Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/11/3231322e32332e3139372e302f32342d3234203d3e203136353039.roa
File:                     3231322e32332e3139372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          YIDQRW8h3suzOOz39m982TAVHgkpnga1lKaK1nyrW6M=
Subject key identifier:   42:C2:8A:3E:D3:EE:7D:61:F1:D6:38:87:FD:41:E4:3A:CC:57:56:C4
Certificate issuer:       /CN=c7c2309dc804802841751e756867946657e1b15e
Certificate serial:       12C7E022691B32B8B4BF109D8315E574563C1942
Authority key identifier: C7:C2:30:9D:C8:04:80:28:41:75:1E:75:68:67:94:66:57:E1:B1:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x8IwncgEgChBdR51aGeUZlfhsV4.cer
Subject info access:      rsync://0.sb/repo/sb/11/3231322e32332e3139372e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Dec 2023 05:52:39 +0000
ROA not before:           Tue 05 Dec 2023 05:47:39 +0000
ROA not after:            Tue 03 Dec 2024 05:52:39 +0000
asID:                     16509
IP address blocks:        212.23.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:e0:22:69:1b:32:b8:b4:bf:10:9d:83:15:e5:74:56:3c:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c2309dc804802841751e756867946657e1b15e
        Validity
            Not Before: Dec  5 05:47:39 2023 GMT
            Not After : Dec  3 05:52:39 2024 GMT
        Subject: CN=42C28A3ED3EE7D61F1D63887FD41E43ACC5756C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:05:e6:25:51:eb:55:eb:a8:94:37:d2:42:c2:
                    ff:e6:fb:54:d3:44:48:b6:e7:c8:86:4c:7d:a8:97:
                    9f:38:97:29:4e:23:0f:70:fb:e8:45:ef:40:c1:bf:
                    63:d2:f4:e0:a7:fc:7b:3a:34:08:4c:8e:af:94:de:
                    80:d3:5d:a1:fc:e7:fa:a2:b6:ab:1c:3e:e8:96:62:
                    e6:f8:a8:97:10:48:bd:7c:0c:a8:08:98:81:b4:ae:
                    89:57:65:09:89:21:01:1f:57:02:9e:8c:e7:76:7c:
                    5e:ef:d6:75:43:c0:44:d6:c2:ab:59:9c:f1:39:38:
                    77:6f:28:4c:5b:eb:6d:85:b3:98:2c:4f:1a:26:ac:
                    c2:dd:20:73:5b:9b:9a:2e:28:19:ef:96:b9:cf:51:
                    3c:19:5e:0d:7d:38:30:42:bc:df:ec:62:cb:69:0d:
                    b2:7c:a2:b3:ac:42:fc:34:53:a6:07:5d:64:69:70:
                    55:9a:35:c9:a6:6e:3d:de:bd:2d:03:50:18:ad:3a:
                    80:66:3e:9b:f1:d1:cd:73:46:d5:82:98:53:04:1c:
                    eb:57:2b:ed:a6:35:78:da:5e:2d:2b:09:aa:57:e6:
                    f2:7e:eb:bb:fe:34:01:03:03:5a:ff:20:f8:48:e4:
                    d8:78:ad:32:19:1a:b5:31:5a:18:59:cc:c0:29:8f:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:8A:3E:D3:EE:7D:61:F1:D6:38:87:FD:41:E4:3A:CC:57:56:C4
            X509v3 Authority Key Identifier:
                keyid:C7:C2:30:9D:C8:04:80:28:41:75:1E:75:68:67:94:66:57:E1:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/11/C7C2309DC804802841751E756867946657E1B15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8IwncgEgChBdR51aGeUZlfhsV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/11/3231322e32332e3139372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:70:62:a3:93:0e:b9:05:c9:71:3f:f3:ec:79:6d:ee:de:12:
         37:00:30:5b:78:9e:64:71:50:2d:7d:56:1d:87:21:dd:d3:6c:
         d4:75:4a:c6:99:84:64:29:28:2b:99:04:5f:cd:a0:24:8a:08:
         d8:3a:2b:87:7c:d0:7c:b9:78:d4:1a:8c:f5:0e:0f:69:ad:14:
         a1:e2:a6:27:30:f7:63:6f:fb:eb:9b:6d:dd:d9:56:be:81:01:
         03:e6:0a:ee:4e:01:78:ef:25:e3:ee:cd:6b:cd:9b:a9:e4:ab:
         03:5f:08:db:19:82:c4:a6:2c:3a:3f:83:1b:a2:e1:50:76:a5:
         fa:87:85:87:7d:bc:79:82:7e:94:73:99:12:2a:3f:24:71:9f:
         72:8c:62:eb:5e:35:01:88:f9:cb:16:de:61:22:f9:9b:95:22:
         d1:f2:51:1d:4c:80:cd:de:e1:00:ea:a2:b9:44:34:17:be:ae:
         8b:7e:8a:13:13:90:27:93:a7:4c:05:ba:5a:7a:3d:86:59:dd:
         27:98:95:e1:04:c2:e8:da:8d:d3:b8:de:d0:8a:2d:1a:a7:45:
         6a:06:48:9a:38:aa:56:03:ed:cd:9f:93:5d:8c:a2:7d:b0:bd:
         4e:5a:39:23:2f:b1:e1:1b:6e:30:05:42:17:e4:28:98:01:ae:
         f4:2f:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----