Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/q493n-0r92iPMiK7UBPG3bJQa9I.roa
File:                     q493n-0r92iPMiK7UBPG3bJQa9I.roa (raw, json)
Hash identifier:          NhuzaPJbRwpTBbWJaSzoPb7Br6abQFpzjEmIe22DKbU=
Subject key identifier:   AB:8F:77:9F:ED:2B:F7:68:8F:32:22:BB:50:13:C6:DD:B2:50:6B:D2
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       069BB849
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/q493n-0r92iPMiK7UBPG3bJQa9I.roa
Signing time:             Fri 08 Apr 2022 07:47:02 +0000
ROA not before:           Fri 08 Apr 2022 07:47:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34078
IP address blocks:        109.122.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110868553 (0x69bb849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Apr  8 07:47:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab8f779fed2bf7688f3222bb5013c6ddb2506bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:45:0e:54:cb:4d:ed:59:7d:1a:3d:2d:1a:
                    ec:f1:33:cc:db:4a:40:7c:34:98:47:58:2a:79:7b:
                    22:73:df:a1:9f:42:03:fc:44:18:f9:f1:c6:f6:9b:
                    d2:b3:5c:bb:64:7e:81:62:65:6a:29:91:50:d3:9d:
                    fb:47:94:1c:28:25:2a:20:c1:21:c2:fd:cd:83:4c:
                    85:19:b4:d0:2f:60:04:87:08:42:9a:e7:f2:dd:d2:
                    3d:cc:4d:71:ff:8e:f4:c8:d9:04:a0:0d:e9:4d:6a:
                    69:a4:fd:ae:76:84:a5:d3:4f:ed:9f:65:83:37:da:
                    ca:5e:97:92:ba:9f:f4:38:5e:a4:af:f4:b9:be:e4:
                    0f:25:ad:29:ce:e9:fa:f2:bd:c1:66:4f:ea:8f:4a:
                    98:74:c1:fc:5a:4c:08:5e:c7:69:d5:43:9e:f6:da:
                    b3:26:fe:e4:8e:91:47:60:a3:e1:96:01:59:6a:11:
                    f1:83:b7:92:d3:47:96:37:12:3a:2a:fb:4c:39:84:
                    63:e0:03:b5:89:c3:17:50:0b:ec:88:77:f9:5c:e2:
                    45:53:3c:34:da:78:65:04:56:aa:51:09:29:f2:f2:
                    79:db:76:2c:f5:b5:49:17:45:b0:d9:a4:f0:1f:fa:
                    15:71:05:28:35:88:6d:b4:e4:3c:27:d3:92:6a:77:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:77:9F:ED:2B:F7:68:8F:32:22:BB:50:13:C6:DD:B2:50:6B:D2
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/q493n-0r92iPMiK7UBPG3bJQa9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:f8:23:66:ff:85:d1:dc:b2:61:23:dc:41:2a:f7:07:fa:d7:
         3b:3b:e1:c9:89:3d:78:6a:7b:6d:1b:92:fb:35:97:f3:e5:54:
         1d:87:1a:ee:56:3b:c6:d2:cb:f1:9c:00:18:07:59:0f:3e:df:
         6d:17:4b:81:81:23:99:e0:3a:22:9c:ea:17:ee:3b:32:3a:65:
         7c:ef:6a:9a:2b:47:91:10:8c:ff:c8:f0:87:e2:21:c6:ef:7c:
         1d:11:94:7d:f8:9c:97:f7:84:3a:a7:e2:10:b6:3b:7f:06:97:
         b2:1f:55:d5:a1:c1:de:47:1c:12:cc:b7:05:ae:a2:c8:d1:e2:
         2a:7f:f0:18:db:81:11:22:be:4e:2f:56:bf:9b:36:61:7d:cd:
         72:a6:e7:76:26:ff:07:10:2e:6d:86:cd:23:d1:57:96:ba:b7:
         22:27:c9:68:72:ed:6f:6b:f5:ad:e6:1c:4c:f6:58:7f:e3:9a:
         ba:bd:10:75:67:e7:8f:31:51:ac:10:d2:ad:43:36:ed:48:a8:
         ef:55:a4:b8:a5:cf:4b:9a:8b:60:1d:5d:0e:a8:bc:8e:6d:85:
         35:94:7a:00:53:d5:c1:72:f8:48:a4:7b:68:5c:e0:09:c7:08:
         21:aa:5e:a8:d8:bf:59:2e:3c:47:06:40:ec:d8:9f:43:3d:4b:
         eb:0f:51:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----