Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e2038383838.roa
File:                     3231322e32332e3139362e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          DkRIba/UpJNWkZ2E0GWXopjcCzwRVCGBtMSgvChNy+s=
Subject key identifier:   E0:84:53:48:71:A8:10:87:CE:9B:0A:F9:C5:E8:40:01:FC:13:9A:89
Certificate issuer:       /CN=bfdae77ef8bd76a392c17c4dc6277486a49f819e
Certificate serial:       2EF4DC2DF7C7011851AF5B4B0F36CB14ACDAA448
Authority key identifier: BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer
Subject info access:      rsync://0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:43 +0000
ROA not before:           Fri 22 Sep 2023 10:14:43 +0000
ROA not after:            Fri 20 Sep 2024 10:19:43 +0000
asID:                     8888
IP address blocks:        212.23.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f4:dc:2d:f7:c7:01:18:51:af:5b:4b:0f:36:cb:14:ac:da:a4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfdae77ef8bd76a392c17c4dc6277486a49f819e
        Validity
            Not Before: Sep 22 10:14:43 2023 GMT
            Not After : Sep 20 10:19:43 2024 GMT
        Subject: CN=E084534871A81087CE9B0AF9C5E84001FC139A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:bc:b6:df:06:a6:37:0d:05:37:2f:00:16:
                    e9:6b:27:bf:b0:98:4b:f5:99:bc:9a:9d:9a:55:d1:
                    88:93:1c:b8:99:24:e7:93:be:b6:17:5e:13:c8:b1:
                    58:8d:38:85:6d:af:cf:41:09:e1:37:ed:f8:47:03:
                    6a:44:84:d1:90:7f:78:68:62:c7:40:24:a4:83:2d:
                    98:f2:b3:e5:d0:9d:cb:f3:4f:68:a9:aa:9b:c3:4f:
                    57:34:a6:bc:43:77:41:c5:06:29:d0:a3:da:38:b6:
                    37:08:98:0e:f3:52:c7:ab:3f:ea:d8:90:43:ca:7f:
                    64:17:44:63:2d:56:f0:5d:db:e5:27:3f:b9:62:54:
                    6c:2f:e9:fc:e7:da:3c:c1:f9:8e:89:04:7b:ee:f1:
                    c1:fa:c4:56:97:6f:86:cd:af:5a:f4:57:ea:32:e9:
                    39:a3:d2:ca:86:44:ac:c0:62:c7:e3:ca:08:ae:b8:
                    37:c2:1a:e2:75:5e:67:28:db:7c:32:78:78:6e:79:
                    4d:83:fb:6d:0d:42:b9:f2:84:99:a3:0b:b3:99:b2:
                    a0:40:51:f9:e6:6b:18:bc:77:7e:0d:39:8d:bf:1f:
                    17:cd:82:b5:c9:c6:bf:28:aa:65:9a:5c:86:9f:77:
                    db:37:47:84:d8:38:1c:73:3b:1a:c1:8c:c2:ef:5b:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:84:53:48:71:A8:10:87:CE:9B:0A:F9:C5:E8:40:01:FC:13:9A:89
            X509v3 Authority Key Identifier:
                keyid:BF:DA:E7:7E:F8:BD:76:A3:92:C1:7C:4D:C6:27:74:86:A4:9F:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/12/BFDAE77EF8BD76A392C17C4DC6277486A49F819E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9rnfvi9dqOSwXxNxid0hqSfgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/12/3231322e32332e3139362e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:62:c8:53:44:0a:73:df:2b:c5:e1:5c:6d:b7:1e:13:fd:
         68:c2:62:84:8e:b9:62:e8:c5:3c:d6:19:7c:14:b9:ef:f6:7d:
         cd:39:e5:30:d8:11:9c:cc:32:2b:49:a3:99:a9:a3:2a:19:9f:
         95:25:d6:95:5c:a2:4f:0a:c9:a1:e7:a4:e3:48:9a:52:b3:54:
         e2:f7:69:c0:15:82:02:d5:40:8a:f1:76:91:c6:c1:65:cb:39:
         b6:5b:48:09:23:e3:40:92:a1:b2:d2:8d:21:b0:b7:75:ca:83:
         a8:91:03:45:55:6b:0b:b5:45:a6:30:d4:2a:ac:69:cf:c5:fa:
         67:93:f2:77:b7:02:02:c2:49:22:94:e9:3f:82:61:5a:c7:ef:
         4a:4e:80:8a:86:e9:03:8b:ed:cf:10:fd:d8:a5:61:4e:6f:70:
         46:fd:84:8b:85:15:97:d1:27:2d:82:5d:b2:21:65:b3:db:44:
         2e:a3:ca:40:16:a0:1e:4d:3b:ea:73:3f:61:95:e3:5e:37:93:
         5a:23:1c:bf:14:36:c4:a0:e8:fb:86:89:3f:e8:cd:f7:7d:94:
         88:16:b3:7b:87:9b:d3:ac:39:19:4b:b4:80:83:0d:11:fb:8a:
         8b:02:d0:44:c8:90:5f:68:bf:1c:8b:1e:fe:e8:75:e3:34:a4:
         e9:cc:52:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----