Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2033323538.roa
File:                     3137362e3132362e3131342e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          RJ+adjrYwSYfQF85LDriazaGUeWO46Im0Wurhx087vY=
Subject key identifier:   A3:33:66:5C:15:06:92:D0:70:31:39:4B:9C:09:2E:8E:26:33:97:19
Certificate issuer:       /CN=baccdef5fc02ba95006381871f2c752f8c5bb062
Certificate serial:       5186FCB882F0F6C754569F4049AEE1D001C32AB6
Authority key identifier: BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer
Subject info access:      rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2033323538.roa
Signing time:             Mon 25 Sep 2023 08:17:41 +0000
ROA not before:           Mon 25 Sep 2023 08:12:41 +0000
ROA not after:            Mon 23 Sep 2024 08:17:41 +0000
asID:                     3258
IP address blocks:        176.126.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:86:fc:b8:82:f0:f6:c7:54:56:9f:40:49:ae:e1:d0:01:c3:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baccdef5fc02ba95006381871f2c752f8c5bb062
        Validity
            Not Before: Sep 25 08:12:41 2023 GMT
            Not After : Sep 23 08:17:41 2024 GMT
        Subject: CN=A333665C150692D07031394B9C092E8E26339719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:da:df:40:65:9d:bd:50:99:35:b2:5c:7c:
                    cc:60:75:76:89:85:fe:70:c0:59:df:64:61:3c:a5:
                    e4:df:79:48:fe:95:23:a4:d6:6e:3b:50:16:ba:3d:
                    93:bf:a3:e5:7e:c3:f5:7c:57:20:21:a0:65:9d:fe:
                    b0:62:02:95:02:c4:29:d2:ad:93:6b:43:2c:42:d6:
                    33:50:8b:59:73:f3:84:7e:4f:bb:6b:59:4d:d6:1e:
                    84:83:8a:28:29:95:0b:ab:6a:ec:99:50:90:b9:2e:
                    2f:d7:12:f4:f0:68:06:5a:98:b9:a5:6f:71:7e:0b:
                    63:48:62:86:9f:43:46:7b:ef:4b:15:5c:e0:9a:3f:
                    69:fe:c9:8d:54:9c:92:74:ba:1a:f6:2a:85:10:98:
                    fd:b0:03:76:c0:8d:cf:72:69:e3:72:97:12:74:83:
                    1d:84:e0:2d:03:33:20:ae:58:f5:f7:92:97:0d:22:
                    9b:39:42:b4:b4:6b:3e:ee:c7:2f:aa:48:83:5d:89:
                    a7:00:0f:11:26:fe:85:3d:dd:f8:cd:60:03:0d:c6:
                    99:db:1c:ff:b0:f9:9d:94:04:38:a5:c8:60:6b:c3:
                    1d:a9:f3:4b:ae:56:47:99:d6:9e:be:c5:41:84:31:
                    6f:64:93:11:4b:be:71:59:dc:57:bc:14:6e:ab:1c:
                    fe:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:33:66:5C:15:06:92:D0:70:31:39:4B:9C:09:2E:8E:26:33:97:19
            X509v3 Authority Key Identifier:
                keyid:BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/14/BACCDEF5FC02BA95006381871F2C752F8C5BB062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:88:7e:87:ff:a9:cf:ae:d6:24:43:44:b1:33:b2:c0:9f:
         eb:9c:ce:85:d0:9e:b6:6f:fb:05:4b:02:c8:c7:26:17:d6:86:
         7b:f1:d2:a8:4b:1d:3c:19:85:c8:19:a6:2e:db:06:f8:4f:e7:
         ff:b9:a0:a4:37:c9:06:fe:36:36:4c:77:7d:d7:1f:ff:f7:a0:
         cb:86:97:2c:21:0d:87:13:76:ae:66:2c:1d:c6:36:b9:cd:22:
         42:7f:90:31:ea:88:13:39:0f:6a:99:ce:af:2e:f7:29:ff:ae:
         d9:d1:48:6f:db:b1:6f:d4:9b:d1:44:fb:9b:f9:c1:83:42:33:
         0c:1b:b1:ed:00:2b:87:ed:10:45:e0:13:05:db:b6:7f:6e:29:
         26:97:f7:30:44:73:b6:24:f0:d9:be:36:15:26:ba:dc:53:c5:
         5c:65:07:bd:fe:ab:0c:4e:c8:3c:e5:bf:2d:19:b2:d3:e2:25:
         95:dc:8f:5e:d3:e6:54:99:c3:57:ac:53:d9:2f:32:38:9e:bb:
         24:43:6a:3d:3b:51:eb:c5:7d:92:4c:31:86:40:9d:3f:d0:2d:
         db:ad:ea:65:21:ae:27:b0:63:5e:db:f2:a5:a6:0a:3e:cd:f0:
         d9:be:28:04:61:06:56:e6:fa:1d:4b:fc:9e:a7:94:2f:9f:84:
         c5:9c:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----