Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233373438.roa
File:                     326131323a613330303a3a2f32392d3438203d3e203233373438.roa (raw, json)
Hash identifier:          wbSFZWUy+lvl7tFEHtXBbXN5TYuFW00i3e82+eU1f2k=
Subject key identifier:   5C:EF:E8:90:E1:2C:D8:26:50:2F:EE:39:35:34:28:FD:E1:E3:A1:79
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       604DCC68A3CC53B3115498A1997B7645C9DF08
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233373438.roa
Signing time:             Fri 22 Sep 2023 10:19:38 +0000
ROA not before:           Fri 22 Sep 2023 10:14:38 +0000
ROA not after:            Fri 20 Sep 2024 10:19:38 +0000
asID:                     23748
IP address blocks:        2a12:a300::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4d:cc:68:a3:cc:53:b3:11:54:98:a1:99:7b:76:45:c9:df:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:38 2023 GMT
            Not After : Sep 20 10:19:38 2024 GMT
        Subject: CN=5CEFE890E12CD826502FEE39353428FDE1E3A179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:13:7f:a0:bd:42:11:f9:12:6a:b2:02:f7:
                    61:12:7e:bb:f5:4c:52:a4:f7:61:b7:0c:a9:b4:c6:
                    5d:e3:1c:b2:ba:eb:18:0f:d2:a5:d4:90:87:02:b5:
                    a2:df:eb:ce:a6:e8:3f:76:ac:bc:41:1c:99:85:f0:
                    09:38:f6:91:e2:f6:ca:7e:94:20:6c:7d:e7:17:47:
                    d4:ff:55:8f:4c:a9:60:bc:95:4a:c1:54:a0:81:f0:
                    16:ea:51:16:1f:e5:b5:31:d7:df:fa:c0:36:a7:a3:
                    62:42:97:a7:0e:63:2f:9e:8e:bf:25:cb:b2:d0:c5:
                    60:e6:87:0e:e1:b9:d2:00:e3:cf:42:f4:da:05:2f:
                    23:5b:d4:a6:cd:77:f9:63:59:23:cd:91:c7:75:8f:
                    72:84:02:2f:1b:ec:be:64:34:ab:2c:cc:63:f2:64:
                    d5:65:52:6b:a6:5c:30:4b:88:99:80:df:2c:8f:cc:
                    97:ff:06:e3:ce:f0:77:84:9e:ba:a8:c6:d9:7e:6b:
                    3b:82:9c:a9:f8:b9:36:cb:8f:ab:c0:83:b4:fc:e3:
                    50:25:6d:e2:2d:27:e3:6f:4a:e1:8d:5d:4a:79:f5:
                    69:a0:48:3d:d4:66:15:0b:59:fe:68:3f:0c:29:90:
                    98:11:39:21:a8:eb:15:ad:30:a2:e7:af:2b:97:01:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EF:E8:90:E1:2C:D8:26:50:2F:EE:39:35:34:28:FD:E1:E3:A1:79
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:33:01:2d:bc:90:c1:66:48:39:aa:5f:fa:b6:b3:c9:bf:b5:
         61:e4:66:86:b8:b6:ed:f5:b3:35:b4:6e:fb:92:7b:62:6a:52:
         54:1a:53:ff:24:a5:7d:f6:7d:e9:22:4b:74:83:53:f6:5b:32:
         83:ec:6f:78:0e:6b:b0:33:11:f1:97:7c:43:3a:a8:db:f6:7c:
         23:5f:56:db:8b:14:93:aa:55:65:74:68:0f:7d:6a:1b:ec:09:
         bc:29:4a:c6:53:d0:95:d9:18:20:32:59:89:e8:9d:49:a4:bd:
         49:0c:c6:ad:a5:8c:34:e3:75:ea:3d:64:4d:00:f9:08:87:b7:
         5f:cd:e0:f7:a2:74:23:48:02:f8:08:5a:5a:e7:62:a1:ad:0e:
         2c:a0:5d:36:7b:12:67:df:f7:4c:3f:d8:63:11:a0:29:ed:fc:
         54:13:d4:37:80:8f:75:cc:03:f8:23:f0:0d:ba:35:5e:61:0b:
         33:61:28:f9:8f:39:ee:41:33:c9:a2:3a:92:05:ad:88:e9:7a:
         95:3a:3a:fe:8b:39:f2:5c:0d:9b:f9:d1:2e:c4:b3:79:90:1a:
         b6:25:f2:49:af:47:24:c3:d8:81:a3:1f:fc:c9:45:21:52:f1:
         a3:cc:d4:51:08:02:4e:14:ad:db:8a:b2:1c:cb:b3:c9:68:a5:
         7e:99:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----