Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203134363138.roa
File:                     3139332e332e3137342e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          5QdzU8nJzRmhzF+7P70IqCf8c85wzOHKhtv7EVZ7Q40=
Subject key identifier:   FA:9B:A3:7D:8C:0E:A9:B5:2A:E1:F7:5B:DF:10:D1:9C:9A:C5:54:4C
Certificate issuer:       /CN=cd64f5400afd2e66a071a72ae1f44827183afba1
Certificate serial:       7C7369B711EE83BBEC96BE4EB13ED40E691A6A79
Authority key identifier: CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer
Subject info access:      rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203134363138.roa
Signing time:             Fri 13 Oct 2023 05:06:57 +0000
ROA not before:           Fri 13 Oct 2023 05:01:57 +0000
ROA not after:            Fri 11 Oct 2024 05:06:57 +0000
asID:                     14618
IP address blocks:        193.3.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:73:69:b7:11:ee:83:bb:ec:96:be:4e:b1:3e:d4:0e:69:1a:6a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd64f5400afd2e66a071a72ae1f44827183afba1
        Validity
            Not Before: Oct 13 05:01:57 2023 GMT
            Not After : Oct 11 05:06:57 2024 GMT
        Subject: CN=FA9BA37D8C0EA9B52AE1F75BDF10D19C9AC5544C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:78:14:0b:f7:88:09:7b:9f:cc:cf:eb:48:
                    48:85:7d:2d:73:12:c5:d7:60:44:df:a5:03:77:fb:
                    2b:b3:0a:66:d0:b7:85:62:27:ac:92:91:e0:41:95:
                    a2:7c:9e:98:8e:21:31:bd:37:86:fa:56:3d:fb:2a:
                    10:e5:df:ef:22:dd:a6:d2:2e:ab:c9:4b:bf:99:11:
                    65:2a:b5:d3:af:d9:4c:e9:0e:c7:36:55:ae:02:2a:
                    1c:b3:82:8c:62:70:3c:db:24:eb:7c:a4:fc:67:74:
                    46:d2:f6:1f:28:32:17:26:3a:b1:9f:50:9c:93:6c:
                    9b:23:5e:92:e2:fd:fa:71:f3:0f:f9:96:c5:2b:88:
                    60:df:c5:ea:5b:7a:76:37:5d:af:f8:0e:78:a5:da:
                    15:93:77:a1:63:5c:44:84:2e:5e:dc:d8:e7:8c:95:
                    b3:98:78:53:f0:d3:dd:9f:b0:62:e4:6c:57:2a:9c:
                    fb:28:de:13:6f:5d:a9:ae:6e:49:be:d6:6b:5e:aa:
                    10:60:d4:b4:93:d9:fb:f9:04:6f:b9:a2:bc:70:e8:
                    9b:8f:1c:ca:1f:81:43:44:10:d5:1f:6f:0a:81:f9:
                    b1:b3:b4:0d:af:fb:33:fa:13:e6:0d:f9:fb:27:d8:
                    e4:42:03:69:fc:99:c3:dc:d8:e7:ca:1c:b6:b4:b6:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:A3:7D:8C:0E:A9:B5:2A:E1:F7:5B:DF:10:D1:9C:9A:C5:54:4C
            X509v3 Authority Key Identifier:
                keyid:CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/13/CD64F5400AFD2E66A071A72AE1F44827183AFBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:80:93:b3:c5:5c:89:36:0e:8b:d4:d8:0b:1c:02:1a:87:a8:
         dd:3d:0f:ea:f2:86:67:ea:24:a7:33:98:a0:3b:ab:78:21:eb:
         e0:63:5d:d9:9a:d3:c7:03:71:41:cf:f2:0e:0f:cf:de:d4:6f:
         ff:eb:de:d4:cd:5f:aa:e8:a8:da:34:c5:d0:bd:57:4b:e1:55:
         be:bc:5d:23:02:7a:2c:bd:9e:d4:be:b8:6c:0e:ef:bb:33:78:
         4f:7e:46:db:67:be:c4:7c:57:1c:dd:d5:36:13:e2:fb:b9:00:
         c2:50:5b:5d:43:1f:fb:0c:2b:65:6e:75:55:8f:1c:b4:40:87:
         f2:ec:d9:55:8a:e2:f7:ac:95:44:91:9c:86:72:44:2d:c8:9c:
         82:08:3a:f2:fc:0f:95:ff:72:b0:12:1b:15:fe:f8:5c:30:68:
         fc:48:1c:f6:b5:a0:ce:b6:aa:8e:31:e0:57:dd:00:76:ed:c1:
         e1:62:19:9d:af:2e:64:5b:24:34:ca:37:11:29:e6:87:6a:8f:
         2a:a0:41:3e:d0:52:06:c6:b2:cf:7f:4d:0c:db:76:eb:47:bb:
         e9:98:79:ea:05:07:7e:ef:09:25:1d:b1:65:45:e4:cf:00:27:
         53:a7:39:87:44:34:5f:be:53:45:a1:9c:3d:a1:8f:4b:54:03:
         b0:98:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----