Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2038383838.roa
File:                     3134362e31392e3136332e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          SJbZq5D1y7WRSCC6Nx4aw2jk9Gp6VNPUMO/MDN9ZRNU=
Subject key identifier:   60:41:EF:FF:B9:48:F5:11:1D:07:0B:D7:CB:E3:33:24:5B:BC:DF:05
Certificate issuer:       /CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
Certificate serial:       459E2DDEF8672812B369F3A8976365E59C922A36
Authority key identifier: 33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer
Subject info access:      rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:37 +0000
ROA not before:           Fri 22 Sep 2023 10:14:37 +0000
ROA not after:            Fri 20 Sep 2024 10:19:37 +0000
asID:                     8888
IP address blocks:        146.19.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9e:2d:de:f8:67:28:12:b3:69:f3:a8:97:63:65:e5:9c:92:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338beb75b4dfe20926d69c4bc72a2ad3cf632c0e
        Validity
            Not Before: Sep 22 10:14:37 2023 GMT
            Not After : Sep 20 10:19:37 2024 GMT
        Subject: CN=6041EFFFB948F5111D070BD7CBE333245BBCDF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:fb:47:00:37:36:94:5e:10:d7:f6:5f:46:
                    16:c5:aa:82:33:77:22:a5:e6:cb:68:91:11:b2:ad:
                    0e:7c:5d:07:02:77:e8:e7:00:a6:84:4f:17:c1:61:
                    00:55:c3:e8:b6:2e:fe:97:fe:2f:30:f9:af:fe:85:
                    3a:ff:ce:96:19:20:48:c5:43:fb:82:13:94:c6:b8:
                    12:76:ba:81:97:78:68:09:a5:34:0b:80:7d:b6:64:
                    84:3a:a0:37:28:18:7a:cb:e0:dc:08:8b:32:0c:f9:
                    71:5a:ee:d2:d5:14:38:1e:3a:07:73:b1:27:35:65:
                    83:db:b7:34:38:7c:c5:57:c0:56:bc:b7:c7:69:ce:
                    28:80:dd:f7:b7:82:e5:7b:5d:7c:c1:19:7a:90:83:
                    60:6d:8b:3c:ec:0f:12:00:6d:cc:9c:e4:58:d5:0d:
                    85:cd:95:26:97:b6:73:31:10:22:68:13:ef:45:76:
                    b3:b9:68:b7:e6:89:11:cd:60:b3:5c:a2:68:bd:e5:
                    2d:61:6c:71:db:4c:73:6c:97:01:c9:31:1d:ae:6d:
                    fe:75:ca:f1:35:6f:93:e5:14:69:33:3b:fd:22:6b:
                    2b:20:5c:d7:cd:f9:da:b4:c7:34:8c:78:ca:5c:5a:
                    01:c4:cb:02:7c:49:84:3a:fb:e8:3c:e1:46:f9:e9:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:EF:FF:B9:48:F5:11:1D:07:0B:D7:CB:E3:33:24:5B:BC:DF:05
            X509v3 Authority Key Identifier:
                keyid:33:8B:EB:75:B4:DF:E2:09:26:D6:9C:4B:C7:2A:2A:D3:CF:63:2C:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/19/338BEB75B4DFE20926D69C4BC72A2AD3CF632C0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4vrdbTf4gkm1pxLxyoq089jLA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/19/3134362e31392e3136332e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:50:75:4e:31:3d:d6:68:a9:21:bb:56:ff:35:4a:b8:63:f1:
         8b:fa:ac:53:2b:5a:55:6e:bb:42:9b:3a:10:03:39:45:09:01:
         1f:97:14:90:0e:02:a5:36:ff:0e:fa:46:ea:a2:3c:62:c8:02:
         51:11:19:53:09:9c:cd:48:61:75:38:91:53:66:e9:56:20:32:
         82:ac:21:58:40:79:6a:2c:24:74:ae:ac:10:f0:aa:c8:a9:6e:
         de:83:48:3d:16:94:33:5d:f4:12:a8:0f:b2:78:7e:4a:c3:09:
         86:a5:10:6f:59:f0:e2:11:ef:82:77:8a:4e:b0:73:7f:86:1b:
         2a:88:39:6e:54:e1:01:bb:c7:51:83:81:36:6f:9f:f4:01:65:
         8a:01:be:f3:60:49:2c:85:71:f6:ab:54:37:fe:fc:2d:34:62:
         2f:69:16:96:8c:13:a1:44:82:f4:e8:c2:e5:43:43:6f:84:5d:
         66:7b:a2:d5:af:66:a0:eb:a0:22:15:2f:28:f2:ac:d7:1a:ee:
         34:d6:f8:d7:69:63:6b:8f:06:4d:ab:44:32:7b:86:15:3e:77:
         fd:9f:46:8c:c2:8b:86:7d:89:45:8e:f5:27:e7:c0:32:c8:01:
         35:ba:7e:59:da:36:d3:95:81:24:a7:e6:bd:5d:4b:87:3b:61:
         47:d1:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----