Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20383334.roa
File:                     3138352e3234312e35382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          icKZ5jimlj8Z0K4Wlho13YWxXQjXH6+3ox+MnjgnbuQ=
Subject key identifier:   F4:6E:C0:04:EE:73:18:8E:BD:C6:E1:51:94:29:DE:01:A4:30:58:2F
Certificate issuer:       /CN=77223c7df24b51552233edf70edc05faaa74141e
Certificate serial:       3F829134EA7B0EE96E22FA0A10C0F16EF61460FD
Authority key identifier: 77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer
Subject info access:      rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20383334.roa
Signing time:             Mon 03 Jul 2023 08:57:18 +0000
ROA not before:           Mon 03 Jul 2023 08:52:18 +0000
ROA not after:            Mon 01 Jul 2024 08:57:18 +0000
asID:                     834
IP address blocks:        185.241.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:82:91:34:ea:7b:0e:e9:6e:22:fa:0a:10:c0:f1:6e:f6:14:60:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77223c7df24b51552233edf70edc05faaa74141e
        Validity
            Not Before: Jul  3 08:52:18 2023 GMT
            Not After : Jul  1 08:57:18 2024 GMT
        Subject: CN=F46EC004EE73188EBDC6E1519429DE01A430582F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:17:1c:6b:71:f4:fc:e5:25:e4:75:08:5c:
                    24:d7:85:7a:c0:cc:5f:22:72:db:95:38:b0:ae:0e:
                    83:dd:ba:8d:e7:50:90:25:7e:26:10:87:ba:d2:17:
                    c5:5f:1a:a0:a1:5d:61:5b:90:4e:18:a0:7c:94:e8:
                    86:77:d5:5f:b4:ac:5d:68:9e:e6:4d:34:83:85:65:
                    20:e9:e1:12:f6:00:52:9b:49:73:2e:e4:0b:17:c8:
                    6f:66:18:27:49:72:cf:d0:02:c9:ad:75:a9:4f:4c:
                    e3:fc:86:77:c8:fd:33:d8:83:57:e0:3d:71:b0:2d:
                    43:6f:19:35:01:47:35:a2:d3:63:fb:33:c0:da:d0:
                    aa:9f:39:c2:04:99:6d:c0:b5:c9:10:b7:c6:f0:e0:
                    6a:71:d8:79:bf:5a:91:8b:1d:3c:ba:69:90:ba:4e:
                    b4:3a:29:0f:16:23:6f:0d:7d:bd:a6:cf:5f:3b:be:
                    5d:4a:4c:ac:44:be:92:33:03:42:8d:69:d2:ef:05:
                    70:3c:27:ac:71:3e:de:50:1f:a6:d3:94:ca:70:42:
                    30:33:47:bc:d9:2f:56:e6:98:c9:bc:59:5b:2f:d4:
                    e4:29:49:88:20:9a:17:69:23:77:9b:78:58:82:fa:
                    b8:0a:40:21:45:62:c5:62:72:57:18:8e:d6:48:05:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:C0:04:EE:73:18:8E:BD:C6:E1:51:94:29:DE:01:A4:30:58:2F
            X509v3 Authority Key Identifier:
                keyid:77:22:3C:7D:F2:4B:51:55:22:33:ED:F7:0E:DC:05:FA:AA:74:14:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/25/77223C7DF24B51552233EDF70EDC05FAAA74141E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyI8ffJLUVUiM-33DtwF-qp0FB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/25/3138352e3234312e35382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:95:a7:48:d7:e9:ae:43:76:3e:c9:44:3f:c2:74:c9:dc:
         e2:53:fd:91:3a:53:eb:d6:14:6f:fa:51:04:a6:ae:a3:c2:fd:
         a6:7c:f8:34:09:93:22:19:89:a3:46:47:51:04:6d:f7:6f:d5:
         c8:a9:31:12:8b:99:8b:06:eb:ff:24:4a:7d:60:29:cc:dc:0e:
         67:9c:ca:07:ff:4b:89:8b:3e:24:42:a1:fe:c5:db:78:96:9f:
         2d:03:19:28:a5:2c:32:3b:15:b0:4e:53:40:e0:8b:5e:39:18:
         9e:f7:ee:35:08:21:96:36:05:b3:81:3f:90:c8:fb:cf:23:08:
         ba:46:d0:75:4d:6f:59:8f:2e:0c:2d:2e:8e:73:29:71:b6:07:
         3b:47:2b:9a:5a:1c:0e:18:8a:f3:d3:3a:ce:0d:dd:83:5b:5b:
         93:7b:d0:b7:39:50:4c:28:c3:7c:3c:6b:52:06:18:49:b7:de:
         eb:4b:bd:32:09:87:a7:eb:d2:5c:69:0c:b3:82:a3:60:5a:94:
         3d:aa:d5:61:53:c8:33:cb:dd:fa:bc:56:5b:91:8c:c4:ee:51:
         d8:2f:9d:7b:86:33:02:3a:8c:5d:67:3f:93:aa:0d:b7:fb:6f:
         3e:91:71:49:b6:cf:f3:8b:28:0a:ce:51:d5:7f:eb:ce:bd:78:
         85:6e:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----