Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/18/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa
File:                     3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          YyKv/s2kUmhGdKdqOqYNC/YasDgeIMhzGydzgEV+wGU=
Subject key identifier:   9B:CE:27:5B:6E:30:B3:7C:71:4A:17:80:39:B7:04:03:57:D0:F1:8A
Certificate issuer:       /CN=02c55f096f14bd03d173f65d1415a3355b6ed57f
Certificate serial:       22D2FE0950A39204898725AEDCF7DB833A73E446
Authority key identifier: 02:C5:5F:09:6F:14:BD:03:D1:73:F6:5D:14:15:A3:35:5B:6E:D5:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsVfCW8UvQPRc_ZdFBWjNVtu1X8.cer
Subject info access:      rsync://0.sb/repo/sb/18/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:33 +0000
ROA not before:           Fri 22 Sep 2023 10:14:33 +0000
ROA not after:            Fri 20 Sep 2024 10:19:33 +0000
asID:                     8888
IP address blocks:        146.19.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d2:fe:09:50:a3:92:04:89:87:25:ae:dc:f7:db:83:3a:73:e4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c55f096f14bd03d173f65d1415a3355b6ed57f
        Validity
            Not Before: Sep 22 10:14:33 2023 GMT
            Not After : Sep 20 10:19:33 2024 GMT
        Subject: CN=9BCE275B6E30B37C714A178039B7040357D0F18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:47:0f:97:40:34:34:dc:de:12:30:cd:7f:
                    d2:10:ac:93:d1:6d:e1:6b:4f:e5:ba:64:5f:51:2a:
                    d2:44:f7:07:ea:e1:09:a9:2e:e0:69:a9:c7:7a:63:
                    c6:64:ae:1d:0e:a6:2c:6b:2d:7c:7a:ff:63:b2:05:
                    07:dc:f4:32:9e:d3:67:46:47:33:b5:67:c6:7b:d9:
                    5b:34:2a:5e:84:19:16:34:af:9b:99:60:e5:2c:f7:
                    9e:9c:ee:44:e8:70:10:d0:8c:a1:bb:76:1f:16:22:
                    d7:4f:8c:04:d5:db:df:ca:ff:08:fc:ba:3e:e1:57:
                    54:39:7c:8d:0e:25:3f:6b:8a:d0:d8:d4:3f:dd:6e:
                    a2:83:f0:25:ba:f2:45:60:c0:b8:77:22:87:ba:0f:
                    4b:aa:3c:08:38:9c:eb:f7:30:1b:73:60:33:32:ff:
                    0e:da:16:ec:33:a5:04:ae:3a:ee:45:12:47:f3:44:
                    11:b6:a8:78:12:be:6e:f6:51:33:ec:5b:0f:98:45:
                    29:6b:7a:30:fb:28:9e:84:be:95:0d:cb:97:a2:7e:
                    21:e3:13:40:8b:f1:93:95:86:0e:be:a1:a4:78:c0:
                    16:a9:25:d0:fc:5f:5c:58:5d:e5:1a:46:c6:9e:17:
                    c8:0a:72:78:a7:be:14:a2:77:93:c6:d5:4a:d2:51:
                    a4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:27:5B:6E:30:B3:7C:71:4A:17:80:39:B7:04:03:57:D0:F1:8A
            X509v3 Authority Key Identifier:
                keyid:02:C5:5F:09:6F:14:BD:03:D1:73:F6:5D:14:15:A3:35:5B:6E:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/18/02C55F096F14BD03D173F65D1415A3355B6ED57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsVfCW8UvQPRc_ZdFBWjNVtu1X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/18/3134362e31392e3134352e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:92:06:67:cd:86:f8:e3:a8:03:3b:eb:f9:78:28:49:74:
         65:c5:73:18:a5:3e:05:10:d7:1d:ed:c3:7e:20:44:07:7e:c9:
         71:1d:c0:67:36:b9:90:51:fa:31:ab:82:aa:da:50:07:0c:18:
         d4:58:4e:0c:19:94:3c:a3:ae:13:0c:5a:8d:81:ec:74:46:ba:
         51:52:80:f2:45:ca:fd:99:d3:48:ee:0f:86:86:97:b1:5d:77:
         be:cb:d0:1d:53:8d:04:aa:2e:6d:80:f2:1d:df:80:ca:54:c1:
         37:78:62:bc:0a:8e:96:cf:39:75:4f:19:5a:94:1f:7d:e1:73:
         a9:9b:da:7a:bc:cf:1f:58:bc:5a:1b:f8:0e:dc:24:97:db:18:
         3e:3c:95:cb:fa:b7:fe:83:71:e7:8c:ab:4f:92:61:95:42:0f:
         f4:2d:dc:6e:04:71:c2:71:24:cb:e9:ad:34:35:8c:0f:e0:9e:
         be:9b:d2:28:cb:73:af:d3:66:5f:d0:50:d3:6f:76:fb:6f:f4:
         21:26:c5:1c:85:83:18:cc:15:37:9c:0d:15:78:95:91:a0:8a:
         21:99:4f:55:da:5e:fc:29:5d:38:b2:43:ca:25:3b:fc:f8:52:
         f4:39:e0:6b:b3:38:aa:a5:92:2c:52:79:92:4b:d3:d9:f7:a9:
         1b:da:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----