Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330313a3a2f33322d3438203d3e203233393539.roa
File:                     326131323a613330313a3a2f33322d3438203d3e203233393539.roa (raw, json)
Hash identifier:          au2S813i/eGgsqvwjqifXbykWcKs8enPaQxZdIoExxs=
Subject key identifier:   C5:E8:91:9A:1F:97:85:69:C2:FA:89:E7:B3:61:BD:16:47:A8:01:84
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       5E22F99508C253614E6A057763448A1089E734A2
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330313a3a2f33322d3438203d3e203233393539.roa
Signing time:             Fri 22 Sep 2023 10:19:38 +0000
ROA not before:           Fri 22 Sep 2023 10:14:38 +0000
ROA not after:            Fri 20 Sep 2024 10:19:38 +0000
asID:                     23959
IP address blocks:        2a12:a301::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:22:f9:95:08:c2:53:61:4e:6a:05:77:63:44:8a:10:89:e7:34:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:38 2023 GMT
            Not After : Sep 20 10:19:38 2024 GMT
        Subject: CN=C5E8919A1F978569C2FA89E7B361BD1647A80184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:ae:bd:33:d4:01:c3:58:35:9f:2b:e9:75:
                    1a:85:b0:6c:71:f5:76:7a:b1:0c:74:15:0e:cf:a7:
                    e8:71:84:0b:93:d9:0d:68:7e:af:7d:68:7c:b3:42:
                    de:e1:5d:66:a0:7f:df:40:9d:91:56:15:12:49:73:
                    47:89:66:a3:e4:a8:12:4b:8c:9d:a5:5e:8a:ad:03:
                    0f:c1:93:f3:f8:c3:ed:8a:d7:69:26:16:7f:65:be:
                    6f:3c:73:ca:d3:a1:e8:cf:c5:57:4c:67:01:fe:5d:
                    98:11:2e:11:8a:39:2e:1d:a5:ea:3a:27:8e:35:95:
                    5b:bd:8f:bd:74:8c:9f:97:da:31:99:de:c4:74:fe:
                    04:85:a1:a8:29:f9:a2:59:a1:15:96:e8:23:49:3e:
                    8f:20:8d:6a:b5:71:03:c0:a1:81:57:1d:c9:ec:65:
                    43:12:95:f8:46:29:86:ae:54:70:27:09:5c:f5:2b:
                    8c:b5:c6:52:e4:ac:42:d2:ac:8e:98:09:4d:86:9e:
                    35:12:58:6f:be:77:af:9d:42:5a:1e:0e:c5:f2:4b:
                    67:ff:54:bc:35:3b:f9:89:84:ca:0a:75:77:8c:5b:
                    f2:05:5f:ed:6b:f2:eb:cd:52:44:7d:b7:b0:27:18:
                    dd:8f:39:04:f1:2d:8f:a0:51:2f:e6:6a:45:28:5e:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E8:91:9A:1F:97:85:69:C2:FA:89:E7:B3:61:BD:16:47:A8:01:84
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330313a3a2f33322d3438203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a301::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:7c:d5:f4:76:44:4e:f5:5b:1e:2a:db:07:23:83:30:d3:
         94:8f:20:f1:b2:2f:29:78:3a:10:ca:cd:9f:b2:0a:01:48:1c:
         d3:fc:df:aa:d3:c7:96:21:99:ea:2e:40:fe:1b:2f:31:40:90:
         02:26:a0:b0:df:c9:f8:0a:2a:a5:8d:9c:d7:b6:f8:dd:68:af:
         f3:90:4d:13:ff:ee:11:7f:18:36:d4:a0:50:ba:77:27:b7:d7:
         24:ad:c7:fd:5d:6d:27:0d:4d:98:12:c7:77:39:dc:2d:8d:7d:
         ca:6d:33:11:0f:b7:b3:96:00:c2:be:6a:af:a6:62:ad:62:2d:
         08:89:83:62:fa:c7:6a:b0:c1:15:0a:d5:90:ea:2b:3a:41:41:
         8f:50:4e:6e:2e:19:6e:2f:fa:fa:3b:06:59:ab:f1:98:74:f5:
         bd:1d:a8:16:4e:9b:a8:c7:2b:6e:33:c6:51:93:13:00:d3:6b:
         07:af:c5:20:ba:64:54:90:56:17:58:72:67:0c:5c:4e:12:24:
         51:c1:10:c9:84:cc:e5:ce:c2:b9:80:89:38:9e:40:7d:63:6a:
         cc:54:f9:6e:15:1d:41:06:97:a4:ff:cc:4b:90:d7:36:09:f2:
         a1:e4:b5:0c:ab:77:17:8e:d1:7b:d4:02:03:55:cd:a7:39:96:
         c9:f8:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----