Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330373a313a3a2f34382d3438203d3e20313338333330.roa
File:                     326131323a613330373a313a3a2f34382d3438203d3e20313338333330.roa (raw, json)
Hash identifier:          bLp+zE+jNyosFD4ZiqV3RZynDaERuMFg4KNQS6BJWvI=
Subject key identifier:   EA:02:7A:A5:1C:20:2B:6D:9A:2A:9C:0D:9F:09:97:41:C9:2D:F5:91
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       42A1F66C38245F4600A90A348C48C3C8189DA09B
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330373a313a3a2f34382d3438203d3e20313338333330.roa
Signing time:             Fri 22 Sep 2023 10:19:38 +0000
ROA not before:           Fri 22 Sep 2023 10:14:38 +0000
ROA not after:            Fri 20 Sep 2024 10:19:38 +0000
asID:                     138330
IP address blocks:        2a12:a307:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:f6:6c:38:24:5f:46:00:a9:0a:34:8c:48:c3:c8:18:9d:a0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:38 2023 GMT
            Not After : Sep 20 10:19:38 2024 GMT
        Subject: CN=EA027AA51C202B6D9A2A9C0D9F099741C92DF591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:8c:08:a1:d1:0c:b3:94:83:4f:1a:5d:1d:
                    78:00:fd:a3:60:dd:49:75:b3:2d:6c:fb:46:13:11:
                    99:ab:e5:9c:aa:8c:7c:3e:e0:5b:b4:28:6f:46:1f:
                    e4:36:04:96:cf:bd:2a:55:e8:9b:d7:3e:72:45:40:
                    b4:13:ac:f4:72:42:d2:d9:35:f6:f8:6e:c6:3a:d1:
                    87:62:cb:85:71:24:40:7a:7f:b0:e7:fe:1b:15:5d:
                    2b:e9:5f:dc:b3:3a:de:05:21:cd:c1:e7:0b:5e:6a:
                    6e:db:f6:e2:1b:32:e0:42:41:d1:d4:b5:5c:ba:b4:
                    26:00:64:52:48:ea:26:a6:5b:eb:28:9d:bd:79:55:
                    2d:c4:da:f0:3e:a6:f3:1d:79:b8:ae:3d:b7:6e:5f:
                    6f:d4:df:66:99:d5:0b:93:41:20:21:84:54:9c:18:
                    1a:25:8e:42:9f:c3:50:c0:3e:74:26:6e:f0:2a:ec:
                    b6:3a:ea:50:09:33:b7:b1:a8:7d:59:8d:d7:31:73:
                    97:36:95:ec:8b:be:2d:3e:ca:f6:24:ad:6d:ac:9d:
                    26:71:ae:32:4c:1a:77:3e:51:f8:be:17:26:e2:55:
                    77:7f:bf:b4:79:a8:6b:66:1c:62:0a:5f:6f:69:b4:
                    c7:18:34:0e:d3:b4:51:f4:2c:ee:00:4b:93:8d:cd:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:7A:A5:1C:20:2B:6D:9A:2A:9C:0D:9F:09:97:41:C9:2D:F5:91
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330373a313a3a2f34382d3438203d3e20313338333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a307:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:66:4c:98:05:c5:6f:fb:3b:20:68:a3:87:10:04:48:82:06:
         3a:82:2f:00:73:4c:87:58:ee:fc:26:27:c5:6d:b4:b6:44:d6:
         cb:2c:e9:71:fb:f9:9e:b7:bf:5e:0f:91:47:e1:8f:6d:44:0f:
         1b:00:1a:86:73:91:99:03:a6:ae:bf:00:0c:34:88:5a:cd:1e:
         3d:da:35:42:a7:66:1e:6d:f4:20:7a:06:64:26:ff:d0:a0:c8:
         94:cf:98:c2:4a:f1:d1:14:30:5d:30:2f:d8:1f:3d:50:40:52:
         bf:71:90:b5:75:1d:9b:20:6c:bd:6d:c7:01:7b:65:8f:c1:6b:
         0a:61:e7:ea:35:9b:b8:cf:4a:aa:08:f1:d3:91:a1:f7:84:70:
         03:3b:b9:32:65:54:06:f5:43:13:97:b9:c8:09:11:f9:a6:1f:
         ad:80:fd:22:c1:0e:9c:6b:3d:0a:7a:17:67:ba:f2:bd:97:5f:
         32:35:07:64:54:ba:1a:cc:e7:72:28:14:d7:24:21:7e:88:6c:
         d9:ec:e3:fd:56:ef:b7:5e:da:d4:36:f1:ec:ea:02:58:cf:f1:
         d8:5e:6d:a0:1b:48:ca:12:39:fa:1c:0d:ea:17:4b:a8:80:be:
         97:90:94:6c:07:9f:45:eb:c9:87:6b:76:b9:54:48:0d:90:52:
         3a:03:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----