Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2033323538.roa
File:                     3130392e3130372e3133372e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          M4H1ixHoMQa31edWgfK6MzOtajsEpjhl2cigcvdYCGc=
Subject key identifier:   46:64:F7:45:B7:7F:6F:DA:CA:AA:00:FC:C8:CF:72:70:8C:86:22:AC
Certificate issuer:       /CN=dfb459f0d5057f7f3e19adfcda1765ee0603acf7
Certificate serial:       0BB3082F1B8A481059ECE1561A8CE4ACCDEA1164
Authority key identifier: DF:B4:59:F0:D5:05:7F:7F:3E:19:AD:FC:DA:17:65:EE:06:03:AC:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37RZ8NUFf38-Ga382hdl7gYDrPc.cer
Subject info access:      rsync://0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2033323538.roa
Signing time:             Mon 25 Sep 2023 08:17:56 +0000
ROA not before:           Mon 25 Sep 2023 08:12:56 +0000
ROA not after:            Mon 23 Sep 2024 08:17:56 +0000
asID:                     3258
IP address blocks:        109.107.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b3:08:2f:1b:8a:48:10:59:ec:e1:56:1a:8c:e4:ac:cd:ea:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb459f0d5057f7f3e19adfcda1765ee0603acf7
        Validity
            Not Before: Sep 25 08:12:56 2023 GMT
            Not After : Sep 23 08:17:56 2024 GMT
        Subject: CN=4664F745B77F6FDACAAA00FCC8CF72708C8622AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:01:21:9a:e5:a0:5c:97:1f:5c:28:20:9d:
                    71:9b:51:3d:bb:31:f8:50:2f:cb:09:9c:e3:42:cb:
                    67:69:1a:c3:01:00:ff:f8:5c:a7:c9:6d:d5:5b:3c:
                    44:42:7a:12:eb:a4:33:e8:21:6b:da:83:69:10:98:
                    45:1c:02:a2:e5:98:89:51:b4:4d:d8:2f:f1:53:a4:
                    3e:2f:2d:6e:24:24:7d:7c:a3:f1:57:28:81:33:6e:
                    df:65:53:e3:11:07:82:5a:ff:b8:fd:f9:c7:37:8b:
                    21:c4:7c:42:93:27:c3:ff:10:f5:5b:12:61:8a:ca:
                    47:5a:6a:f9:55:69:63:fe:2b:93:2c:aa:3e:90:b7:
                    cf:f2:73:16:e2:3d:e5:9e:f3:c7:7d:1a:78:31:39:
                    4d:49:87:12:c1:16:17:be:e0:c4:b4:58:87:fe:88:
                    27:fc:f1:e2:fa:3f:4b:aa:04:b8:44:cb:34:b1:cf:
                    9a:01:29:e6:70:df:80:69:ac:be:49:a9:af:4c:54:
                    db:81:65:bc:cd:84:c1:fd:6a:7e:cc:40:ca:8b:db:
                    4a:57:bd:ff:8b:c3:05:17:a2:99:70:92:65:73:f5:
                    63:66:b8:21:41:44:79:a8:c7:cc:d1:89:78:50:0b:
                    f4:b0:0a:9b:c4:18:b2:c5:c3:eb:9f:ef:68:66:38:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:64:F7:45:B7:7F:6F:DA:CA:AA:00:FC:C8:CF:72:70:8C:86:22:AC
            X509v3 Authority Key Identifier:
                keyid:DF:B4:59:F0:D5:05:7F:7F:3E:19:AD:FC:DA:17:65:EE:06:03:AC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/15/DFB459F0D5057F7F3E19ADFCDA1765EE0603ACF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37RZ8NUFf38-Ga382hdl7gYDrPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:f3:e3:86:28:74:3a:1a:06:47:04:b6:41:76:39:2e:ec:
         96:d9:4a:60:bc:c8:e3:18:19:bd:51:2c:3f:38:eb:75:89:7a:
         70:13:4a:d2:60:fe:07:d8:78:b4:7f:f3:aa:7f:16:98:57:3e:
         d3:58:a4:a7:4d:b5:85:40:6d:b9:38:76:c6:4e:e3:05:fe:27:
         c1:85:5f:3e:72:3a:11:12:96:f0:32:0e:a6:45:25:45:42:46:
         01:3e:36:aa:13:d4:c9:96:e2:50:e6:59:5e:3c:d1:57:aa:0f:
         3f:a1:b4:b3:bb:61:4a:fe:b3:7f:72:17:56:21:2a:00:0d:7f:
         89:05:a8:ee:75:d7:1a:df:1d:99:28:40:7c:8a:c0:14:24:ce:
         17:4a:91:12:b6:88:06:d3:c1:78:4b:ac:84:bd:97:c0:92:ca:
         cb:3a:82:bc:83:73:97:1e:77:30:15:78:10:d6:b7:32:bf:09:
         57:47:59:14:79:d3:6b:e9:53:95:6e:2c:9b:9c:cc:42:41:34:
         d4:a0:79:69:05:bc:3a:7c:f9:e2:e0:8a:c8:81:8f:22:f8:1b:
         a9:ef:ec:6c:22:6a:91:c5:96:89:e5:7f:e3:f6:f5:01:a1:22:
         a5:9e:2f:b5:b6:ec:e3:ba:45:19:ed:1e:2d:58:56:d8:a2:ec:
         1a:ce:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----