Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038383838.roa
File:                     36322e3130362e37302e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          jxj2GWlfP8HnVsvy7JCKTMn8lymytnIdDRlZSxF5tmA=
Subject key identifier:   A6:4B:93:17:E1:F6:7F:3C:58:36:A6:C7:C8:45:B6:52:16:F5:0F:75
Certificate issuer:       /CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
Certificate serial:       1E4A66A750C432BC86B3CFF16506AE67458FB967
Authority key identifier: 38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer
Subject info access:      rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:36 +0000
ROA not before:           Fri 22 Sep 2023 10:14:36 +0000
ROA not after:            Fri 20 Sep 2024 10:19:36 +0000
asID:                     8888
IP address blocks:        62.106.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4a:66:a7:50:c4:32:bc:86:b3:cf:f1:65:06:ae:67:45:8f:b9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c518f8a92ec7fa575b8711a95ecea82ed002a3
        Validity
            Not Before: Sep 22 10:14:36 2023 GMT
            Not After : Sep 20 10:19:36 2024 GMT
        Subject: CN=A64B9317E1F67F3C5836A6C7C845B65216F50F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:26:4f:d2:7a:3b:bc:6d:f4:d9:97:80:74:
                    6c:73:d7:b7:ff:cf:fb:f4:9d:74:08:ae:27:43:9d:
                    bb:99:46:2e:57:f4:44:68:50:c2:d9:64:70:dc:e8:
                    f6:58:48:ae:c8:92:3c:eb:00:a7:7d:fe:e4:5a:c7:
                    1a:4c:29:be:ca:15:a4:5b:1f:80:d3:65:9a:fc:8c:
                    03:3a:04:19:83:36:2d:f9:0b:4e:85:2d:67:a2:26:
                    76:c3:40:4b:27:62:89:ce:30:bb:dd:f4:71:cd:f2:
                    6c:0b:cd:aa:33:5c:d8:cc:23:1f:82:b2:66:f9:50:
                    45:43:d0:db:e4:62:60:84:59:86:2d:03:b3:50:3a:
                    9d:c8:61:ee:bc:58:02:78:e8:8c:69:67:a9:17:8a:
                    b6:e0:ee:4f:cd:86:8e:ef:a5:36:41:df:c1:ad:ed:
                    2b:7f:3b:79:83:29:89:ed:0c:84:66:22:f8:96:f4:
                    f3:fe:6e:5d:fe:86:7a:c5:cf:bb:d3:d5:f9:77:19:
                    3c:15:8a:46:77:07:07:bf:94:53:f4:1b:40:3a:72:
                    c9:77:18:0e:02:bf:be:52:27:8f:8f:4e:1b:f1:fb:
                    7e:dd:17:34:11:49:a8:e3:90:ee:47:b1:ed:26:98:
                    76:43:e4:5a:b7:e6:d2:9b:4c:2c:26:17:71:9f:de:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4B:93:17:E1:F6:7F:3C:58:36:A6:C7:C8:45:B6:52:16:F5:0F:75
            X509v3 Authority Key Identifier:
                keyid:38:C5:18:F8:A9:2E:C7:FA:57:5B:87:11:A9:5E:CE:A8:2E:D0:02:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/17/38C518F8A92EC7FA575B8711A95ECEA82ED002A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMUY-Kkux_pXW4cRqV7OqC7QAqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/17/36322e3130362e37302e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:00:88:87:6e:6a:d4:17:7e:a8:f9:1e:8f:00:e6:26:5c:
         78:97:6a:e6:53:3b:87:7c:8a:d0:26:27:9f:39:69:3b:b5:fc:
         7a:95:57:c0:45:b3:2c:46:97:89:37:5d:8f:d1:74:10:36:5d:
         b3:b6:1a:09:0c:28:9f:0a:a5:55:1d:00:31:5e:e9:79:82:ac:
         4d:e9:b1:8a:df:83:44:95:02:9d:dc:b4:54:a8:a4:17:6b:3f:
         1c:b2:0f:41:df:d5:11:0a:ab:d8:c6:31:6d:68:fc:8a:ad:41:
         72:ba:a4:5e:7d:99:8f:3b:3b:75:09:ce:0f:c2:93:52:5a:ca:
         d4:82:73:3d:fb:a6:21:49:c1:6c:f2:77:e5:1b:32:48:98:01:
         d7:4a:a3:23:2d:e9:36:1f:b6:d5:ec:22:1d:55:99:1a:94:99:
         e0:40:7c:a7:03:9d:42:de:f4:ae:4a:8f:31:d4:f6:14:64:0e:
         79:20:3a:66:37:a6:94:bb:ed:4e:34:cf:a4:a7:1c:9c:c0:a7:
         c9:c4:78:d3:b4:e4:bf:c8:83:62:31:27:e3:5a:90:6f:d7:16:
         2b:de:dc:58:fc:e8:ac:80:23:80:3d:65:c5:6a:13:20:93:84:
         89:9a:2d:31:cd:6d:39:26:33:e4:61:10:6d:e1:86:9c:4f:a7:
         d2:c4:98:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----