Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2034373835.roa
File:                     3134362e31392e3136332e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier:          GGKJs+nsHTsYTwGD+lz0wn6B+0a9eVCCnnEq+isUhXw=
Subject key identifier:   74:A1:9B:AA:0E:55:FB:F8:93:4B:6B:CF:AF:6B:2E:57:EA:51:96:7B
Certificate issuer:       /CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
Certificate serial:       4CE817CB4947131F9E0BF8DCA8268EA53ABFE890
Authority key identifier: 33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer
Subject info access:      rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2034373835.roa
Signing time:             Fri 22 Sep 2023 10:19:36 +0000
ROA not before:           Fri 22 Sep 2023 10:14:36 +0000
ROA not after:            Fri 20 Sep 2024 10:19:36 +0000
asID:                     4785
IP address blocks:        146.19.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e8:17:cb:49:47:13:1f:9e:0b:f8:dc:a8:26:8e:a5:3a:bf:e8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
        Validity
            Not Before: Sep 22 10:14:36 2023 GMT
            Not After : Sep 20 10:19:36 2024 GMT
        Subject: CN=74A19BAA0E55FBF8934B6BCFAF6B2E57EA51967B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:d3:68:99:87:fe:04:c3:1a:73:3a:8a:a4:
                    af:a8:97:4d:8f:21:9b:47:12:f1:78:78:db:d0:52:
                    49:41:a5:eb:40:c8:d1:8a:c1:9c:f7:9b:0b:07:81:
                    20:56:0c:1b:1c:8b:15:eb:86:9f:0a:f5:d3:fd:41:
                    e0:87:5a:6b:fd:c2:bc:5d:e6:47:8e:47:f3:1e:df:
                    22:b5:68:47:2f:1e:b2:13:29:3d:dd:5f:d7:b7:71:
                    a4:42:02:a4:bf:da:36:04:b7:bd:41:86:40:6a:0c:
                    2c:13:88:52:6a:84:bf:f9:54:c5:59:ea:ea:4b:aa:
                    cc:1c:f6:13:ac:7b:ab:1f:4e:be:ea:c2:f6:b2:97:
                    63:19:91:2a:1b:bd:0c:b3:c0:5b:28:39:6e:13:00:
                    2a:5d:33:c4:d9:71:73:2e:dd:5c:cd:4f:8f:cd:b6:
                    ea:7b:b3:dc:80:ac:49:ad:fd:51:c4:38:a5:39:9f:
                    a3:5d:8d:0a:a2:03:68:65:f6:14:b1:cd:88:b7:ef:
                    48:bf:56:55:e4:b2:fa:8e:05:cc:ff:a2:86:cd:6f:
                    64:af:00:b5:37:11:1a:9f:ce:9b:0e:cf:35:86:8e:
                    d8:99:ef:1b:d2:85:aa:ea:db:32:3d:2b:43:9b:85:
                    63:ed:0d:e6:66:4a:b4:24:98:8b:d4:d6:b4:a1:de:
                    89:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:9B:AA:0E:55:FB:F8:93:4B:6B:CF:AF:6B:2E:57:EA:51:96:7B
            X509v3 Authority Key Identifier:
                keyid:33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/19/338BEB75B4DFE20926D69C4BC72A2AD3CF632C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2034373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:13:6e:d9:f3:86:68:77:0d:d3:f2:26:48:83:89:ba:33:e3:
         37:89:95:6a:d8:98:9d:87:95:c5:aa:53:18:52:40:aa:72:e9:
         f0:81:c9:0e:d3:90:b0:52:93:04:b0:46:0f:87:85:c2:f0:a1:
         1a:61:68:02:0a:7c:41:52:b4:0d:88:76:1c:56:84:13:f5:d3:
         a5:09:d7:02:41:ad:d0:82:5a:4e:08:4a:7b:f2:2e:e8:6b:8c:
         00:f6:19:3c:0c:92:3f:dc:ce:81:39:c5:03:45:2a:8d:d3:4e:
         7d:8f:45:0b:8c:63:83:1f:33:2e:a0:77:0c:e7:5e:7f:aa:d1:
         9b:74:a2:d7:59:94:09:ef:c7:8f:96:87:99:e6:0b:af:70:a0:
         e1:0a:b1:4d:45:1f:a4:49:6d:d5:01:4b:8d:f1:41:32:ed:46:
         c2:96:d6:86:68:d8:ca:30:bf:e1:4c:3f:56:e9:ef:ea:a3:4b:
         72:69:42:16:05:1d:de:6b:39:ee:29:53:ad:36:93:e3:b4:da:
         72:e0:0c:26:51:ad:ea:44:4f:e5:e8:ec:ba:8e:c7:02:db:73:
         e1:a9:da:e0:61:bc:38:46:39:b9:ea:b6:c8:df:57:4c:0e:5a:
         d1:e2:9c:12:67:6e:a7:99:f2:94:6b:fb:0d:16:f8:2a:06:16:
         40:e1:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----