Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203136353039.roa
File:                     39312e3231332e31372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          r8nytnTL7lT6ubWkmo1qZ0zjXWvo1EF4zyl7Qn8nKYo=
Subject key identifier:   E0:70:39:8A:13:C3:3D:61:ED:26:DA:FE:99:7B:F6:56:63:C1:FB:63
Certificate issuer:       /CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
Certificate serial:       7B03861B109A484FB088E83E07DF1261069AF5EF
Authority key identifier: 68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer
Subject info access:      rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 03 Nov 2023 17:33:49 +0000
ROA not before:           Fri 03 Nov 2023 17:28:49 +0000
ROA not after:            Fri 01 Nov 2024 17:33:49 +0000
asID:                     16509
IP address blocks:        91.213.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:03:86:1b:10:9a:48:4f:b0:88:e8:3e:07:df:12:61:06:9a:f5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=680f28bc2b39c5cbc7083bebf6425a7e904b16e7
        Validity
            Not Before: Nov  3 17:28:49 2023 GMT
            Not After : Nov  1 17:33:49 2024 GMT
        Subject: CN=E070398A13C33D61ED26DAFE997BF65663C1FB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:85:fe:97:aa:8e:ea:f0:08:3a:69:a3:87:
                    ee:2d:7c:b6:43:89:aa:ed:65:e9:8a:63:ff:be:64:
                    49:26:da:5e:a6:4a:b5:ea:36:e7:10:98:4a:9e:5a:
                    f3:f2:03:ed:ab:5f:2b:c6:99:fd:ce:7b:3d:26:5b:
                    35:51:ea:6c:58:dc:c3:9a:6b:e8:46:a6:da:b4:ba:
                    a5:f6:ef:fb:84:5d:93:25:cc:61:f2:38:31:b0:39:
                    d8:c0:17:1c:c0:6b:39:2d:f7:fa:b5:17:ff:b4:67:
                    f1:00:b5:d6:7d:c0:5a:b1:a1:42:24:42:fc:fc:fc:
                    b3:cf:52:e7:7c:22:1c:41:29:92:b7:f9:05:3b:0f:
                    a0:b9:84:f5:b1:fd:3f:b9:d1:e4:8c:92:8f:b6:e2:
                    39:5f:6b:0e:3c:da:75:56:54:11:d5:e5:0a:a9:f9:
                    6a:5f:1c:ff:7a:91:45:0e:9c:fd:cb:6c:11:06:cd:
                    cc:b8:bb:43:0f:b1:ee:f5:6a:e2:af:1e:73:f8:fa:
                    9c:71:e5:49:20:de:78:8e:81:6b:29:0a:0e:e0:e9:
                    c1:c4:a3:6b:13:34:40:a8:8f:85:ba:d4:61:b9:eb:
                    2d:51:b2:0a:46:7c:c8:2a:0a:b5:5b:f0:3f:b8:18:
                    3e:83:b5:4f:6a:d9:26:51:13:c4:9d:7b:1e:46:64:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:70:39:8A:13:C3:3D:61:ED:26:DA:FE:99:7B:F6:56:63:C1:FB:63
            X509v3 Authority Key Identifier:
                keyid:68:0F:28:BC:2B:39:C5:CB:C7:08:3B:EB:F6:42:5A:7E:90:4B:16:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/24/680F28BC2B39C5CBC7083BEBF6425A7E904B16E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA8ovCs5xcvHCDvr9kJafpBLFuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/24/39312e3231332e31372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:9e:83:97:ab:3e:b4:30:51:0d:40:15:04:ac:ad:78:96:
         e6:25:b1:7f:a6:07:f8:ce:ae:56:b4:3d:32:7c:7c:26:69:7d:
         fc:c0:75:a9:8e:43:31:9b:7e:8e:08:3c:f8:ee:31:69:96:d8:
         d4:0c:c8:36:e7:76:74:22:a4:1b:2f:c0:0a:39:a3:9b:c3:a2:
         24:a7:ac:e9:db:9f:0a:72:34:83:8e:05:d4:98:b0:d2:62:8b:
         e4:8f:5e:fe:92:2a:4d:f3:bc:42:90:1f:95:4c:00:8a:d7:f6:
         f0:b0:81:bf:04:b1:16:f7:8c:e0:70:02:a0:18:62:f9:7f:84:
         98:48:2b:51:90:47:96:72:2c:98:2a:ac:5c:65:96:ed:fe:75:
         58:7f:ff:4d:0f:19:33:59:31:b0:a7:7b:3f:dc:6f:97:ea:79:
         3a:88:5c:ca:c8:81:70:82:55:71:6e:a6:f7:80:a2:7a:55:7a:
         61:73:fe:00:47:fe:d3:02:43:24:77:9e:a2:6c:3f:15:c5:a7:
         14:5f:23:21:d4:d8:b9:c1:19:a1:15:d3:4a:90:9c:26:ac:c5:
         45:e0:35:43:8b:80:12:ab:cf:41:fa:fc:2f:4a:93:e5:fe:1c:
         77:6d:56:8e:5c:4f:ea:ef:ea:5c:33:71:9c:08:e1:05:8e:94:
         ac:85:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----