Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2033323538.roa
File:                     36322e3130362e37302e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          U9moSH24J+rr0M7zRlZMjloWUlrUSak1D7/EQ3jBg+s=
Subject key identifier:   4F:1A:64:0C:33:19:0A:A3:22:78:3E:D1:07:E6:A6:64:A8:77:01:99
Certificate issuer:       /CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
Certificate serial:       055F34E574852CE652D16D6C53197858C8373FE6
Authority key identifier: 38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer
Subject info access:      rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2033323538.roa
Signing time:             Mon 25 Sep 2023 08:18:40 +0000
ROA not before:           Mon 25 Sep 2023 08:13:40 +0000
ROA not after:            Mon 23 Sep 2024 08:18:40 +0000
asID:                     3258
IP address blocks:        62.106.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5f:34:e5:74:85:2c:e6:52:d1:6d:6c:53:19:78:58:c8:37:3f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
        Validity
            Not Before: Sep 25 08:13:40 2023 GMT
            Not After : Sep 23 08:18:40 2024 GMT
        Subject: CN=4F1A640C33190AA322783ED107E6A664A8770199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:e5:2c:73:11:9a:12:83:72:03:ad:e8:18:
                    26:2d:87:4c:dc:12:17:9e:7d:36:45:95:61:ac:78:
                    98:40:2d:65:d9:35:13:0f:4e:e1:77:63:5c:69:e9:
                    2c:59:82:66:f2:e4:a8:75:69:e3:24:c9:e6:15:12:
                    a1:83:43:56:31:67:34:fb:6f:45:a0:64:e8:b9:4a:
                    96:4d:fe:0e:a5:57:9b:df:42:6b:0d:b9:25:59:be:
                    7a:24:1c:7a:f7:7d:c8:4c:09:dc:32:5e:63:2b:c8:
                    a6:45:03:52:e9:02:52:58:3a:b6:8c:9a:e4:05:77:
                    42:db:f2:96:7f:40:1f:1c:80:af:35:ad:51:3a:4a:
                    d2:89:46:eb:8f:a6:43:6f:3d:49:da:0c:42:33:d4:
                    bf:c9:b9:37:cc:d4:d5:16:0e:2c:47:d9:5e:77:df:
                    a3:38:0e:30:25:96:68:ec:ac:f4:28:53:5f:32:a0:
                    1b:2d:4d:39:6c:79:4c:c4:00:d5:77:00:3a:dd:6b:
                    ec:03:46:09:04:b6:e3:bf:55:80:45:3d:bf:cb:3f:
                    2d:f9:21:4a:0c:1e:ec:0e:9b:60:fc:40:6d:8c:86:
                    98:d6:c9:92:42:57:40:4b:c6:1e:16:c8:72:8c:f3:
                    86:6c:c2:de:01:fd:e6:74:28:6a:2a:54:21:ca:b0:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:64:0C:33:19:0A:A3:22:78:3E:D1:07:E6:A6:64:A8:77:01:99
            X509v3 Authority Key Identifier:
                keyid:38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/17/38C518F8A92EC7FA575B8711A95ECEA82ED002A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:05:9a:65:85:10:de:6a:d9:b8:0f:50:48:8a:09:77:64:
         29:ff:56:22:b4:81:e8:c7:42:6d:36:da:82:e7:40:5f:85:86:
         0f:36:ed:30:92:b0:8e:f4:9c:81:fe:99:9f:7f:4c:1d:41:81:
         29:3b:38:c3:b7:34:74:06:00:24:1d:95:ee:31:3e:04:cd:e2:
         27:1a:9c:0e:d7:1e:71:50:a8:dd:71:dd:0d:fd:61:d6:52:65:
         18:5b:71:8c:9d:9f:b8:ca:47:7d:f0:3d:65:34:cb:a8:20:3b:
         80:d7:cf:5b:3f:66:8e:36:af:2a:c6:84:25:03:85:8e:02:9f:
         75:dc:1d:a8:91:6f:25:bb:c1:c1:9a:78:e0:19:2c:88:48:61:
         b0:7b:e1:e3:8b:a0:ea:16:d8:d5:cb:a3:c0:5e:1b:3b:56:cb:
         45:a9:4e:58:af:7a:a2:7f:8e:81:81:8b:0c:b9:27:36:cc:b7:
         3e:34:f6:b0:7b:33:fb:4d:0c:c7:42:8e:43:63:6c:b8:cb:04:
         24:3b:42:93:de:71:34:d6:30:82:cf:b9:a1:2c:07:a5:12:6b:
         67:13:ad:f3:bd:ee:23:b7:dc:59:98:98:fa:71:c6:9b:c1:73:
         6e:2e:f9:fc:c5:9f:2f:07:88:12:f5:81:8d:50:c6:5a:74:d4:
         f4:e9:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----