Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2038313030.roa
File:                     3130392e3130372e3133372e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          It8/Smnx9yCmle+vKNTMdODi0jz5EdAMoW8Da7cBDzA=
Subject key identifier:   3C:69:A6:41:43:E7:91:32:31:56:18:4A:2D:67:27:52:42:B0:3F:93
Certificate issuer:       /CN=dfb459f0d5057f7f3e19adfcda1765ee0603acf7
Certificate serial:       12FDE521EE6FA117A4C76DF9236E2E2EFA637072
Authority key identifier: DF:B4:59:F0:D5:05:7F:7F:3E:19:AD:FC:DA:17:65:EE:06:03:AC:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37RZ8NUFf38-Ga382hdl7gYDrPc.cer
Subject info access:      rsync://0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:33 +0000
ROA not before:           Fri 21 Oct 2022 09:53:33 +0000
ROA not after:            Fri 20 Oct 2023 09:58:33 +0000
asID:                     8100
IP address blocks:        109.107.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fd:e5:21:ee:6f:a1:17:a4:c7:6d:f9:23:6e:2e:2e:fa:63:70:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb459f0d5057f7f3e19adfcda1765ee0603acf7
        Validity
            Not Before: Oct 21 09:53:33 2022 GMT
            Not After : Oct 20 09:58:33 2023 GMT
        Subject: CN=3C69A64143E791323156184A2D67275242B03F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:b0:67:43:21:20:b3:5a:a2:23:c2:12:ec:
                    0f:3e:2c:93:b4:37:b1:54:24:66:e4:8a:ac:96:b8:
                    e3:7e:57:0e:61:3c:86:21:2c:0d:30:be:72:84:24:
                    3c:27:8f:48:a5:80:d8:aa:07:bc:69:5c:b1:11:3a:
                    97:69:97:df:a9:3e:18:26:c1:31:23:73:94:d2:59:
                    73:f0:0f:7b:68:ea:e8:e9:c1:01:a2:a5:5f:ab:d5:
                    95:9e:f1:73:25:12:82:69:a3:9e:65:e0:84:e4:72:
                    ef:76:4a:0f:f3:0a:4f:89:d5:c1:5f:25:b7:e0:1c:
                    3f:a0:bf:ce:32:4a:e1:7d:c8:71:9d:7f:94:6c:45:
                    67:37:7f:45:b1:40:6a:8c:11:22:25:2d:fe:d9:0c:
                    4f:66:4f:48:27:b6:c0:43:a2:78:56:8c:d9:fe:18:
                    a3:d2:d9:38:90:ae:28:af:cd:c1:6b:02:b0:6f:7b:
                    66:35:7e:e1:1e:70:a5:94:da:32:32:eb:79:ff:9f:
                    ea:84:73:e9:0f:4b:17:d1:90:42:64:d9:8b:ab:ed:
                    23:05:52:75:36:74:5c:59:46:9a:66:db:2b:d8:a3:
                    d8:cc:ca:b9:d0:37:fa:cd:d8:d1:06:fa:2f:5d:94:
                    13:85:1d:e0:65:c6:39:99:74:d2:24:e3:36:ee:56:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:A6:41:43:E7:91:32:31:56:18:4A:2D:67:27:52:42:B0:3F:93
            X509v3 Authority Key Identifier:
                keyid:DF:B4:59:F0:D5:05:7F:7F:3E:19:AD:FC:DA:17:65:EE:06:03:AC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/15/DFB459F0D5057F7F3E19ADFCDA1765EE0603ACF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37RZ8NUFf38-Ga382hdl7gYDrPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/15/3130392e3130372e3133372e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:4b:56:86:63:e6:ec:f4:74:8b:ba:b0:f9:d0:29:de:8b:
         2c:8a:a8:be:28:a1:db:34:9f:13:3b:31:56:53:57:8d:d7:72:
         4b:3c:12:5f:61:69:07:0f:1e:d4:4d:76:87:a8:70:cc:65:ac:
         c5:1f:8d:fa:98:af:bf:b0:05:b2:c7:94:55:7d:42:f2:56:59:
         1e:0f:d6:41:ba:77:ba:62:b5:84:d8:15:54:d7:b3:68:d0:f8:
         b1:76:05:5f:01:b8:fc:c7:59:06:37:23:e1:ae:68:b7:9c:07:
         63:3b:cb:aa:65:3e:e5:90:fe:9e:c5:6c:52:2b:0f:36:a0:52:
         6e:b2:96:35:f7:1a:57:99:32:ce:c3:d4:b6:f4:85:1c:d6:17:
         db:bd:6a:bd:33:b4:af:07:d1:d4:c4:2a:14:73:c8:d7:a0:39:
         af:48:14:3f:bb:cd:b5:81:76:05:b2:4f:44:36:62:a2:97:a9:
         27:2b:a0:14:3c:b1:77:ae:a4:7d:19:c5:a1:45:b6:58:4f:92:
         4e:a7:b4:e9:8a:f7:10:2e:90:6c:39:00:be:37:95:58:ad:da:
         88:0a:aa:3e:f4:64:0f:4d:84:de:b8:30:af:6d:41:17:b6:ea:
         3f:f5:3c:a4:fd:ac:27:65:70:ac:c3:52:81:fa:48:73:00:e8:
         68:03:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----