6b:8f:69:6d:a6:8f:4f:4a:fa:22:b0:f8:28:4e:89:
                    af:9c:ee:c1:18:a7:97:55:44:d3:5e:51:35:f2:be:
                    d9:10:29:50:21:f5:05:55:03:54:cb:3c:4e:1c:19:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:F6:39:04:46:E0:10:B0:49:BA:33:CB:DF:7B:68:08:8D:F4:1D
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/6_D2OQRG4BCwSbozy997aAiN9B0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:61:f6:50:a5:59:c9:0f:97:2e:a2:aa:d3:2a:91:57:f5:bc:
         f8:2d:ec:6e:74:94:94:94:96:45:45:04:c6:92:c9:2f:af:24:
         f4:17:ff:4c:ec:c7:33:49:71:43:4f:f5:4f:2f:00:5e:71:69:
         df:68:e6:6a:23:22:d0:64:14:fe:1e:f9:91:49:5d:2f:40:f6:
         19:7d:d6:9e:51:35:be:c4:ea:0f:e6:4c:da:fe:63:b5:46:6f:
         5b:37:2f:97:96:99:80:b9:10:f4:f5:a6:6d:b1:00:a8:c4:31:
         66:c3:e5:f2:92:85:03:c6:45:5c:35:35:96:08:ce:73:34:b7:
         31:21:4b:fe:35:f4:91:b4:ee:4b:4e:6d:be:0f:31:22:5b:2b:
         ee:58:00:be:04:57:c2:24:f6:10:c3:db:d9:3f:e7:cc:d4:d9:
         ce:88:54:9b:80:86:e2:42:c0:eb:4b:f2:8f:53:9c:86:24:a1:
         9b:0f:bd:18:93:db:a4:17:3a:b6:0f:72:bd:a5:64:cf:bf:87:
         ba:7e:76:6f:a4:89:85:cb:7c:f3:0d:00:51:3b:b2:d6:29:8a:
         17:9b:7e:b1:f6:01:07:d1:ee:d5:f0:01:02:e4:e6:f2:e5:cd:
         f0:ac:bc:0f:f1:a5:47:aa:d5:e0:87:9f:33:19:59:c7:fe:bc:
         d1:9b:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----