Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038313030.roa
File:                     36322e3130362e37352e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          896GcpzkvS41mEZ2Px5LfRTVzYa/nT6geb5x5GA1h4s=
Subject key identifier:   59:C3:D6:51:09:94:E7:30:2E:2B:A0:7A:92:63:8D:CB:66:B3:8C:72
Certificate issuer:       /CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
Certificate serial:       74C3316D4D46E727DB788B97B28F46B21BDE324A
Authority key identifier: A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer
Subject info access:      rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:39 +0000
ROA not before:           Fri 21 Oct 2022 09:53:39 +0000
ROA not after:            Fri 20 Oct 2023 09:58:39 +0000
asID:                     8100
IP address blocks:        62.106.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c3:31:6d:4d:46:e7:27:db:78:8b:97:b2:8f:46:b2:1b:de:32:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
        Validity
            Not Before: Oct 21 09:53:39 2022 GMT
            Not After : Oct 20 09:58:39 2023 GMT
        Subject: CN=59C3D6510994E7302E2BA07A92638DCB66B38C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:76:09:52:1d:45:17:58:58:4b:7b:56:25:e5:
                    0d:41:c7:1a:79:bc:f0:3b:72:a0:eb:cb:73:df:ae:
                    1b:b1:51:0e:72:17:14:e8:d8:40:29:22:c3:2e:99:
                    c6:d1:09:b9:e7:16:3c:39:6e:ff:d2:84:5e:22:c5:
                    29:23:7c:6e:c6:c3:6e:58:af:19:f5:e7:25:49:a9:
                    ca:40:ef:2a:eb:42:0c:1b:5d:38:c2:5b:e8:2e:59:
                    ac:cd:d3:df:ba:da:8e:14:13:9b:25:6c:ce:c6:dc:
                    ca:33:84:78:25:bf:0c:da:53:91:5e:77:41:84:75:
                    f6:18:24:fb:10:85:a8:4b:7e:e6:4c:39:4a:ae:7f:
                    4d:a3:d0:72:37:54:79:81:e3:3b:76:42:87:3c:e4:
                    ca:b7:89:91:f6:fb:d3:1c:c1:a1:51:2c:fc:54:29:
                    b2:ef:c5:6f:ae:4b:b9:bf:3c:f4:4c:e2:1f:a8:98:
                    d4:89:05:40:ea:a6:64:83:a4:42:bd:5d:ab:6e:a4:
                    16:eb:39:f7:24:d4:d9:f0:e0:bd:3f:82:8d:5a:66:
                    f4:a1:d3:7b:69:96:41:18:13:d7:69:46:a2:96:12:
                    77:d1:c4:9c:a3:7b:19:3d:ad:6b:b6:90:47:ed:1f:
                    e3:b4:77:3c:85:98:49:8a:60:1c:c7:3a:ca:8d:40:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C3:D6:51:09:94:E7:30:2E:2B:A0:7A:92:63:8D:CB:66:B3:8C:72
            X509v3 Authority Key Identifier:
                keyid:A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:4b:d9:a4:2f:90:0a:ac:d8:cf:02:23:13:3d:da:70:7e:fa:
         75:e8:c6:0f:0b:79:f2:ad:b7:d4:1e:26:7a:94:a1:e3:5b:4e:
         71:ba:af:0c:c7:5d:db:ac:cf:47:f1:e3:fe:cf:69:f3:ce:3b:
         6c:0b:ec:0c:93:cf:b1:dc:4a:33:c7:2f:e7:d0:dd:03:bd:a4:
         cf:27:93:57:a4:b0:ab:d5:f4:4e:99:85:25:71:6c:4f:6f:32:
         85:12:53:a8:72:a4:1e:62:c7:74:4e:bc:45:ad:ed:c8:5a:a8:
         eb:aa:f9:41:90:ef:c8:45:cb:59:4d:ce:e6:3d:82:41:51:50:
         9b:03:1c:85:d3:2a:0e:7e:f5:96:6b:4e:49:82:56:99:28:9c:
         1a:41:9c:18:43:ed:a7:25:35:ee:8e:02:c7:a9:7c:a5:99:a3:
         b1:86:b7:9c:e5:fb:18:5e:f0:36:e1:04:c2:03:34:b7:1c:64:
         c6:fd:af:d8:ce:eb:1b:5a:6f:e3:6d:21:cb:f6:bf:ab:fe:a9:
         75:42:62:94:0b:c2:b0:41:12:56:45:95:a2:d9:f0:5e:fa:db:
         28:76:3f:f8:f3:07:5b:ca:de:4b:b5:b8:61:e7:62:0f:83:cf:
         aa:b2:ab:46:db:35:a8:ae:ca:11:06:a6:e4:5c:02:97:9a:ed:
         88:66:c9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----