Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/3134362e31392e31392e302f32342d3234203d3e2033323538.roa
File:                     3134362e31392e31392e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          4mkKvKIbvGw+PhD6tBpHV/fDT/i/Sgn9ogrxw8kOf5Q=
Subject key identifier:   70:C8:47:FD:30:24:A4:E4:54:72:37:EB:DF:18:34:E0:15:67:1A:DA
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       72FDDBD1C9FB8960254DCE1B47698CC92C28DF4E
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/3134362e31392e31392e302f32342d3234203d3e2033323538.roa
Signing time:             Tue 26 Sep 2023 16:59:34 +0000
ROA not before:           Tue 26 Sep 2023 16:54:34 +0000
ROA not after:            Tue 24 Sep 2024 16:59:34 +0000
asID:                     3258
IP address blocks:        146.19.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fd:db:d1:c9:fb:89:60:25:4d:ce:1b:47:69:8c:c9:2c:28:df:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 26 16:54:34 2023 GMT
            Not After : Sep 24 16:59:34 2024 GMT
        Subject: CN=70C847FD3024A4E4547237EBDF1834E015671ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:ea:6c:a4:69:0c:c2:ac:33:35:1f:07:ca:
                    23:69:18:88:c9:ee:ff:fb:83:80:c1:47:d8:e3:79:
                    28:a7:62:86:ed:bf:9b:5e:e3:5d:a2:db:6e:0d:e3:
                    51:d9:f8:0d:f5:e4:39:e6:f4:66:76:d3:2a:43:6d:
                    47:89:23:ae:72:1f:93:31:a7:1a:b1:f6:12:df:0f:
                    c5:59:f1:0d:ee:e1:71:04:ba:25:54:f2:aa:27:4e:
                    9a:11:0b:f6:9a:de:d6:05:77:ef:d6:88:4d:4a:d5:
                    be:90:86:00:b5:85:1c:02:8d:5f:3f:5d:1d:f0:f9:
                    2f:5a:d3:f6:df:c3:43:af:d8:be:58:79:41:39:b4:
                    2f:d4:dc:0e:de:86:c8:bb:84:7f:52:ff:2a:1b:e7:
                    9d:11:45:25:b7:95:60:d1:6a:98:c5:d2:a9:59:6f:
                    03:52:1a:50:da:04:a9:ad:2d:d6:f4:0c:3c:02:2c:
                    a5:ae:03:0c:69:9a:8d:c7:72:81:66:8c:70:6b:82:
                    de:7c:d3:eb:ff:dc:e6:8a:23:94:73:b2:36:94:38:
                    1d:18:9c:c0:7b:e2:b6:9e:74:64:42:9f:ed:04:fb:
                    d9:86:f0:2b:31:f8:ca:67:2d:45:aa:6e:55:28:c3:
                    a6:ad:39:a2:da:92:0d:5b:2e:72:5a:15:41:d2:4f:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C8:47:FD:30:24:A4:E4:54:72:37:EB:DF:18:34:E0:15:67:1A:DA
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/3134362e31392e31392e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:20:03:23:2f:cf:da:b6:50:01:5f:77:66:a4:bd:60:40:93:
         79:56:2b:2e:fa:ca:18:92:37:0e:50:7b:a8:ba:b2:ab:1d:93:
         4d:6f:db:4c:3f:8a:9f:8d:d8:f6:47:68:2d:15:b5:86:7c:f2:
         34:95:74:b6:98:30:f1:9f:d3:0d:bb:87:8f:54:71:24:ac:fd:
         cc:26:d1:1e:ca:a0:af:a2:12:3f:b1:06:b4:59:c7:13:0a:59:
         32:af:cf:9d:a0:2f:d8:33:99:6c:d4:54:e3:73:9a:62:69:78:
         0a:d8:a2:ae:4a:2d:48:10:2d:80:f2:a6:40:6e:b8:96:f5:de:
         47:46:2e:b0:c1:c7:3d:c1:a8:1d:0e:c7:66:60:b7:2b:4f:5b:
         d6:6e:6a:76:90:9f:c4:be:68:a9:a6:22:5e:b7:c5:58:3e:d1:
         7b:0e:52:c8:bd:a9:d2:f5:f9:48:1e:7d:28:a5:98:66:e4:c0:
         d7:ef:8b:6c:77:3f:31:2b:da:4c:5e:d2:0b:73:64:e6:71:ae:
         45:d2:00:41:7c:71:ca:b4:fa:62:a8:06:8f:b2:22:72:93:27:
         45:73:c9:d1:21:5d:bb:f9:5d:fa:6b:b2:f8:4d:05:40:0b:fc:
         45:55:a9:a0:d4:14:f7:71:e7:fc:ef:40:34:68:bc:fb:f2:07:
         98:46:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----