Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038383838.roa
File:                     36322e3130362e37352e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          nPG8LvTdZIfERJbxpvrsIoeChynob2H/z1Jr2LnfVyU=
Subject key identifier:   8E:A4:FB:AA:62:9A:CA:FB:06:91:5A:9F:2B:24:0A:1A:42:FD:93:99
Certificate issuer:       /CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
Certificate serial:       571C0403DEDD576034BEEC58FBE624F660E5A22A
Authority key identifier: A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer
Subject info access:      rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     8888
IP address blocks:        62.106.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1c:04:03:de:dd:57:60:34:be:ec:58:fb:e6:24:f6:60:e5:a2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0d68c72f1563ace1485dbb5a894e58099e97abe
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=8EA4FBAA629ACAFB06915A9F2B240A1A42FD9399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:2b:f7:54:d5:8a:ea:dd:1f:c7:f8:54:ac:
                    2e:63:f1:4b:68:17:6f:f2:0b:37:d6:e6:d5:1b:7d:
                    d9:b5:d0:50:1b:df:1e:52:75:5b:8f:46:81:b5:3d:
                    25:16:bf:c9:41:94:f9:d0:4b:a6:27:75:ae:b2:61:
                    62:a7:cb:31:e9:35:f1:ed:92:4a:4b:86:5b:73:ea:
                    60:1f:53:b3:7a:93:60:ff:fe:6c:3a:01:c0:6d:02:
                    ce:c1:47:83:a5:9f:71:7e:01:0d:7f:7c:3d:57:52:
                    25:d7:ee:31:e2:28:b0:f2:d2:01:21:b5:8a:1a:a3:
                    ff:1a:5f:29:71:09:42:75:75:3d:1d:eb:53:22:a7:
                    a8:7b:b5:c5:b1:a2:20:65:3d:25:8f:58:73:f1:f7:
                    60:07:a5:26:af:3c:e3:d1:6c:58:fe:38:e4:71:75:
                    95:a7:79:6e:38:ee:95:ca:89:e4:5a:b5:14:f4:2f:
                    3a:fe:39:b1:4f:f6:c4:b4:39:01:2d:c9:a4:7e:b0:
                    d0:e8:a7:e4:fd:fa:ec:70:59:2e:4e:aa:7c:e3:8d:
                    8b:7e:ac:41:66:a7:bd:53:b3:95:4e:70:cf:a0:ec:
                    03:ea:9e:82:08:35:a0:b5:39:ab:58:9e:f4:a2:20:
                    5a:7e:08:57:74:20:fe:01:45:d9:a0:2e:96:78:41:
                    2e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A4:FB:AA:62:9A:CA:FB:06:91:5A:9F:2B:24:0A:1A:42:FD:93:99
            X509v3 Authority Key Identifier:
                keyid:A0:D6:8C:72:F1:56:3A:CE:14:85:DB:B5:A8:94:E5:80:99:E9:7A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/0/A0D68C72F1563ACE1485DBB5A894E58099E97ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNaMcvFWOs4Uhdu1qJTlgJnper4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/0/36322e3130362e37352e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:12:11:33:d4:6a:2f:7a:68:d9:cb:e5:3f:71:80:6e:88:57:
         6f:cf:ef:bf:85:18:d8:64:32:fb:45:c9:e1:0a:4f:31:0e:11:
         4d:0a:91:a2:42:90:e7:80:c8:0d:ad:9a:55:64:dc:21:d1:00:
         97:2c:e8:f8:70:40:5e:f6:a4:ce:75:9a:e4:93:22:af:91:d3:
         59:4d:6a:4d:d9:51:ff:d9:7d:0e:a4:ef:a5:80:48:9b:95:33:
         bb:51:a5:c3:78:9c:26:cd:80:2e:e1:28:33:79:57:60:32:4a:
         0a:52:cd:4b:35:47:22:bb:ac:b2:2b:db:e2:d9:e9:f3:6c:ab:
         3b:f2:2f:d3:cc:9b:1c:cd:a2:9d:39:07:7d:40:7c:51:fc:91:
         e0:d9:e4:af:c3:8d:4b:e6:c7:fa:8a:0e:34:71:3c:67:fc:c6:
         f3:f6:66:43:1c:15:47:64:61:80:22:a6:2e:80:45:ae:11:eb:
         45:8c:9b:60:cf:60:05:b8:6a:5f:73:74:9b:42:8f:0c:08:60:
         7f:48:c7:08:bf:cc:4b:6f:5e:eb:bb:ac:66:f0:60:55:eb:89:
         46:ee:61:d5:24:84:f6:a7:68:d7:ca:5c:3e:bd:37:11:ef:e1:
         52:c8:10:38:b7:3f:03:7f:65:ac:51:44:75:86:8c:43:67:25:
         85:d5:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----