Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038383838.roa
File:                     3139332e3136332e31392e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          LvkODAXJTnrF4uz5BOSzbS449WT8+omZ2MEN5k0C3ew=
Subject key identifier:   10:DB:74:C2:C2:EB:4E:8A:3E:DC:DF:EF:B9:0B:CF:28:A4:F2:E1:29
Certificate issuer:       /CN=ecdd07eef76f1a5c4ec4d944293e096e967ca3d0
Certificate serial:       3D35523100767334E34279E30F6C304EEFC3D158
Authority key identifier: EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer
Subject info access:      rsync://0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:37 +0000
ROA not before:           Fri 22 Sep 2023 10:14:37 +0000
ROA not after:            Fri 20 Sep 2024 10:19:37 +0000
asID:                     8888
IP address blocks:        193.163.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:35:52:31:00:76:73:34:e3:42:79:e3:0f:6c:30:4e:ef:c3:d1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdd07eef76f1a5c4ec4d944293e096e967ca3d0
        Validity
            Not Before: Sep 22 10:14:37 2023 GMT
            Not After : Sep 20 10:19:37 2024 GMT
        Subject: CN=10DB74C2C2EB4E8A3EDCDFEFB90BCF28A4F2E129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:48:e4:90:5c:41:4e:65:9c:c9:e0:ec:9a:
                    36:8d:e0:af:b3:43:66:79:77:33:a6:61:96:56:56:
                    e9:4a:5d:87:c7:74:5b:67:00:e9:5c:e3:3f:79:40:
                    3e:d9:0b:77:2a:82:8e:0c:16:5f:6a:e4:86:3c:0c:
                    e4:a5:d1:22:ec:41:c0:66:2d:4f:11:b0:4f:c8:8b:
                    b3:94:6e:0a:fa:aa:80:86:ce:53:b9:32:28:7f:de:
                    17:c2:99:8e:04:3d:d1:93:3e:f1:f0:08:dc:1c:0f:
                    20:cb:5c:26:93:25:55:cf:34:59:b9:2d:7e:5d:f0:
                    ce:90:c6:76:03:50:09:87:3d:47:66:7a:c4:a1:93:
                    59:08:95:a1:3e:cd:48:4f:6e:64:10:70:d6:20:56:
                    b5:41:45:1a:1b:d4:6c:7d:d8:cc:cb:68:e2:f6:c0:
                    6b:b1:17:4f:5e:8d:fe:5e:6f:65:b5:52:98:1b:dc:
                    d6:3a:ac:2f:0d:b4:a7:80:d0:99:9e:06:5c:42:e4:
                    81:1b:bf:6f:9d:76:ed:3f:c9:d5:8b:2d:2b:86:f9:
                    59:c6:ce:2c:9b:2f:1d:71:ba:14:59:86:b1:96:4c:
                    13:0d:25:e0:b5:69:83:24:e5:81:0b:ba:1e:af:6a:
                    f0:68:7a:a9:18:14:64:f2:7d:eb:1a:d5:4a:b1:bf:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:74:C2:C2:EB:4E:8A:3E:DC:DF:EF:B9:0B:CF:28:A4:F2:E1:29
            X509v3 Authority Key Identifier:
                keyid:EC:DD:07:EE:F7:6F:1A:5C:4E:C4:D9:44:29:3E:09:6E:96:7C:A3:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/10/ECDD07EEF76F1A5C4EC4D944293E096E967CA3D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N0H7vdvGlxOxNlEKT4JbpZ8o9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/10/3139332e3136332e31392e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:32:d6:1e:bd:2e:40:03:14:f3:41:7a:99:b9:67:30:d9:
         7d:5b:49:de:19:3a:f8:30:aa:f1:5e:5d:f6:6f:07:90:11:71:
         48:0a:ae:7f:bb:a3:4e:84:c6:29:3e:aa:c3:77:cb:75:d8:8c:
         d5:ec:c4:8f:0b:ad:cd:23:c5:3d:b2:92:ab:2c:e4:4a:5d:42:
         9e:40:a1:3b:2f:9a:e6:f3:e6:dc:5d:01:7a:6c:06:b6:c2:4c:
         8f:2c:ef:9b:37:86:f7:18:45:29:12:89:56:15:5a:e0:e4:a2:
         5a:43:8f:b9:a0:53:60:56:f7:54:fd:20:74:0c:77:a9:ed:f2:
         00:f8:73:1d:e1:9e:d6:38:38:97:cd:55:bc:78:d5:40:1e:b8:
         ba:d3:e1:1e:9e:2d:2b:7f:03:c1:ef:2f:36:20:cc:a9:08:f0:
         1c:85:b8:a7:78:84:69:a0:6a:5d:b8:1e:fa:f3:6b:65:bb:64:
         dd:e0:12:f6:00:f1:ba:1f:16:fc:1d:89:64:f1:a6:38:23:7d:
         92:ec:b5:7f:65:33:f5:78:21:10:d9:fc:1d:b8:97:e9:dc:81:
         7e:24:e8:ee:29:07:8e:28:96:c5:24:41:f4:53:c2:89:5e:93:
         5a:ae:ca:6d:a5:3a:73:56:b9:54:5a:3a:41:52:2d:16:d5:ad:
         f0:39:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----