Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/PMBUA7wTgqpf7vI4e8NSEVVA8W4.roa
File:                     PMBUA7wTgqpf7vI4e8NSEVVA8W4.roa (raw, json)
Hash identifier:          Tjgv2C/PWLH1wyQbWziXtTlijbnY51jbeaIx9Ac1bW0=
Subject key identifier:   3C:C0:54:03:BC:13:82:AA:5F:EE:F2:38:7B:C3:52:11:55:40:F1:6E
Certificate issuer:       /CN=b14c73d37f47d87711b6c39c450d21356afc9a57
Certificate serial:       056C6D7A
Authority key identifier: B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/PMBUA7wTgqpf7vI4e8NSEVVA8W4.roa
Signing time:             Sat 01 Jan 2022 07:03:23 +0000
ROA not before:           Sat 01 Jan 2022 07:03:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9063
IP address blocks:        185.6.120.0/22 maxlen: 22
                          2a03:1440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90991994 (0x56c6d7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14c73d37f47d87711b6c39c450d21356afc9a57
        Validity
            Not Before: Jan  1 07:03:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3cc05403bc1382aa5feef2387bc352115540f16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:66:b1:65:7d:23:48:78:4e:f3:10:6e:d3:
                    b3:fe:5c:3a:3f:1b:6d:9c:53:ee:0b:36:cd:c7:cd:
                    0e:0c:38:4e:c6:f5:81:22:73:18:8d:24:79:61:77:
                    17:cd:e1:35:f0:c7:a0:f8:33:4c:f8:68:3d:2c:98:
                    17:0a:5b:a0:d6:18:4e:c5:5d:df:f5:4a:38:01:49:
                    b3:be:8d:fd:ec:f3:cd:81:e4:71:8e:2d:0c:3b:9b:
                    c0:2c:04:55:06:56:52:36:4f:d3:6f:49:c6:43:8c:
                    a9:d0:37:70:df:dc:57:58:ca:43:42:b4:88:de:6c:
                    70:01:75:2a:c0:07:97:82:0c:90:97:b2:23:d8:a6:
                    0a:70:3a:e2:dd:7b:b3:4f:3f:a9:60:ed:9c:32:82:
                    86:02:17:f7:2b:d9:1f:31:fc:fa:10:a8:79:6a:86:
                    5e:e8:f8:ee:05:13:05:cd:23:8e:3d:38:4e:99:e2:
                    ec:78:74:b7:e0:bc:3d:4e:7b:68:c8:6f:1b:54:86:
                    56:15:28:2c:f0:0c:cc:5c:64:0c:39:46:9d:ef:c3:
                    74:e9:e5:2e:e3:cb:8e:fa:7a:ed:34:71:a3:04:8e:
                    50:2d:01:79:e8:dc:4a:7e:1b:c2:d2:6c:1e:91:7a:
                    e4:f4:70:e5:bd:27:dd:db:59:fb:7b:f6:aa:c7:c5:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C0:54:03:BC:13:82:AA:5F:EE:F2:38:7B:C3:52:11:55:40:F1:6E
            X509v3 Authority Key Identifier:
                keyid:B1:4C:73:D3:7F:47:D8:77:11:B6:C3:9C:45:0D:21:35:6A:FC:9A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUxz039H2HcRtsOcRQ0hNWr8mlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/PMBUA7wTgqpf7vI4e8NSEVVA8W4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d55c8-55aa-471f-a3ec-27c84d56b008/1/sUxz039H2HcRtsOcRQ0hNWr8mlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.120.0/22
                IPv6:
                  2a03:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:bf:2d:a3:28:83:59:60:09:47:6d:ab:1f:15:a5:b4:8d:22:
         19:74:33:61:2d:49:1a:63:c4:c6:cd:e7:00:b9:00:0e:7b:09:
         85:ae:c4:5a:7a:95:df:c9:ae:38:0b:16:08:62:48:ef:99:7a:
         3c:0b:76:af:9b:a3:92:1d:f5:1e:75:f0:5f:b8:18:93:9a:d7:
         1b:12:cf:d6:38:34:f2:80:5c:23:13:95:96:80:a3:eb:e7:0c:
         21:26:30:21:d1:e7:e2:4d:89:5c:15:3b:5d:43:f3:be:a8:d0:
         03:d9:cd:78:d8:fc:71:38:29:7f:26:b0:c6:14:f0:a9:31:55:
         5d:ad:89:78:6f:b9:78:36:8f:72:59:a4:15:db:f5:e7:45:60:
         c0:b7:71:bb:35:9b:76:53:c8:6e:7a:8a:96:95:fd:b1:af:4c:
         d0:9f:6f:f5:96:93:ad:16:08:4d:09:9d:c3:a2:e4:1a:fa:66:
         9f:8e:24:99:26:6a:dd:d5:7a:0f:dd:19:c5:d0:4b:e8:47:92:
         6a:49:5d:a3:1c:9d:a9:9e:28:73:18:c9:1c:2c:8b:b2:a9:70:
         f1:1d:94:7a:37:cd:9b:71:55:d7:33:b4:36:85:10:c5:4f:0f:
         0b:dd:67:2a:a6:21:cb:fd:5d:01:ad:40:93:1c:15:7e:c3:03:
         3e:cb:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----