Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa
File:                     39312e3231332e31372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          K1fS5GCqYIASXW1esPtQiefVy4GsjRsMG1mqJqn04no=
Subject key identifier:   0E:9B:53:95:81:70:D4:D5:D0:19:C2:EF:55:45:67:4A:66:87:AB:CD
Certificate issuer:       /CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
Certificate serial:       4608ED13F645B1FA3EA77B6994338B77AA4F7774
Authority key identifier: 68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer
Subject info access:      rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa
Signing time:             Fri 03 Nov 2023 17:33:31 +0000
ROA not before:           Fri 03 Nov 2023 17:28:31 +0000
ROA not after:            Fri 01 Nov 2024 17:33:31 +0000
asID:                     14618
IP address blocks:        91.213.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:08:ed:13:f6:45:b1:fa:3e:a7:7b:69:94:33:8b:77:aa:4f:77:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
        Validity
            Not Before: Nov  3 17:28:31 2023 GMT
            Not After : Nov  1 17:33:31 2024 GMT
        Subject: CN=0E9B53958170D4D5D019C2EF5545674A6687ABCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:39:05:4a:ee:e2:a0:b3:db:06:66:37:e8:
                    f5:77:a4:16:4b:82:23:68:ac:0e:bb:37:80:ea:04:
                    95:9e:34:46:a3:99:d0:3f:77:71:c7:a7:bd:5f:ff:
                    8b:af:7c:77:32:21:7f:5b:ae:26:9b:a9:37:43:92:
                    04:2d:57:37:89:23:cb:93:11:8e:04:63:13:93:38:
                    42:39:0b:ae:17:44:a9:8a:ed:ed:95:03:05:00:3d:
                    87:d2:8b:79:e3:5c:22:2a:5b:0c:ab:61:a0:fb:31:
                    84:7a:ea:ee:34:78:2e:f7:0c:d1:ba:97:dd:45:9b:
                    d6:a6:1d:c2:5c:a2:63:7b:17:af:cb:3f:a6:b0:3b:
                    94:40:24:31:54:9e:e9:c2:80:02:6a:d4:cc:ab:80:
                    14:f8:5e:d4:53:1d:89:62:89:c3:3d:d0:5a:04:7b:
                    ea:6b:5d:45:df:81:fb:df:c0:86:4e:cd:60:31:8f:
                    52:9d:a6:2e:60:8c:3b:77:f0:d8:85:54:f0:3d:ab:
                    4c:89:98:6a:31:bb:36:1b:46:da:f9:f3:fa:f1:99:
                    84:4f:09:57:95:6c:20:53:31:bd:6e:07:92:c8:ba:
                    b4:a6:26:5f:03:9c:44:b6:59:e5:e1:d4:12:12:6e:
                    cc:b4:f8:65:64:05:0a:55:d4:3b:2f:9a:c2:c0:01:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:53:95:81:70:D4:D5:D0:19:C2:EF:55:45:67:4A:66:87:AB:CD
            X509v3 Authority Key Identifier:
                keyid:68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/24/680F28BC2B39C5CBC7083BEBF6425A7E904B16E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:86:e1:28:bf:f7:38:60:f4:86:3d:af:5c:2f:4d:b5:52:a4:
         d6:3e:41:d8:22:78:6a:70:07:95:e0:13:70:48:bb:1b:28:2f:
         2a:e0:f5:2c:76:4c:b5:f0:96:9d:b1:be:75:dd:b2:be:fe:83:
         3e:a2:6c:64:14:01:2c:02:b7:5f:cf:ed:a8:12:bd:0f:db:27:
         f0:fc:08:44:1c:c6:52:38:70:71:0b:49:6c:b3:0b:bd:ea:a9:
         82:6e:ec:b8:3d:75:0b:37:2f:f2:d3:af:ed:07:41:1a:fb:1c:
         bc:90:b3:11:89:74:7d:7a:48:1b:f8:d5:40:e4:1d:3c:32:fd:
         12:fd:12:a5:7d:2a:3a:f1:f0:fe:e7:bb:64:5f:5e:52:b2:43:
         50:b5:35:5a:90:d1:e3:90:32:93:1c:73:7e:36:af:6c:c6:95:
         44:90:83:a6:59:38:50:a4:8d:96:a7:e3:a9:c0:a1:17:36:42:
         3a:d3:68:c2:b8:7d:15:63:97:80:4e:9b:95:6c:3f:ee:a7:6f:
         6c:90:40:e3:04:b0:ba:eb:c9:e6:98:a0:f4:f4:62:84:36:d2:
         1e:9f:f2:09:c1:49:43:6f:20:27:6d:66:0f:ba:d7:08:8a:96:
         75:43:4a:85:7c:74:ae:8c:c8:1b:fb:06:04:cd:44:ee:83:4b:
         d0:5d:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----