Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa
File:                     jNSpEb3sMWGK0614uDqFPp9ICuc.roa (raw, json)
Hash identifier:          +pOTYTBjD/GYf5DDUa4O16BWS82Vt9pGmDotR5QEPag=
Subject key identifier:   8C:D4:A9:11:BD:EC:31:61:8A:D3:AD:78:B8:3A:85:3E:9F:48:0A:E7
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       06BCFC5E
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa
Signing time:             Fri 22 Apr 2022 19:58:08 +0000
ROA not before:           Fri 22 Apr 2022 19:58:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59721
IP address blocks:        109.122.220.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113048670 (0x6bcfc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Apr 22 19:58:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cd4a911bdec31618ad3ad78b83a853e9f480ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:be:b9:5d:76:ec:de:1b:a4:69:25:1d:d5:
                    0d:63:92:5d:9a:29:24:7f:52:b1:25:80:9f:e9:f4:
                    ba:ec:36:70:17:e6:3e:68:fb:05:fe:58:a3:c1:79:
                    1f:cf:31:5a:75:47:35:bb:e0:52:41:4b:df:ec:01:
                    5e:60:4e:81:4c:27:6c:bf:e7:58:c6:57:a1:5f:3e:
                    a6:7c:94:f4:4a:02:13:b5:b5:13:c8:19:35:f9:bd:
                    26:1c:c3:61:46:dc:d8:95:a3:3a:9c:01:de:8a:d5:
                    14:4b:c6:10:b6:8c:33:1f:99:47:0f:c0:52:1e:4a:
                    03:46:37:55:62:33:95:29:e8:86:fd:c0:43:88:13:
                    10:2d:9b:d4:7d:6d:9e:8e:75:9e:6a:80:84:9f:23:
                    f9:55:08:25:72:9b:8d:3c:35:39:54:15:27:13:9d:
                    40:37:c7:2e:68:58:bd:15:f8:44:c6:3b:9a:79:39:
                    6e:4b:59:ec:89:66:e6:d0:04:ad:66:c8:cc:4e:10:
                    2d:f6:58:6e:67:2c:b5:d6:a7:23:6b:6a:e2:5c:1b:
                    b2:b1:20:e3:5b:0f:0f:37:f1:9f:0e:78:bf:73:b7:
                    df:7f:c2:eb:d1:73:fb:70:3c:9b:6c:c0:f4:19:d8:
                    4e:ba:8d:45:fb:d0:ad:e7:ab:95:ec:f5:4b:1b:9a:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:A9:11:BD:EC:31:61:8A:D3:AD:78:B8:3A:85:3E:9F:48:0A:E7
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/jNSpEb3sMWGK0614uDqFPp9ICuc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:60:34:11:e5:f3:c3:1a:99:41:e2:96:18:59:3e:ac:2f:
         c6:7a:f0:5c:0f:58:e3:cb:03:10:12:c4:a4:6f:74:db:43:2a:
         b4:b9:13:8a:44:8e:4a:21:ea:8d:3f:ab:38:50:aa:e4:98:e7:
         24:38:46:84:a5:e0:55:46:52:f5:af:f9:d6:78:7e:c6:31:35:
         98:01:a5:22:20:7b:8b:40:48:07:29:d4:f9:e8:7f:eb:64:14:
         91:ae:84:c8:68:88:e7:bc:3e:75:0d:ad:27:40:a1:b5:87:8c:
         f2:6f:fe:e6:72:15:9d:4e:95:14:d6:c2:cf:18:7d:54:a0:7d:
         b2:0d:66:84:91:09:2e:9a:d8:f1:fb:52:f2:f9:40:e4:04:42:
         85:81:65:14:ea:d0:8e:db:9a:6f:e0:3d:cd:60:3b:b9:64:72:
         6e:c3:28:a6:67:79:97:27:a5:da:98:ff:5a:f2:63:29:5e:fb:
         f7:b5:a9:18:10:f4:d8:31:2d:ea:aa:c8:b1:84:7a:69:8f:13:
         d7:2e:22:99:19:d6:2f:80:61:a3:1b:36:ec:0e:10:c7:7a:77:
         bf:d7:6a:d5:8a:21:85:6b:52:ec:bb:37:61:ca:ec:28:d5:aa:
         50:d3:b3:4e:8d:c8:63:c4:c3:5e:f9:11:53:d1:9b:a5:03:ed:
         35:73:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----