Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e20313937373330.roa
File:                     36322e3130362e37352e302f32342d3234203d3e20313937373330.roa (raw, json)
Hash identifier:          8Tf938XlaF1upxi30/VbRxQ1slwRQ2UghIBJOdnMFIY=
Subject key identifier:   93:A6:E9:1C:52:A6:54:4E:A8:FF:D1:0F:51:AB:57:49:97:8B:29:A1
Certificate issuer:       /CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
Certificate serial:       53DA95ECD225AAE63A9090B8016D3B902C335227
Authority key identifier: A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer
Subject info access:      rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e20313937373330.roa
Signing time:             Mon 18 Sep 2023 10:45:58 +0000
ROA not before:           Mon 18 Sep 2023 10:40:58 +0000
ROA not after:            Mon 16 Sep 2024 10:45:58 +0000
asID:                     197730
IP address blocks:        62.106.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:da:95:ec:d2:25:aa:e6:3a:90:90:b8:01:6d:3b:90:2c:33:52:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
        Validity
            Not Before: Sep 18 10:40:58 2023 GMT
            Not After : Sep 16 10:45:58 2024 GMT
        Subject: CN=93A6E91C52A6544EA8FFD10F51AB5749978B29A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:cf:70:91:6b:ee:4d:4c:21:69:ba:86:1b:
                    f5:9d:6f:af:a1:76:63:a1:4a:40:7e:d1:55:40:17:
                    8a:70:f9:f7:27:b7:a5:66:89:77:10:79:89:e3:f3:
                    e0:2d:9f:72:95:c9:a3:ce:fc:68:af:7e:15:9e:a4:
                    ab:de:a5:a8:36:0f:03:e1:41:0b:d9:30:9f:73:af:
                    02:9b:ca:0d:9d:5d:35:da:0b:8c:db:fa:7f:34:33:
                    48:41:57:3a:0e:af:2c:6a:bb:56:3e:19:27:1b:e2:
                    6d:46:e3:33:48:04:a2:bb:81:25:ea:88:6b:4b:ec:
                    7e:26:1e:eb:bb:f1:5f:ce:92:67:31:43:92:51:79:
                    29:b3:46:7e:e2:eb:00:02:0a:33:b5:8f:2c:a5:f4:
                    1c:73:d1:00:12:95:45:0d:8d:cb:c5:fc:0e:97:fa:
                    5c:85:44:a2:8b:c7:89:84:9c:c3:51:d7:eb:07:c4:
                    2f:c8:1e:6c:4d:32:bf:3e:69:29:ce:7f:7e:db:15:
                    30:25:d5:3a:98:17:e8:8d:40:68:dc:4e:8d:a6:de:
                    b6:8a:b9:47:84:fc:e0:42:ce:26:cf:75:1d:d0:42:
                    b5:82:4f:19:29:99:bf:b3:af:72:24:ea:66:f1:5e:
                    b2:3e:9a:47:22:e9:70:bd:fd:3b:14:ca:83:c0:6a:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A6:E9:1C:52:A6:54:4E:A8:FF:D1:0F:51:AB:57:49:97:8B:29:A1
            X509v3 Authority Key Identifier:
                keyid:A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e20313937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:9a:a1:eb:4e:61:19:f9:9b:e0:32:d6:25:d5:42:da:bf:53:
         69:ac:8a:25:9a:ed:7f:69:71:88:08:28:0a:f4:f1:21:b3:e8:
         28:ad:33:89:c9:d6:4f:6e:08:d8:97:c4:d4:88:c9:34:06:65:
         45:6f:fd:69:45:f1:b5:78:7c:5e:31:4c:73:c3:fd:af:d7:61:
         08:b7:43:c4:fe:bd:69:83:71:4e:3c:1b:4a:45:1a:e4:bb:cc:
         88:a4:af:a9:5c:19:a8:8c:5c:b8:e4:30:ce:69:ed:df:c7:f6:
         68:cc:ad:3a:b6:06:43:46:1d:e6:91:a3:1e:96:e1:08:0b:1c:
         5e:e0:33:f4:5a:e3:30:78:04:01:f6:1e:5f:1c:2f:73:24:16:
         30:0c:f8:a7:d0:ad:72:46:06:4d:c0:3a:12:c7:c5:57:cf:75:
         33:70:9e:09:48:68:bc:5c:e3:83:b6:7b:82:54:19:7a:6a:db:
         b9:fe:c9:82:19:41:6b:91:43:c5:93:20:83:5b:8f:a7:48:cf:
         94:73:05:3c:66:2a:28:43:16:7e:fe:4b:45:86:80:a5:2d:32:
         40:19:dc:b8:ac:2f:de:b5:fe:69:4c:e6:3a:e9:d2:7f:8b:bc:
         1e:9d:b5:ca:41:a8:a1:7e:41:af:04:d7:87:30:d2:9e:0a:22:
         78:5c:82:c3
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUU9qV7NIlquY6kJC4AW07kCwzUicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTBkNjhjNzJmMTU2M2FjZTE0ODVkYmI1YTg5NGU1ODA5
OWU5N2FiZTAeFw0yMzA5MTgxMDQwNThaFw0yNDA5MTYxMDQ1NThaMDMxMTAvBgNV
BAMTKDkzQTZFOTFDNTJBNjU0NEVBOEZGRDEwRjUxQUI1NzQ5OTc4QjI5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAo89wkWvuTUwhabqGG/Wdb6+h
dmOhSkB+0VVAF4pw+fcnt6VmiXcQeYnj8+Atn3KVyaPO/GivfhWepKvepag2DwPh
QQvZMJ9zrwKbyg2dXTXaC4zb+n80M0hBVzoOryxqu1Y+GScb4m1G4zNIBKK7gSXq
iGtL7H4mHuu78V/OkmcxQ5JReSmzRn7i6wACCjO1jyyl9Bxz0QASlUUNjcvF/A6X
+lyFRKKLx4mEnMNR1+sHxC/IHmxNMr8+aSnOf37bFTAl1TqYF+iNQGjcTo2m3raK
uUeE/OBCzibPdR3QQrWCTxkpmb+zr3Ik6mbxXrI+mkci6XC9/TsUyoPAah/JAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUk6bpHFKmVE6o/9EPUatXSZeLKaEwHwYDVR0j
BBgwFoAUoNaMcvFWOs4Uhdu1qJTlgJnper4wDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzAvQTBENjhDNzJGMTU2
M0FDRTE0ODVEQkI1QTg5NEU1ODA5OUU5N0FCRS5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL29OYU1jdkZXT3M0VWhkdTFxSlRsZ0pucGVyNC5jZXIwbQYIKwYBBQUH
AQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovLzAuc2IvcmVwby9zYi8wLzM2MzIy
ZTMxMzAzNjJlMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzM3MzMz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAD5qSzANBgkqhkiG9w0BAQsFAAOCAQEA3Jqh605hGfmb4DLW
JdVC2r9TaayKJZrtf2lxiAgoCvTxIbPoKK0zicnWT24I2JfE1IjJNAZlRW/9aUXx
tXh8XjFMc8P9r9dhCLdDxP69aYNxTjwbSkUa5LvMiKSvqVwZqIxcuOQwzmnt38f2
aMytOrYGQ0Yd5pGjHpbhCAscXuAz9FrjMHgEAfYeXxwvcyQWMAz4p9CtckYGTcA6
EsfFV891M3CeCUhovFzjg7Z7glQZemrbuf7JghlBa5FDxZMgg1uPp0jPlHMFPGYq
KEMWfv5LRYaApS0yQBncuKwv3rX+aUzmOunSf4u8Hp21ykGooX5BrwTXhzDSngoi
eFyCww==
-----END CERTIFICATE-----