Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330303a3a2f33322d3438203d3e203233393539.roa
File:                     326131323a613330303a3a2f33322d3438203d3e203233393539.roa (raw, json)
Hash identifier:          gsyPo2WOcLsgWhUZPRqh41gj49DsjO1Tw/ycYBMh14g=
Subject key identifier:   00:9D:F5:FD:0E:90:D5:CC:87:77:77:3E:5D:B8:16:7A:14:2F:2F:A2
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       6BC5241FA0F84FECCFE54458CA6C5F2B14AEB35D
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330303a3a2f33322d3438203d3e203233393539.roa
Signing time:             Fri 22 Sep 2023 10:19:38 +0000
ROA not before:           Fri 22 Sep 2023 10:14:38 +0000
ROA not after:            Fri 20 Sep 2024 10:19:38 +0000
asID:                     23959
IP address blocks:        2a12:a300::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c5:24:1f:a0:f8:4f:ec:cf:e5:44:58:ca:6c:5f:2b:14:ae:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:38 2023 GMT
            Not After : Sep 20 10:19:38 2024 GMT
        Subject: CN=009DF5FD0E90D5CC8777773E5DB8167A142F2FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:0a:0a:e2:e5:5a:83:70:85:2c:af:1e:6d:
                    b7:5d:af:18:c6:0b:e9:ce:af:bd:31:49:60:54:22:
                    a3:22:d0:ba:6a:ce:1f:ff:9a:9f:f2:71:4b:4e:bb:
                    0b:4f:38:15:cc:49:59:14:de:c2:87:01:7f:5d:cb:
                    15:98:70:62:ae:cd:c7:b9:37:96:d3:2c:f0:f4:eb:
                    38:00:09:86:b3:e3:cb:72:ab:c5:eb:f0:51:d4:d8:
                    27:d0:b6:c3:50:3b:20:67:d7:65:d4:03:22:e9:6e:
                    ec:5a:27:0a:d4:b6:b3:b1:12:ee:f8:72:72:ba:49:
                    e2:91:43:8a:cc:82:2e:c3:0b:7c:a3:fe:01:ef:23:
                    31:1a:13:f9:ca:d0:89:57:2e:89:4b:d7:43:ed:56:
                    8e:41:75:00:45:4c:96:03:1c:31:57:1b:aa:f8:70:
                    18:11:2d:22:3e:87:97:19:34:38:34:71:eb:95:0f:
                    e8:0e:f1:db:d7:20:70:0d:a3:30:bb:6c:c5:eb:16:
                    90:7c:77:00:57:bb:ce:fb:57:84:3e:ef:c0:ef:26:
                    fd:ef:77:5f:c1:87:79:b6:96:e0:22:28:80:5c:d0:
                    43:de:45:54:9f:99:7d:19:aa:61:29:44:f2:cb:f7:
                    bf:b9:ac:fa:ad:c8:55:07:41:3d:b9:cb:e0:e7:15:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9D:F5:FD:0E:90:D5:CC:87:77:77:3E:5D:B8:16:7A:14:2F:2F:A2
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330303a3a2f33322d3438203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a300::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:2f:28:14:4c:f2:61:92:53:cc:07:4d:b9:1a:b7:e6:cd:
         27:d3:22:73:f1:03:aa:0c:ae:c3:3b:5f:29:b0:a1:ec:13:8c:
         b2:19:20:c9:fb:7f:3b:18:4f:1a:18:a1:3f:75:26:0c:88:4a:
         a1:36:4f:36:6f:90:e0:b7:3c:4c:e1:8d:f8:43:38:38:7d:ea:
         96:00:cf:79:da:00:08:15:2a:3d:e5:bd:a4:db:49:ba:15:4f:
         36:be:33:7a:e1:32:7e:6e:f7:86:92:cc:97:0a:fc:89:c2:e8:
         be:c0:f9:40:e8:2d:fb:93:39:d3:bd:83:f5:cf:f0:72:bd:66:
         03:44:4f:6b:af:d7:38:5f:a4:e7:aa:42:99:bf:72:6f:b8:22:
         5d:80:e7:76:d3:07:37:f1:d3:6f:cc:d0:73:93:60:c8:24:cd:
         60:40:87:e3:18:5a:d7:8e:c0:78:98:bb:49:98:97:f7:7e:2e:
         0f:ce:cd:8b:6e:9d:a0:a2:9a:8e:98:24:78:d1:68:f1:d3:aa:
         26:f1:b8:99:8b:d8:8b:43:c2:bd:68:67:f2:89:b5:40:db:03:
         04:67:49:0e:9c:6b:7a:8f:5e:73:dd:43:54:aa:34:16:db:af:
         89:d9:f5:8e:f1:8c:c9:24:e1:e3:25:24:ca:37:14:a4:f9:b9:
         c7:1d:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----