Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e20383334.roa
File:                     37372e37352e3232352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tKc2krjylLpyIc87fff7p/RnXYj+JXC5Xl++8LbU0PU=
Subject key identifier:   B1:8D:B1:D7:01:89:C0:4E:0E:44:6E:F0:24:76:D7:0E:8C:0B:34:0D
Certificate issuer:       /CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
Certificate serial:       212CFCB80E3201AAE9D78019B6BB6729D776CC00
Authority key identifier: C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer
Subject info access:      rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e20383334.roa
Signing time:             Sun 25 Jun 2023 13:06:54 +0000
ROA not before:           Sun 25 Jun 2023 13:01:54 +0000
ROA not after:            Sun 23 Jun 2024 13:06:54 +0000
asID:                     834
IP address blocks:        77.75.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:fc:b8:0e:32:01:aa:e9:d7:80:19:b6:bb:67:29:d7:76:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56eb66b96238b09e2ebd0f8687f9a08fe325c94
        Validity
            Not Before: Jun 25 13:01:54 2023 GMT
            Not After : Jun 23 13:06:54 2024 GMT
        Subject: CN=B18DB1D70189C04E0E446EF02476D70E8C0B340D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:59:b2:f8:7d:a3:51:24:ca:b7:24:93:08:
                    af:5b:22:99:b9:3c:c6:37:51:a5:02:82:18:7e:c6:
                    55:1d:9b:52:60:8a:df:f5:50:a9:3b:fb:b0:0e:53:
                    e5:90:bc:ff:4a:d5:61:93:9e:20:e3:3b:fe:e7:73:
                    60:37:00:f3:c0:c4:85:c5:1e:45:c4:b1:e8:c2:d0:
                    a9:d5:4e:c5:3d:7c:99:f9:e5:83:9d:f9:08:ba:85:
                    fd:cc:a3:57:09:3e:ba:f9:89:3b:53:7e:cf:6b:25:
                    cc:67:91:a0:5c:65:9b:d1:62:a8:1b:91:21:77:0b:
                    5b:fb:d4:c3:08:9a:40:86:50:ec:74:ab:aa:63:8a:
                    8f:43:8b:18:6b:ab:1c:d8:07:5a:2a:44:31:4e:4f:
                    84:d5:64:d0:d6:10:49:cb:5c:c8:75:59:71:00:d5:
                    44:ed:4f:63:cf:ab:30:82:f0:b7:35:f7:e0:fc:7f:
                    08:ab:c5:54:d9:b0:d7:71:5a:56:35:7f:e2:7f:57:
                    ae:41:bc:74:fc:fa:ec:a1:39:1f:6e:9f:42:d9:3c:
                    c2:55:04:1f:a2:b8:19:04:c1:48:76:03:89:b8:a8:
                    ec:a4:8c:1a:d8:1e:f2:cc:64:d5:77:8c:8e:f1:66:
                    96:4a:64:39:ea:5a:5e:e5:69:12:06:e9:d6:34:dc:
                    24:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8D:B1:D7:01:89:C0:4E:0E:44:6E:F0:24:76:D7:0E:8C:0B:34:0D
            X509v3 Authority Key Identifier:
                keyid:C5:6E:B6:6B:96:23:8B:09:E2:EB:D0:F8:68:7F:9A:08:FE:32:5C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/23/C56EB66B96238B09E2EBD0F8687F9A08FE325C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW62a5Yjiwni69D4aH-aCP4yXJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/23/37372e37352e3232352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.75.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:c4:6a:7f:86:3b:31:33:ae:5c:90:44:8a:e5:fc:07:15:4d:
         bc:6e:8f:89:40:6e:91:63:71:fe:87:af:08:06:e9:da:91:ce:
         d4:86:6c:a2:79:b5:04:37:dc:23:d0:a6:cd:2f:1c:d0:00:bc:
         fe:b3:f8:5c:69:09:95:8a:60:b3:c3:7b:ca:5f:a8:cd:23:d6:
         3d:0c:b2:82:d6:3b:7a:bc:44:af:73:b6:85:3c:e5:43:9c:bc:
         ff:9b:cf:73:2e:bd:ae:f3:6d:92:29:7e:48:aa:ec:49:67:92:
         57:6f:bf:d2:25:fc:c4:75:37:e9:b9:b2:01:09:87:8e:48:49:
         23:1c:5e:15:5a:2d:12:96:5d:68:9a:8d:21:44:6d:82:f7:d3:
         dd:a2:77:5c:56:1e:af:22:a3:84:af:4f:f5:6b:c2:76:c9:28:
         f7:f2:6e:28:76:4d:5e:5e:62:e7:1a:eb:87:06:74:09:3a:6e:
         b8:71:a1:31:d1:91:cb:33:2c:0a:e7:c0:d1:b9:e8:ea:88:65:
         a8:5c:74:eb:a7:bd:16:84:fc:c9:6c:39:35:5a:a4:aa:17:43:
         d1:63:40:4a:52:5e:79:8a:db:85:d7:13:89:f9:bb:6a:3d:0d:
         a8:f8:98:51:24:39:1c:5f:fb:a0:6a:cc:77:5d:7a:d2:9e:f8:
         f3:86:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----