Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2038383838.roa
File:                     326131323a613330303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          zp13w/xDz3aW1zC2d8sLimTwcgER9MWMvwanSy8rCRc=
Subject key identifier:   8B:AA:7B:7C:CA:57:99:47:DC:F6:1B:16:67:18:C3:3C:0D:78:80:65
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       55882474BA9DEEDA8C656A3A8014924D91F4BE01
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:39 +0000
ROA not before:           Fri 22 Sep 2023 10:14:39 +0000
ROA not after:            Fri 20 Sep 2024 10:19:39 +0000
asID:                     8888
IP address blocks:        2a12:a300::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:88:24:74:ba:9d:ee:da:8c:65:6a:3a:80:14:92:4d:91:f4:be:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:39 2023 GMT
            Not After : Sep 20 10:19:39 2024 GMT
        Subject: CN=8BAA7B7CCA579947DCF61B166718C33C0D788065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2d:23:6e:09:0a:a9:09:b1:12:8a:3f:5e:a1:
                    b7:cd:fd:f6:e5:90:05:c0:ef:e0:f3:f0:4f:a3:7f:
                    4c:70:17:6f:ce:dd:9d:71:5d:88:a6:a7:8b:79:1c:
                    57:dc:89:27:73:b7:77:c0:a5:53:13:82:63:42:4e:
                    43:90:c9:2c:48:f9:f6:79:ab:2a:6e:84:63:0b:6c:
                    1f:5c:47:9d:8b:74:36:71:6a:85:ed:a7:58:03:a7:
                    6a:43:e3:94:d6:7e:6c:a8:57:1e:b2:c3:71:0a:e0:
                    1c:2f:15:46:f2:cd:20:3f:23:ac:81:aa:29:a5:e1:
                    f6:b6:06:3b:53:cb:84:75:d0:8f:9e:93:0e:e9:78:
                    04:f6:7a:e1:24:74:3c:fc:77:77:0c:0a:28:3a:28:
                    a3:ce:f5:40:2c:c7:e5:f0:4a:85:8a:b9:81:d6:90:
                    34:08:b5:1b:1d:ad:ff:79:26:cb:73:4e:6b:5f:23:
                    50:28:c4:0e:32:f8:b7:71:36:d1:72:8a:3b:8d:da:
                    c7:72:bd:cc:72:95:51:40:9a:15:58:20:5d:ed:d1:
                    e8:7e:18:0c:c2:e7:92:b3:ac:7a:cb:41:88:12:aa:
                    8e:85:56:bd:8c:27:51:f0:f3:f4:5b:11:cb:62:c3:
                    a9:2a:a9:8e:9c:26:ab:dc:dc:b3:ea:19:8d:89:bd:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:7B:7C:CA:57:99:47:DC:F6:1B:16:67:18:C3:3C:0D:78:80:65
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:28:ed:2d:23:f5:6e:ed:9c:b0:59:66:08:38:97:c6:1a:
         6f:31:97:ed:76:3a:f6:66:a5:1e:32:cf:18:8e:d3:25:27:34:
         0d:dd:17:bf:2c:e6:6d:fa:4c:a6:02:82:40:ad:e2:77:0f:e0:
         f1:ab:46:02:67:10:87:7d:d3:95:5f:3a:98:9b:4e:41:ba:67:
         8e:92:33:b3:bf:b9:2e:c2:5a:85:26:26:b7:80:a7:dd:b9:6c:
         f5:60:e7:bb:33:ae:cb:2c:40:c7:a8:7e:f8:33:90:30:2e:73:
         d2:25:5c:7e:d8:80:e1:a0:72:f4:7e:39:15:e5:72:b0:6c:9a:
         9d:4c:a5:1c:af:e6:8e:a0:1b:f7:50:6b:3f:5e:73:45:a1:5d:
         98:a1:07:68:00:a1:87:55:c5:18:8d:73:93:66:b9:fb:4e:0b:
         2a:fa:e8:82:77:3d:a6:62:08:c0:49:98:4c:2c:d1:19:53:ee:
         2d:be:ea:04:3c:e0:89:58:86:9d:2c:cc:3b:cd:cb:24:32:34:
         d5:22:3b:c3:60:09:17:0c:18:de:4a:68:af:80:08:0d:be:4f:
         a4:66:59:04:01:15:05:b0:70:6e:5c:b8:dc:66:c6:c3:1c:3f:
         a6:f5:13:21:cc:f4:37:64:ba:10:2b:9a:29:6d:f5:b7:77:a5:
         22:d6:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----