Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038383838.roa
File:                     3137362e3132362e3131342e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          s1X4HLt3ILLjeyoLPnSQ5+AP5CsyWvGUEIrencj9cfY=
Subject key identifier:   1B:39:B6:97:B4:EF:21:A3:4F:E2:E0:B8:65:33:D7:C3:8F:76:96:B5
Certificate issuer:       /CN=baccdef5fc02ba95006381871f2c752f8c5bb062
Certificate serial:       7A6100DDF7DD570A8A2331BDCE5A4E146FF194DE
Authority key identifier: BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer
Subject info access:      rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:40 +0000
ROA not before:           Fri 22 Sep 2023 10:14:40 +0000
ROA not after:            Fri 20 Sep 2024 10:19:40 +0000
asID:                     8888
IP address blocks:        176.126.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:61:00:dd:f7:dd:57:0a:8a:23:31:bd:ce:5a:4e:14:6f:f1:94:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baccdef5fc02ba95006381871f2c752f8c5bb062
        Validity
            Not Before: Sep 22 10:14:40 2023 GMT
            Not After : Sep 20 10:19:40 2024 GMT
        Subject: CN=1B39B697B4EF21A34FE2E0B86533D7C38F7696B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:c2:19:f6:6c:48:82:b1:28:08:7b:8f:ec:
                    ef:fb:87:f0:9c:36:ad:0f:52:db:3a:3d:81:e7:df:
                    29:69:d0:23:d9:92:5e:a9:99:81:32:d5:f5:a9:fe:
                    7f:d4:67:3f:ad:df:57:30:eb:f9:92:a9:c7:db:0c:
                    02:c2:0f:e0:a5:f3:35:7f:1d:0a:cb:54:e3:4d:27:
                    70:d5:5f:e9:dc:f5:16:03:27:7d:89:9f:a6:12:ab:
                    f3:97:28:85:32:78:0c:22:ad:3d:f2:e7:89:2b:ed:
                    b2:54:5d:7e:7f:10:50:4b:09:f1:ce:ad:43:ac:8b:
                    c9:ea:d9:f6:01:53:d6:8a:99:62:62:fb:5c:16:eb:
                    43:83:61:53:1e:51:9a:6e:4e:40:62:96:53:6c:21:
                    eb:a5:52:0a:10:b4:e3:21:c6:7f:1e:f7:fa:da:f0:
                    e5:96:05:9e:2c:03:d8:1f:f2:4b:1b:fd:7b:0f:8c:
                    39:16:bc:06:7c:b7:f4:f8:a6:ed:59:bc:65:85:2a:
                    90:03:fc:c5:a4:ee:b8:a2:7a:f6:24:72:e6:56:c2:
                    f6:87:c0:61:5c:c9:83:df:14:29:56:b3:79:ee:b4:
                    b2:93:81:dd:16:fe:61:e0:c4:52:86:44:1d:c6:fb:
                    65:e0:16:35:3f:a2:cc:e8:cf:63:a3:6d:62:c6:ce:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:39:B6:97:B4:EF:21:A3:4F:E2:E0:B8:65:33:D7:C3:8F:76:96:B5
            X509v3 Authority Key Identifier:
                keyid:BA:CC:DE:F5:FC:02:BA:95:00:63:81:87:1F:2C:75:2F:8C:5B:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/14/BACCDEF5FC02BA95006381871F2C752F8C5BB062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usze9fwCupUAY4GHHyx1L4xbsGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/14/3137362e3132362e3131342e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:44:8f:5f:a0:a5:fd:f0:95:ea:25:9a:18:d1:c5:e0:e1:
         23:71:99:fb:e7:3d:9b:2a:e7:fc:1c:69:6a:87:73:d1:ef:19:
         7c:ca:08:07:08:18:ea:1c:b2:cd:48:b5:5b:50:aa:eb:fd:54:
         a3:4a:18:c8:92:d6:3f:55:5d:36:8f:d7:60:5f:d1:e5:ca:fe:
         a2:e8:6c:c6:51:c5:ae:04:35:eb:ba:1a:65:de:43:a4:23:21:
         f9:10:9c:e4:92:80:90:22:c9:fe:b2:84:a2:a8:26:25:5a:f8:
         83:41:cd:2c:26:b7:6b:d0:0a:68:0e:46:b5:18:10:fc:13:3a:
         50:4d:9e:ec:41:c9:ff:b2:c7:3f:5a:39:e8:91:65:1a:1b:42:
         e7:d3:ca:d6:91:eb:58:c1:e5:87:55:cc:e9:b2:5c:ed:51:fc:
         4d:b1:0b:b4:f1:28:92:2d:85:b8:31:fd:7a:20:d2:14:b2:fe:
         45:cf:89:6b:76:76:3a:af:4c:c6:2f:f4:e3:98:df:3f:7e:4e:
         ec:ba:20:9d:98:8c:df:68:e5:cd:c8:ca:69:6b:18:da:fa:19:
         60:e0:98:43:a4:c7:e6:a6:9e:54:93:5d:eb:28:9e:aa:e6:f3:
         20:06:96:2e:68:90:09:1a:9c:c8:7e:82:4e:32:75:c5:9b:83:
         c0:00:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----