Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038313030.roa
File:                     36322e3130362e37302e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          795NL7WFswRiGTjD+MyhrwM+AHj05UPCEMhShn1IRCA=
Subject key identifier:   CB:47:C4:2B:94:18:40:AE:75:DB:01:6E:0F:89:A6:97:A6:4C:3F:F1
Certificate issuer:       /CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
Certificate serial:       22DA0FB6D55F866CF0D446762ED25F3C57BE6B01
Authority key identifier: 38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer
Subject info access:      rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038313030.roa
Signing time:             Fri 21 Oct 2022 09:58:27 +0000
ROA not before:           Fri 21 Oct 2022 09:53:27 +0000
ROA not after:            Fri 20 Oct 2023 09:58:27 +0000
asID:                     8100
IP address blocks:        62.106.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:da:0f:b6:d5:5f:86:6c:f0:d4:46:76:2e:d2:5f:3c:57:be:6b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
        Validity
            Not Before: Oct 21 09:53:27 2022 GMT
            Not After : Oct 20 09:58:27 2023 GMT
        Subject: CN=CB47C42B941840AE75DB016E0F89A697A64C3FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:91:ca:fa:d1:f3:df:59:1f:15:6e:1a:79:74:
                    1e:f6:a1:ee:93:7a:e2:d5:a7:32:38:64:67:73:f5:
                    c5:1a:ef:b7:da:39:60:30:cd:58:b7:4d:e5:35:20:
                    5c:98:94:04:f5:f6:ae:04:63:6b:67:b4:d3:5e:ec:
                    0f:27:1f:8c:ec:86:a5:58:94:dc:35:6a:1c:e3:17:
                    c1:15:b9:eb:b1:3e:99:ac:1a:9a:f1:11:1e:d7:90:
                    f0:54:90:01:dc:3e:8c:de:48:e7:64:e8:40:54:62:
                    c2:43:ba:3a:2c:10:09:b7:ce:c8:a9:e0:ef:7b:78:
                    96:b6:07:a5:24:51:f8:8d:17:57:21:63:d4:48:63:
                    fe:5c:4d:f3:cb:35:e5:b6:fb:c8:71:dd:ae:1f:c6:
                    10:0c:19:cd:21:0b:85:c9:69:c4:65:27:46:47:56:
                    c9:70:40:c2:30:ea:61:86:a5:19:14:40:9f:2d:98:
                    2c:4b:9b:7e:8b:d3:56:da:93:61:06:13:38:ea:e0:
                    ba:70:c6:ca:e5:51:e1:2c:70:74:36:79:bb:3a:c0:
                    92:a3:07:eb:81:c6:e4:84:d9:80:ac:05:23:c3:92:
                    08:3a:7d:4b:82:a1:6c:09:2e:e7:34:ec:84:10:47:
                    17:1c:d6:c7:b1:fa:1d:80:9a:bd:3c:3a:23:21:60:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:47:C4:2B:94:18:40:AE:75:DB:01:6E:0F:89:A6:97:A6:4C:3F:F1
            X509v3 Authority Key Identifier:
                keyid:38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/17/38C518F8A92EC7FA575B8711A95ECEA82ED002A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:c2:9c:d4:83:17:6d:99:54:bc:3b:26:92:86:12:ae:3c:
         6e:4b:3c:8d:68:c8:44:8d:c0:fe:e2:8a:ba:87:27:06:1c:75:
         a6:e5:68:0e:2f:c8:0a:31:b3:78:97:dc:4a:4d:ef:95:31:3e:
         78:b8:94:16:80:8c:81:2d:2e:66:6f:2b:3c:70:bd:7a:bf:cc:
         db:72:b8:ba:e2:a2:ae:78:e9:cb:59:7c:c3:9c:9e:cc:46:78:
         f3:82:44:30:c6:47:ec:13:08:50:fc:d1:2e:44:57:20:62:b3:
         e6:9b:47:9f:34:d7:bd:76:dc:ce:47:2c:ad:7d:a7:6f:4b:db:
         02:69:8c:de:4b:c3:de:6b:d1:1f:a9:2a:f1:05:c8:20:0c:b7:
         08:64:cc:70:00:a0:db:c4:b3:05:77:c6:d5:12:1b:4f:cd:a6:
         77:39:5e:02:97:2f:32:73:cc:1a:9a:4d:b4:7d:3f:b2:cd:46:
         a2:9d:34:1b:bf:2a:d4:ba:aa:38:d6:43:0c:1b:a9:84:1e:b1:
         90:6f:4d:7b:86:13:cb:0c:cd:d9:6d:1a:dc:e2:50:fe:d6:71:
         98:94:2f:fc:7c:15:d6:fe:40:a6:07:c1:68:36:88:b6:da:db:
         a6:a2:3f:f9:0e:87:87:86:f8:ff:ac:1e:6f:d8:80:d6:1b:04:
         e2:d3:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----