Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233393539.roa
File:                     326131323a613330303a3a2f32392d3438203d3e203233393539.roa (raw, json)
Hash identifier:          DUkPt6nFwiznBkdv5MUMvMdDFyMg6sBrtoCLQX73Pf8=
Subject key identifier:   E1:6C:88:87:EA:A6:72:64:F9:63:30:7B:1C:FE:CD:B6:ED:43:07:C9
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       13D7A68F621384FAF64C15A3B3B27CBACCAF1A63
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233393539.roa
Signing time:             Tue 02 May 2023 17:30:26 +0000
ROA not before:           Tue 02 May 2023 17:25:26 +0000
ROA not after:            Tue 30 Apr 2024 17:30:26 +0000
asID:                     23959
IP address blocks:        2a12:a300::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:a6:8f:62:13:84:fa:f6:4c:15:a3:b3:b2:7c:ba:cc:af:1a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: May  2 17:25:26 2023 GMT
            Not After : Apr 30 17:30:26 2024 GMT
        Subject: CN=E16C8887EAA67264F963307B1CFECDB6ED4307C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:21:3d:6c:d8:0c:41:bc:6e:c7:f6:7d:ab:
                    61:3b:2d:e8:d7:dc:1d:60:43:1a:88:45:7d:00:52:
                    60:cc:a7:35:0d:16:5e:bd:91:c2:df:6c:f9:ad:80:
                    a5:d2:81:14:61:82:df:a7:ca:37:7b:eb:ff:b3:c9:
                    b6:5d:ed:c0:13:b1:8a:2d:63:6f:25:8e:81:39:75:
                    64:d6:74:32:8c:1c:b1:17:ad:93:29:47:d6:7e:ec:
                    5c:bf:4f:d2:18:b0:d4:a1:6a:64:c2:b6:40:4f:22:
                    e7:a7:5b:6e:d7:c2:78:21:ea:ba:e5:1c:2b:e4:b8:
                    16:69:47:41:8f:ad:ba:2b:48:e0:ca:da:f8:ab:f7:
                    84:0f:3f:c2:19:08:df:d5:42:98:0c:60:c7:d4:83:
                    60:b4:11:bb:a4:d3:fe:78:42:1a:c6:d3:df:bc:8b:
                    b0:81:d5:85:74:b5:3d:62:b2:d9:fe:62:39:e0:ec:
                    b2:13:a6:da:25:57:c2:b7:d2:88:f9:95:fd:1a:9f:
                    b3:cc:c9:04:24:f9:74:d5:1c:33:58:ab:d5:97:5b:
                    01:a1:e5:e7:48:2c:17:45:fa:a5:2a:23:dc:28:af:
                    73:17:a0:31:65:0a:98:03:d1:e7:c1:4e:2f:49:16:
                    03:cb:57:c2:f8:6a:e0:f5:a9:bc:7f:0e:ff:81:f0:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6C:88:87:EA:A6:72:64:F9:63:30:7B:1C:FE:CD:B6:ED:43:07:C9
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:e9:58:31:86:1d:83:36:f9:af:9b:63:5c:59:3f:be:3c:
         2e:e8:b5:23:75:cf:95:a1:7c:bd:60:44:e7:c8:8a:c1:45:08:
         cb:e5:6c:5e:ca:97:95:e6:d8:3d:75:22:1d:0c:55:fa:e0:26:
         f8:d1:2e:2a:12:38:d2:36:de:8d:5c:a6:02:99:d4:15:39:b8:
         d2:77:7c:8c:f3:76:4b:ac:ae:d3:fa:fa:d3:81:bb:a8:e8:36:
         68:38:96:73:9f:d8:f2:dd:83:4a:c3:57:f6:05:e6:e8:7f:bd:
         23:4b:c2:26:71:91:9a:7b:b9:e6:1b:bd:7e:42:f9:12:0d:d1:
         2a:e8:ff:0f:73:2d:0f:ef:fa:60:50:1a:b1:20:d7:c4:74:bb:
         36:00:79:ba:9f:68:96:4c:c6:db:ec:1f:02:c0:d8:42:e4:f1:
         21:40:6a:0e:7b:27:d6:5f:6f:00:93:83:7e:c9:86:27:44:cb:
         df:9c:8e:a8:dd:af:1c:67:ff:6f:a6:e7:0f:9a:ac:4b:cf:52:
         49:cc:50:de:89:d4:8d:7d:4d:75:11:d9:6e:7a:d2:2f:14:41:
         27:a9:de:50:70:9e:2a:13:8b:03:9b:dc:ef:fe:7a:ea:41:1a:
         90:38:76:c4:11:54:0a:bc:b0:df:99:90:04:d8:57:90:00:ea:
         f9:f6:b7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----