Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330373a333a3a2f34382d3438203d3e20313338313831.roa
File:                     326131323a613330373a333a3a2f34382d3438203d3e20313338313831.roa (raw, json)
Hash identifier:          c9VcU9/0uNY7ejzOO2X4ddDFIUr2oQK7FOtnoP7Eevo=
Subject key identifier:   C0:2E:49:54:24:6C:4C:EC:11:95:1A:EB:8D:49:F2:B7:80:87:B1:F8
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       622C85197CD4F09F463AB65EB281BBD192797C4F
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330373a333a3a2f34382d3438203d3e20313338313831.roa
Signing time:             Fri 22 Sep 2023 10:19:39 +0000
ROA not before:           Fri 22 Sep 2023 10:14:39 +0000
ROA not after:            Fri 20 Sep 2024 10:19:39 +0000
asID:                     138181
IP address blocks:        2a12:a307:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2c:85:19:7c:d4:f0:9f:46:3a:b6:5e:b2:81:bb:d1:92:79:7c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Sep 22 10:14:39 2023 GMT
            Not After : Sep 20 10:19:39 2024 GMT
        Subject: CN=C02E4954246C4CEC11951AEB8D49F2B78087B1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:92:4a:06:b7:8c:8f:98:4a:d0:0a:ba:b2:
                    5a:63:37:41:8f:76:b6:11:7f:07:d5:58:4e:bf:40:
                    e5:10:b8:29:03:42:e1:e8:a3:92:8e:54:43:23:c0:
                    42:1d:80:92:36:60:56:79:c5:75:c3:55:7a:47:04:
                    7f:01:12:ce:7e:53:06:9e:6c:ae:7b:2f:72:33:ac:
                    34:95:e6:1b:15:71:88:17:5b:9c:68:5e:29:39:15:
                    4a:c4:0b:2e:33:29:e8:26:ce:6a:a2:91:f5:d9:c8:
                    fc:92:87:cc:98:a1:30:89:83:d8:54:31:a1:57:0a:
                    e1:6a:e4:69:c2:b3:a8:82:24:12:a3:9b:a2:9d:6d:
                    a8:4b:32:54:c1:49:f9:be:df:ab:7d:42:86:f7:01:
                    00:4c:cf:40:64:c0:a4:02:c6:3e:bf:c5:ac:0e:ee:
                    89:36:34:47:7c:b0:b3:8d:56:ec:ef:5d:8d:f1:f6:
                    d8:a6:07:40:cf:75:e0:e9:59:11:be:7c:ec:28:41:
                    cf:a6:ff:ce:24:41:2b:0b:ce:49:94:d8:40:b5:9d:
                    11:68:0d:f8:3b:ec:9a:ec:bc:98:dd:00:f7:90:f3:
                    47:52:e0:0a:a8:bd:b9:0a:af:46:4b:f3:fc:58:cb:
                    ac:51:6b:bc:65:e6:f2:39:fd:d4:eb:35:48:5c:b5:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2E:49:54:24:6C:4C:EC:11:95:1A:EB:8D:49:F2:B7:80:87:B1:F8
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330373a333a3a2f34382d3438203d3e20313338313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a307:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:79:c2:fa:a9:b3:62:00:c7:aa:2e:69:56:fe:f0:b2:cd:
         d5:b8:e2:43:82:fc:11:70:cc:a4:6f:f5:e5:4f:6e:d1:2a:53:
         0f:6a:4a:d3:4e:92:7a:24:75:de:db:44:c4:bf:7a:47:35:3f:
         5a:84:ed:8e:1c:5a:c9:3c:d6:45:93:00:85:39:4f:a3:0f:f6:
         b3:91:1b:4e:cc:4e:f7:ae:62:22:67:de:aa:50:bf:61:6d:2b:
         59:98:8f:e9:d0:28:c6:e7:d4:be:a6:26:2e:fe:35:76:c2:59:
         65:18:33:2f:53:2c:b5:7f:e9:e7:ae:e0:5a:9f:41:60:90:a6:
         3c:c1:d4:51:f5:70:eb:11:d1:7a:7c:3c:59:87:6d:0a:5f:2b:
         e0:17:79:01:f2:9a:42:55:15:5c:88:a0:9e:f3:1a:c3:a6:46:
         40:06:79:10:43:10:7b:f0:36:a7:b5:e7:d8:37:21:89:c5:9b:
         b4:8e:92:3f:2c:46:0c:be:2f:ee:7f:c7:0c:2c:f9:c6:e3:08:
         7f:da:37:ac:57:ef:cf:26:40:8a:9d:13:4c:2f:62:c8:8a:31:
         35:76:eb:1f:1d:a3:6e:fc:60:1b:c9:64:a7:c0:72:94:e0:1b:
         76:e2:85:c3:55:14:e3:e8:68:be:c9:cd:2a:a2:41:06:6d:34:
         cb:c7:26:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----