Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2033323538.roa
File:                     3130392e3130372e3134302e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          owd0feABgsSTURNLEorm1HkF5pinu3cbeQzYBirxaH0=
Subject key identifier:   AC:CC:D5:13:85:39:35:E0:C8:06:68:1F:C4:E7:71:19:9A:2B:0E:31
Certificate issuer:       /CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
Certificate serial:       4B1636DCDE04030AE1D9B2504D04B50CE058A277
Authority key identifier: 79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer
Subject info access:      rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2033323538.roa
Signing time:             Mon 25 Sep 2023 08:18:13 +0000
ROA not before:           Mon 25 Sep 2023 08:13:13 +0000
ROA not after:            Mon 23 Sep 2024 08:18:13 +0000
asID:                     3258
IP address blocks:        109.107.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:16:36:dc:de:04:03:0a:e1:d9:b2:50:4d:04:b5:0c:e0:58:a2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796cc107ee82f70aa90de4466cd1cfcc166e90cc
        Validity
            Not Before: Sep 25 08:13:13 2023 GMT
            Not After : Sep 23 08:18:13 2024 GMT
        Subject: CN=ACCCD513853935E0C806681FC4E771199A2B0E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:58:b1:fd:9c:a3:e8:de:8c:99:01:6d:38:
                    f2:9a:7c:cc:bd:2f:84:15:ea:93:7b:96:b4:52:57:
                    ed:85:9f:6b:2d:f5:2d:f3:61:1c:49:4d:3e:cf:6b:
                    a1:56:d9:0b:01:83:22:79:71:97:ca:bf:c7:5d:a2:
                    14:f9:7d:74:c6:26:e9:ab:5b:90:53:9c:9a:44:7c:
                    47:d1:be:2c:94:0b:f9:1a:a4:dc:ff:e6:51:dd:dc:
                    7b:7b:31:6e:7b:18:84:3d:c6:f4:c5:7b:fe:34:68:
                    5d:e2:a3:f3:6f:95:56:95:1f:fb:63:4d:f3:ff:86:
                    99:29:ff:66:6c:95:55:e8:f7:31:6d:30:5c:6f:a1:
                    c0:46:9d:82:cd:a1:91:d1:92:a7:43:de:b5:91:53:
                    6c:5b:81:ee:35:a0:8c:ec:df:94:bf:e2:5f:1e:b2:
                    fe:5f:ad:74:d1:71:d3:0e:ab:8d:98:f6:f9:6b:c1:
                    28:78:f9:df:7e:c8:f3:b9:d4:e3:38:e2:aa:74:f4:
                    63:b8:81:03:5c:09:21:5f:86:03:99:85:28:d8:ec:
                    3d:14:07:6b:ac:f1:0e:4d:e7:77:cb:3b:f1:43:1e:
                    7e:fe:ff:02:10:b6:43:4d:c1:9a:78:59:0b:a8:88:
                    f6:28:f3:65:0c:bf:80:47:7b:17:ab:69:84:ab:5b:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:D5:13:85:39:35:E0:C8:06:68:1F:C4:E7:71:19:9A:2B:0E:31
            X509v3 Authority Key Identifier:
                keyid:79:6C:C1:07:EE:82:F7:0A:A9:0D:E4:46:6C:D1:CF:CC:16:6E:90:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/16/796CC107EE82F70AA90DE4466CD1CFCC166E90CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWzBB-6C9wqpDeRGbNHPzBZukMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/16/3130392e3130372e3134302e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.107.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:bc:3e:4f:a5:e3:db:b5:2a:a6:b2:c4:78:79:4a:55:51:
         21:1b:94:dd:0b:5e:e9:ed:7d:8b:1c:a4:81:8a:0b:af:d5:d8:
         ea:21:12:fa:ae:de:64:32:34:46:df:6e:cf:fb:ec:28:20:7d:
         c0:0a:28:c2:e5:95:6b:de:f0:56:0c:47:52:a7:a3:49:8f:fa:
         40:d7:70:a0:43:6f:a4:70:5f:79:3e:8d:94:d9:c5:3e:ad:ac:
         86:e8:d3:16:d0:c2:15:41:93:2e:d7:df:a8:d3:f1:e1:f0:90:
         84:b8:84:28:bb:6e:e7:2b:a4:62:7b:52:1c:c0:42:13:7f:c4:
         14:61:a6:ca:6e:d3:c9:f4:7c:d3:e9:6f:b2:b8:e4:08:e3:95:
         46:09:b1:a4:99:65:ce:41:76:39:54:00:51:9f:d9:9b:24:a7:
         58:d5:e7:ff:7f:c5:22:78:fd:9c:07:07:28:b3:99:1b:63:1c:
         2e:52:2f:d1:55:c0:e1:79:d9:41:53:69:50:90:d2:d8:a4:8c:
         d7:6d:9f:a4:a0:4c:12:83:c6:35:d0:7a:cd:ed:75:fd:fe:29:
         27:89:40:45:a3:a9:0b:0b:13:ed:1c:1b:81:0c:5f:d0:0f:7f:
         02:c3:77:76:55:73:87:9b:18:47:5f:bd:36:51:7c:66:58:f2:
         4e:7b:20:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----