Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038383838.roa
File:                     3139332e332e3137342e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          ElxtTsHn4ETWIHrIHCKOcucZG57ZzX6YNkrsJEdqlyY=
Subject key identifier:   B3:B0:F3:6B:94:05:12:48:92:5F:2E:8B:9C:C7:C6:D2:99:E2:5C:94
Certificate issuer:       /CN=cd64f5400afd2e66a071a72ae1f44827183afba1
Certificate serial:       187E1A57237688BBAA80707FDA4C09489F8D3634
Authority key identifier: CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer
Subject info access:      rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:36 +0000
ROA not before:           Fri 22 Sep 2023 10:14:36 +0000
ROA not after:            Fri 20 Sep 2024 10:19:36 +0000
asID:                     8888
IP address blocks:        193.3.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7e:1a:57:23:76:88:bb:aa:80:70:7f:da:4c:09:48:9f:8d:36:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd64f5400afd2e66a071a72ae1f44827183afba1
        Validity
            Not Before: Sep 22 10:14:36 2023 GMT
            Not After : Sep 20 10:19:36 2024 GMT
        Subject: CN=B3B0F36B94051248925F2E8B9CC7C6D299E25C94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:2c:4c:aa:4d:80:84:43:a6:e1:79:60:ba:
                    c8:07:d8:0f:48:00:bd:61:8f:e9:08:ab:25:44:75:
                    a4:b1:46:22:b3:3a:73:f4:82:2f:4f:43:04:18:08:
                    0e:e8:fa:9c:f1:cc:54:51:d5:11:c6:b2:fd:7e:26:
                    89:ad:1d:f5:6d:0d:fc:fb:d3:b6:17:67:2f:a3:e1:
                    30:21:db:40:a7:a5:c9:ae:1e:cb:02:7b:0e:83:81:
                    d4:5e:e3:b7:75:b9:db:4f:d0:2f:fe:41:ad:78:84:
                    75:45:3a:9d:93:7c:62:7f:9b:33:6f:69:82:47:0c:
                    1e:9d:c1:29:03:17:94:07:95:bc:e2:2e:dd:a0:71:
                    d7:b5:f9:b2:69:02:dc:40:0c:00:86:af:4c:df:dd:
                    8f:0e:4b:99:bd:3b:5b:cc:ab:1f:41:86:14:61:f1:
                    a5:f9:85:46:34:48:e9:c6:a9:bd:7e:5c:08:bc:35:
                    fa:ea:3f:b0:b4:fd:21:5c:bd:d5:9f:9a:a8:58:08:
                    4e:a1:ce:e7:c4:70:5e:50:8d:26:35:a9:81:5d:c2:
                    2e:46:42:7d:ba:e6:6d:90:9e:29:34:ac:53:1c:78:
                    80:70:79:c8:36:1a:ce:6c:51:20:c4:70:2a:2e:f2:
                    7e:61:f5:4f:03:ec:61:db:e9:09:38:40:13:77:2a:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:F3:6B:94:05:12:48:92:5F:2E:8B:9C:C7:C6:D2:99:E2:5C:94
            X509v3 Authority Key Identifier:
                keyid:CD:64:F5:40:0A:FD:2E:66:A0:71:A7:2A:E1:F4:48:27:18:3A:FB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/13/CD64F5400AFD2E66A071A72AE1F44827183AFBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWT1QAr9Lmagcacq4fRIJxg6-6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/13/3139332e332e3137342e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:b5:a0:0a:68:84:3d:57:42:42:71:5b:2a:15:c1:93:2b:
         34:2f:e9:0d:a2:e8:14:2b:43:bc:58:bd:85:28:88:a4:0f:36:
         2b:65:25:df:98:c0:4e:0b:69:2b:48:71:a1:bf:f6:53:7e:4f:
         8a:1b:23:d5:79:82:fa:fb:71:6d:73:85:87:c6:cf:94:05:c8:
         b5:89:f8:5e:36:eb:09:44:8d:4c:d1:5e:9b:1d:40:18:af:ea:
         19:0f:6e:f7:ff:55:0b:4c:a5:82:48:be:12:c5:54:5f:c0:10:
         28:7c:39:7a:da:c4:81:75:e6:eb:a7:44:c4:4f:45:28:3c:61:
         85:a7:be:88:36:44:7c:b2:ee:e6:d7:58:3c:1e:76:ac:aa:60:
         0c:c4:a8:5d:88:bb:bc:b3:00:3b:c0:89:40:84:82:b2:62:d6:
         94:24:1c:47:69:4a:23:b7:a0:2e:9f:cb:46:bc:77:1d:25:93:
         04:b9:ea:d1:b5:70:de:30:93:85:92:f3:ce:e7:c6:4f:1b:8f:
         3e:45:c1:8c:82:55:09:c4:25:54:13:f6:53:8b:c7:24:e7:d0:
         73:db:ae:28:45:e3:f1:53:20:19:86:b3:4d:54:9b:85:99:78:
         52:af:d3:e6:67:87:ff:bb:04:c4:db:41:14:a2:ca:61:fb:06:
         e9:46:a4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----