Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038313030.roa
File:                     3137362e3132362e3131342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          K64oA47rvIpI8icUN398z1+HazA34HQLgiyhXXVqKh4=
Subject key identifier:   E2:6F:CC:39:AE:D1:F9:7A:5B:3B:64:6C:E2:20:FD:25:0B:51:6A:01
Certificate issuer:       /CN=baccdef5fc02ba95006381871f2c752f8c5bb062
Certificate serial:       11CAFC23EA8822FCC6B48FE3A94F0A32B2571CA3
Authority key identifier: BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer
Subject info access:      rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:28 +0000
ROA not before:           Fri 21 Oct 2022 09:53:28 +0000
ROA not after:            Fri 20 Oct 2023 09:58:28 +0000
asID:                     8100
IP address blocks:        176.126.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ca:fc:23:ea:88:22:fc:c6:b4:8f:e3:a9:4f:0a:32:b2:57:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baccdef5fc02ba95006381871f2c752f8c5bb062
        Validity
            Not Before: Oct 21 09:53:28 2022 GMT
            Not After : Oct 20 09:58:28 2023 GMT
        Subject: CN=E26FCC39AED1F97A5B3B646CE220FD250B516A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:d8:ad:c7:40:68:1c:74:e8:09:df:e9:fa:
                    80:84:02:ba:f4:87:68:ee:a4:2b:2f:5e:b4:27:5a:
                    29:68:65:38:97:d3:1e:35:6f:42:a6:76:03:19:04:
                    60:3f:59:59:5a:4f:03:93:da:d1:3d:60:ab:bb:90:
                    d7:6d:8a:f1:a4:3f:e7:a4:59:12:5d:29:cf:0d:94:
                    ff:87:a8:fc:b8:5c:be:3d:74:82:e5:d1:a4:33:01:
                    4b:47:76:71:aa:39:94:d0:a7:b9:b1:fa:3f:a7:f2:
                    5a:fb:2c:07:22:be:87:c7:a3:7f:34:ad:92:c8:de:
                    dc:07:d3:46:9a:9e:ed:46:4e:4a:19:fc:21:31:14:
                    49:c6:22:e0:a6:a4:5b:91:fe:91:cd:d9:32:f9:f4:
                    4c:a6:69:63:d9:59:0d:89:a4:f0:00:db:08:a5:50:
                    f3:cd:66:61:0a:e3:d6:af:b3:5e:29:47:01:f7:ef:
                    56:63:8d:02:da:6e:5a:fe:34:a8:b8:7a:6f:6b:c9:
                    d2:78:3d:0f:d2:2f:36:0f:4d:26:1f:e7:6c:bb:38:
                    27:b5:6a:a3:1d:76:5c:98:4c:e6:22:52:c7:cd:d8:
                    f7:00:ae:8f:59:a0:03:aa:f8:17:ce:0c:f5:4e:71:
                    9f:69:bf:06:58:a8:24:de:c2:be:1f:f6:4c:ab:55:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6F:CC:39:AE:D1:F9:7A:5B:3B:64:6C:E2:20:FD:25:0B:51:6A:01
            X509v3 Authority Key Identifier:
                keyid:BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/14/BACCDEF5FC02BA95006381871F2C752F8C5BB062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:85:0b:aa:ee:37:49:70:a5:52:90:a1:dc:0c:30:ed:63:51:
         3b:74:27:e5:63:85:68:1c:f2:d6:fc:ac:6d:28:3b:fa:91:a9:
         2c:79:f6:3c:64:ff:af:01:54:17:7d:47:47:a3:53:42:43:7c:
         db:18:98:ae:0b:12:f1:8d:b9:66:e7:0a:f2:c9:37:82:c9:31:
         7e:e1:07:bc:31:02:79:d8:f2:57:10:09:06:91:53:7b:c6:60:
         29:37:0c:12:b0:e0:7d:08:66:bc:e3:a6:4d:64:4c:db:5e:1d:
         a9:99:cd:ea:e2:38:c6:3c:b4:96:21:f1:36:0c:46:b2:e3:b2:
         c9:6e:0d:87:d6:04:09:e3:8b:e7:c7:74:b0:89:3f:f7:b0:15:
         da:83:17:e7:e6:3e:9a:85:d9:7b:88:9a:ae:5c:47:41:48:d4:
         b6:fa:85:e5:32:a9:f9:d1:a1:25:67:e3:c9:3a:ac:1a:6e:ac:
         41:4d:eb:49:c2:66:57:e6:29:2c:d8:e5:48:c7:14:c2:82:e1:
         da:ee:ca:75:3e:cf:db:39:28:a6:fc:97:57:52:9d:26:42:56:
         82:f8:87:8f:42:79:ab:9c:75:cd:82:77:3a:94:af:1e:f8:e5:
         f5:2b:1b:33:6b:35:27:eb:c6:0b:81:41:2a:7f:e4:30:56:5a:
         3e:a2:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----