Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vrXBL2njj2oQ_7Hfe2bOLSkL6fM.roa
File:                     vrXBL2njj2oQ_7Hfe2bOLSkL6fM.roa (raw, json)
Hash identifier:          7/1pb0H6yja/1ZeoPsL5IFD5xUph8zI1dVFaluGcyXU=
Subject key identifier:   BE:B5:C1:2F:69:E3:8F:6A:10:FF:B1:DF:7B:66:CE:2D:29:0B:E9:F3
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       05B8FC9F
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vrXBL2njj2oQ_7Hfe2bOLSkL6fM.roa
Signing time:             Sat 01 Jan 2022 02:57:39 +0000
ROA not before:           Sat 01 Jan 2022 02:57:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201194
IP address blocks:        109.122.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96009375 (0x5b8fc9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Jan  1 02:57:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=beb5c12f69e38f6a10ffb1df7b66ce2d290be9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:2e:3d:01:58:6e:e8:76:ef:f2:18:a9:cf:
                    17:bc:d9:c6:75:98:c9:26:53:2c:16:d5:00:b6:0d:
                    46:37:0f:b7:8a:ab:86:a0:40:7c:2c:b1:81:ac:72:
                    f4:c0:e4:a8:f2:d8:44:b3:29:ca:43:0e:71:45:e8:
                    e2:ec:2a:b2:fa:77:cc:89:82:92:21:57:8d:6c:cc:
                    1c:2f:d6:51:10:39:18:53:6b:b9:7d:bc:f6:ba:3d:
                    00:dd:1c:9a:d7:a1:3b:96:44:81:7c:d1:06:14:18:
                    7c:72:7f:fe:1f:b3:0d:77:59:14:e6:3e:0b:f4:37:
                    f3:7a:39:64:36:7e:c3:56:63:92:10:72:62:d0:88:
                    0f:cd:ba:ab:50:0b:f3:1d:5b:7e:74:a7:37:f3:c4:
                    6b:36:11:b6:b5:5b:45:4f:2b:dd:a9:8d:ec:43:92:
                    36:89:99:67:0b:16:bb:84:95:e5:15:17:15:8b:47:
                    de:21:d7:43:79:31:81:48:c8:e0:60:19:f5:a7:97:
                    c8:c0:30:e6:32:5b:35:b3:a4:99:30:6e:38:8f:f4:
                    99:69:54:ec:bc:96:77:57:28:93:1d:08:76:0c:27:
                    d1:92:ef:c0:03:16:17:18:42:89:8f:d4:dd:6e:28:
                    56:76:49:11:72:ea:ec:8f:8b:c2:c3:8e:4a:d7:e6:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B5:C1:2F:69:E3:8F:6A:10:FF:B1:DF:7B:66:CE:2D:29:0B:E9:F3
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vrXBL2njj2oQ_7Hfe2bOLSkL6fM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:be:2d:16:ac:67:03:c4:48:83:c1:07:e0:74:e0:36:76:4f:
         41:7d:c1:32:5c:aa:14:b5:29:4f:da:c4:86:b4:85:21:1c:36:
         74:2c:d2:9c:78:a7:42:e8:59:c3:cf:cb:33:26:5f:39:31:13:
         ff:42:52:c9:d1:8a:1a:5b:a3:5a:14:84:32:a8:87:3b:5c:f4:
         ba:a2:09:99:5a:7f:2b:46:75:e5:28:1a:3d:a8:aa:bf:ec:6e:
         24:b6:19:d1:af:30:8b:47:87:e1:d9:4a:3a:84:76:03:b9:8a:
         e5:ae:68:a8:a3:d3:5d:e0:ad:5b:67:97:cf:94:36:3d:54:17:
         1c:f1:e2:a5:de:ca:f7:ee:16:97:2f:27:d3:b5:88:22:58:a5:
         d2:5b:23:4e:47:b9:68:4d:b3:1c:e8:eb:ee:39:55:26:45:dc:
         1a:b0:f0:a2:5f:68:2e:9e:df:79:f0:ad:f5:d8:4d:7e:42:aa:
         77:c8:e4:89:36:a1:a7:ac:84:c5:ad:61:b3:eb:75:11:62:23:
         fd:89:62:f3:16:94:74:39:e6:48:53:0b:75:aa:d7:f1:65:0c:
         1a:e1:ba:6c:e5:8a:5f:a1:a3:79:16:09:2b:13:65:30:60:b4:
         da:e2:98:d6:5d:e8:d7:e3:b2:9b:c3:1c:8d:d2:9d:fb:c7:74:
         53:9d:ba:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBbj8nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MGJhNWI3NDRlOGRmNTAzZDk0ZjQxZmIyOTAyNDI4OWM2ZmE1ZTViMB4XDTIyMDEw
MTAyNTczOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmViNWMxMmY2OWUz
OGY2YTEwZmZiMWRmN2I2NmNlMmQyOTBiZTlmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANL3Lj0BWG7odu/yGKnPF7zZxnWYySZTLBbVALYNRjcPt4qr
hqBAfCyxgaxy9MDkqPLYRLMpykMOcUXo4uwqsvp3zImCkiFXjWzMHC/WURA5GFNr
uX289ro9AN0cmtehO5ZEgXzRBhQYfHJ//h+zDXdZFOY+C/Q383o5ZDZ+w1ZjkhBy
YtCID826q1AL8x1bfnSnN/PEazYRtrVbRU8r3amN7EOSNomZZwsWu4SV5RUXFYtH
3iHXQ3kxgUjI4GAZ9aeXyMAw5jJbNbOkmTBuOI/0mWlU7LyWd1cokx0Idgwn0ZLv
wAMWFxhCiY/U3W4oVnZJEXLq7I+LwsOOStfmGcMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+tcEvaeOPahD/sd97Zs4tKQvp8zAfBgNVHSMEGDAWgBRQult0To31A9lP
QfspAkKJxvpeWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VMcGJkRTZOOVFQWlQwSDdLUUpDaWNiNlhscy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvN2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8x
L3ZyWEJMMm5qajJvUV83SGZlMmJPTFNrTDZmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
N2FmZjY4LWJhZTYtNDk4YS05ZjU4LWY1NTljZGE4ZDQ5Zi8xL1VMcGJkRTZOOVFQ
WlQwSDdLUUpDaWNiNlhscy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG16wjANBgkqhkiG9w0BAQsFAAOC
AQEAkb4tFqxnA8RIg8EH4HTgNnZPQX3BMlyqFLUpT9rEhrSFIRw2dCzSnHinQuhZ
w8/LMyZfOTET/0JSydGKGlujWhSEMqiHO1z0uqIJmVp/K0Z15SgaPaiqv+xuJLYZ
0a8wi0eH4dlKOoR2A7mK5a5oqKPTXeCtW2eXz5Q2PVQXHPHipd7K9+4Wly8n07WI
Ilil0lsjTke5aE2zHOjr7jlVJkXcGrDwol9oLp7fefCt9dhNfkKqd8jkiTahp6yE
xa1hs+t1EWIj/Yli8xaUdDnmSFMLdarX8WUMGuG6bOWKX6GjeRYJKxNlMGC02uKY
1l3o1+Oym8McjdKd+8d0U526+A==
-----END CERTIFICATE-----