Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330373a323a3a2f34382d3438203d3e20313334363636.roa
File:                     326131323a613330373a323a3a2f34382d3438203d3e20313334363636.roa (raw, json)
Hash identifier:          Fc1cyH6gd5oi/jrnchy6Dwk9S6ss/WR3FninCXfp6Gw=
Subject key identifier:   79:CE:62:7F:EC:F6:EE:AB:B6:2C:2C:AF:A8:5B:E0:23:A3:B8:F2:CC
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       55D2F77A8C49031330DB36B263751EA5257ED020
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330373a323a3a2f34382d3438203d3e20313334363636.roa
Signing time:             Fri 22 Sep 2023 10:19:38 +0000
ROA not before:           Fri 22 Sep 2023 10:14:38 +0000
ROA not after:            Fri 20 Sep 2024 10:19:38 +0000
asID:                     134666
IP address blocks:        2a12:a307:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d2:f7:7a:8c:49:03:13:30:db:36:b2:63:75:1e:a5:25:7e:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:38 2023 GMT
            Not After : Sep 20 10:19:38 2024 GMT
        Subject: CN=79CE627FECF6EEABB62C2CAFA85BE023A3B8F2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:4a:8f:60:17:00:8e:07:19:af:78:42:d2:
                    18:67:18:dd:a1:4d:bd:cc:ca:e6:7b:62:bf:54:be:
                    1c:45:64:81:c9:04:82:c3:c8:88:cb:e5:69:07:07:
                    d3:31:de:b3:bb:d9:6e:f1:c0:19:8f:b5:91:34:d4:
                    39:a1:6a:24:15:31:90:fa:10:d1:aa:a3:df:64:c1:
                    0b:67:74:68:36:71:84:05:07:dd:83:b5:a9:89:36:
                    85:3b:d1:a4:6a:67:2d:ef:4b:6e:a0:c9:ca:ad:c6:
                    f2:55:7d:12:b1:6d:82:e4:c9:f1:71:4e:00:4b:2e:
                    e2:73:da:62:2c:48:2b:2f:45:b9:4c:26:0f:e2:0d:
                    91:73:96:49:a0:53:70:dd:2b:1d:ae:a7:80:80:6d:
                    d4:43:dc:3f:f6:0a:ab:57:28:05:a0:cb:7d:c2:f2:
                    dc:70:fb:d8:02:3d:c6:07:0d:4a:67:9b:09:28:e2:
                    21:7f:bd:a7:5b:0b:ff:62:20:a2:b4:5c:55:dc:70:
                    bc:9a:06:17:fd:cc:bb:18:02:c7:9b:4a:7f:21:a2:
                    93:83:52:05:a3:b9:40:72:60:d6:ba:c3:ed:d1:e7:
                    6f:ed:d7:21:b2:9d:52:e7:4f:33:28:41:b8:3a:cb:
                    44:e6:f5:33:2f:96:e5:4f:b7:14:44:28:d5:e6:aa:
                    49:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:62:7F:EC:F6:EE:AB:B6:2C:2C:AF:A8:5B:E0:23:A3:B8:F2:CC
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330373a323a3a2f34382d3438203d3e20313334363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a307:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:c4:7f:a0:7d:a9:d7:0d:ed:67:56:f6:d7:17:27:0e:fc:b4:
         44:83:84:e6:1c:ba:2e:cf:c7:55:ee:16:9f:dd:1d:09:ac:c4:
         c1:01:ea:d3:55:6b:78:3b:96:59:08:03:ff:59:68:42:7a:45:
         9d:7a:4f:a9:ac:ef:51:50:fd:9c:f5:66:30:07:17:44:26:78:
         b6:00:91:8f:51:1a:0c:40:5f:b6:c7:e0:d8:13:f6:ff:ed:4b:
         13:62:44:69:94:26:15:76:5b:44:06:41:c9:4c:56:b2:62:df:
         0a:e5:0f:49:5e:df:26:12:97:8d:86:89:86:0f:0c:79:28:56:
         39:a2:14:fd:fa:03:b6:f8:23:a5:f3:cb:e5:02:b5:8b:53:fc:
         6c:07:ef:36:9c:26:d1:39:39:86:6e:34:5c:96:e5:db:3a:9d:
         99:c9:13:a2:25:67:63:eb:71:0d:61:ef:90:11:56:c9:13:77:
         44:63:2e:e4:6f:b6:8b:2b:44:23:a1:46:f3:e2:84:ca:ce:51:
         f9:3d:e0:cd:66:a3:e4:90:0c:4b:f6:90:21:76:3a:73:15:fd:
         da:46:af:59:ed:c5:f3:61:ec:60:8b:0a:2b:52:7c:18:ba:54:
         bb:fe:4e:49:54:db:99:9c:0d:26:12:79:d8:b7:9b:e9:68:23:
         38:44:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----