Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fg_B2axUgJ_lTtudmyhzDSdWS80.roa
File:                     fg_B2axUgJ_lTtudmyhzDSdWS80.roa (raw, json)
Hash identifier:          L465ddFCCw7tTPZN6bWiQmNk8tasxrKBGF0dDjsEnT8=
Subject key identifier:   7E:0F:C1:D9:AC:54:80:9F:E5:4E:DB:9D:9B:28:73:0D:27:56:4B:CD
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       018215733F13E025BE0C1750AD57DF336767
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fg_B2axUgJ_lTtudmyhzDSdWS80.roa
Signing time:             Tue 19 Jul 2022 07:54:10 +0000
ROA not before:           Tue 19 Jul 2022 07:54:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59721
IP address blocks:        109.122.208.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:15:73:3f:13:e0:25:be:0c:17:50:ad:57:df:33:67:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Jul 19 07:54:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e0fc1d9ac54809fe54edb9d9b28730d27564bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:1a:4a:59:fa:9e:84:05:00:20:05:d3:88:
                    6d:b6:f7:5c:62:f3:33:4b:39:51:70:95:99:2d:e9:
                    ca:9a:2d:77:aa:3c:a5:93:33:c4:8a:35:09:f8:18:
                    ea:e8:07:dc:06:ca:16:4f:01:db:96:be:9f:a2:2a:
                    f1:fa:ba:16:9a:0b:68:e7:6f:d6:c6:7d:cf:c5:66:
                    e5:f6:4d:65:f2:57:41:3e:6b:8e:43:f9:09:22:f8:
                    fd:58:d1:12:ba:b1:3c:04:66:23:d8:49:19:4d:20:
                    43:3e:df:61:2a:c2:1c:29:ce:76:9e:ad:b8:68:9b:
                    bd:52:fb:a6:d1:77:6d:56:09:65:f1:b2:b3:7e:1c:
                    94:9c:f6:2a:91:f2:d2:63:9e:dd:2a:dc:ba:71:fd:
                    e8:40:88:ca:63:32:38:04:9c:23:5a:d5:ff:c7:fe:
                    f7:6a:ae:0d:9b:aa:25:bf:2a:65:73:1a:86:83:77:
                    f2:29:9c:69:42:2a:1a:ee:9e:3d:f0:47:5a:b3:2b:
                    95:7e:df:d7:b3:34:c8:65:2f:1a:64:cc:d9:64:59:
                    4c:4a:fd:ce:ad:99:ed:8b:d1:6d:63:ca:b1:e1:48:
                    25:8b:5f:89:bd:26:a2:3f:a8:50:94:69:1a:98:dc:
                    ed:4c:b7:8f:94:c4:24:ba:29:8e:a6:07:43:8f:86:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:C1:D9:AC:54:80:9F:E5:4E:DB:9D:9B:28:73:0D:27:56:4B:CD
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/fg_B2axUgJ_lTtudmyhzDSdWS80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:c8:c5:93:ef:58:fb:7f:86:74:1e:fa:44:ee:e4:d1:63:
         db:9c:78:ac:7b:02:15:5a:30:b8:ac:94:1a:a9:2e:b6:9a:3f:
         a8:94:3c:dc:52:bf:49:fb:43:a2:18:9e:95:1a:67:65:e0:51:
         4c:00:e6:23:bd:37:69:ab:01:93:3f:6d:ca:8a:fb:6f:c0:0c:
         ce:be:f9:6c:4c:61:53:0e:ba:00:11:80:fa:95:ef:07:b6:2b:
         38:df:e1:6e:58:2d:70:64:3e:e2:21:eb:60:de:64:bd:ac:68:
         72:d1:9e:48:e4:5b:5a:b5:e3:ef:8e:d2:74:85:89:bf:3b:f7:
         c0:0e:33:1f:89:49:08:3a:45:a5:cb:4a:03:22:91:44:a1:b1:
         cc:79:fb:f1:f9:d6:b6:c2:5b:bd:56:fb:12:29:ff:1d:4a:9b:
         4a:0e:6e:63:ba:25:4f:f0:21:d4:7a:5d:2a:3b:8c:5c:0b:d9:
         f8:ba:28:d7:e3:8a:4e:18:06:df:66:32:c5:85:1d:fb:51:de:
         a7:40:6b:ae:56:db:a1:45:d2:d0:2f:fb:70:bc:79:63:6b:12:
         87:0a:c5:4b:72:66:51:f7:26:d9:72:a6:cf:35:d3:90:26:e2:
         80:69:34:16:bb:a0:9b:f9:92:d8:c0:48:5e:bf:e2:27:bf:c3:
         14:58:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----