Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203136353039.roa
File:                     3139332e332e3137342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          rEA9O8K4bmSmPYnaiPZRoYNKLqo5vQOBlr4eKZl+Wzk=
Subject key identifier:   14:79:86:6F:E7:48:A9:9A:83:C5:EE:23:96:61:23:CA:30:6C:DD:9C
Certificate issuer:       /CN=cd64f5400afd2e66a071a72ae1f44827183afba1
Certificate serial:       0E7D554330C1E35CC946F73B0EDCDC5347675582
Authority key identifier: CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer
Subject info access:      rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 13 Oct 2023 05:06:38 +0000
ROA not before:           Fri 13 Oct 2023 05:01:38 +0000
ROA not after:            Fri 11 Oct 2024 05:06:38 +0000
asID:                     16509
IP address blocks:        193.3.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7d:55:43:30:c1:e3:5c:c9:46:f7:3b:0e:dc:dc:53:47:67:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd64f5400afd2e66a071a72ae1f44827183afba1
        Validity
            Not Before: Oct 13 05:01:38 2023 GMT
            Not After : Oct 11 05:06:38 2024 GMT
        Subject: CN=1479866FE748A99A83C5EE23966123CA306CDD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:e2:34:aa:04:ce:3e:52:af:c1:64:b2:63:
                    57:d1:9b:bb:7e:61:e3:aa:7e:c2:a9:e6:67:e5:91:
                    dc:50:fd:a8:36:fa:12:bf:79:99:6c:e2:30:3a:d3:
                    b5:43:81:76:9d:a0:a4:ca:b2:27:ff:0c:13:13:02:
                    b9:a9:b4:71:e1:3c:b7:cf:ab:4b:23:2c:73:17:c1:
                    ae:c3:0e:f8:11:15:fa:ce:87:06:fe:7b:ba:73:74:
                    49:7f:f3:ac:ca:85:a4:f5:24:0c:6e:37:c7:81:d9:
                    69:da:ab:d6:31:b7:37:42:56:8e:09:d4:28:f4:67:
                    4d:f4:35:6f:49:44:fb:67:51:ff:95:a1:16:ca:6c:
                    a7:e0:b7:65:4f:c8:f8:9c:a6:dd:ae:fe:52:04:4f:
                    3b:a4:3b:3f:ab:e4:9c:34:8f:de:d9:6c:87:5c:7a:
                    7f:9d:12:1a:cc:54:25:c8:b6:0a:a3:6a:e5:13:ce:
                    a2:6b:d4:5a:3e:87:3f:48:ff:2f:ce:6a:ac:d3:44:
                    61:73:a4:b5:a4:b4:e7:aa:1b:fd:0c:4c:ea:d6:b7:
                    c2:c9:5f:0e:58:99:69:1e:4c:19:5a:0e:d7:f9:b2:
                    f5:68:a2:ab:70:0a:62:de:3b:08:5e:0b:a1:2f:23:
                    d6:7e:a0:8f:96:d7:6c:e7:ea:29:3a:d9:c7:0c:cd:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:86:6F:E7:48:A9:9A:83:C5:EE:23:96:61:23:CA:30:6C:DD:9C
            X509v3 Authority Key Identifier:
                keyid:CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/13/CD64F5400AFD2E66A071A72AE1F44827183AFBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:df:69:ee:75:e5:7c:c6:f0:47:bd:35:89:22:de:b5:68:1a:
         45:63:c1:60:67:42:35:16:d4:a9:42:58:b0:5f:ba:60:f6:61:
         c8:1e:25:11:5f:da:eb:df:64:fd:d6:a1:86:71:d3:c0:6c:6e:
         c6:2e:3a:41:37:3a:8a:ee:77:04:13:07:25:88:6a:46:10:5d:
         9f:07:f1:45:df:ee:e7:2b:b4:31:52:10:f7:a2:b1:ff:3a:0a:
         18:75:05:d9:f0:33:2e:67:16:c6:33:56:aa:4b:0b:80:82:30:
         36:2a:97:b4:f5:8f:b8:36:07:42:13:0f:8a:a3:dc:a4:bd:fd:
         51:cf:65:8a:3d:2f:90:8f:3e:b4:56:5d:f7:e8:25:aa:27:e2:
         8b:3d:26:7a:50:bf:07:17:8b:3c:0f:44:63:76:d9:e3:a6:f5:
         85:40:5e:08:68:57:58:a8:6f:fc:2e:d8:71:69:46:4a:e0:7c:
         12:19:45:2a:cd:6e:f7:ff:b1:05:b7:33:82:ee:12:70:c8:1b:
         bd:d0:21:b1:61:9a:b9:f0:62:33:ef:af:80:48:5f:9e:d0:99:
         20:8e:b8:15:97:f3:e6:48:79:38:5f:17:ec:5c:ca:26:79:80:
         f4:ff:27:cf:03:24:0e:23:c6:b7:a0:42:a8:2a:a8:7a:79:73:
         bd:7e:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----