Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e20323036353035.roa
File:                     3137382e32322e32362e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier:          TnGrp3M4VH+g9wRz/9rmrDk/Hkm2y+Bxh+n+n2tzwVQ=
Subject key identifier:   EE:E1:4D:0E:3B:9E:66:6E:75:3E:80:82:93:8C:AF:8D:30:05:41:43
Certificate issuer:       /CN=4b2322a16231fe240d6f80e4f0538571e83bed10
Certificate serial:       145568EAD7ADA4032F1EC4EC54CF4880FA366382
Authority key identifier: 4B:23:22:A1:62:31:FE:24:0D:6F:80:E4:F0:53:85:71:E8:3B:ED:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyMioWIx_iQNb4Dk8FOFceg77RA.cer
Subject info access:      rsync://0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e20323036353035.roa
Signing time:             Wed 29 Mar 2023 14:59:25 +0000
ROA not before:           Wed 29 Mar 2023 14:54:25 +0000
ROA not after:            Wed 27 Mar 2024 14:59:25 +0000
asID:                     206505
IP address blocks:        178.22.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:55:68:ea:d7:ad:a4:03:2f:1e:c4:ec:54:cf:48:80:fa:36:63:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2322a16231fe240d6f80e4f0538571e83bed10
        Validity
            Not Before: Mar 29 14:54:25 2023 GMT
            Not After : Mar 27 14:59:25 2024 GMT
        Subject: CN=EEE14D0E3B9E666E753E8082938CAF8D30054143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d9:7e:d4:3b:30:2c:ea:db:5e:eb:23:0d:4a:
                    84:7f:40:15:c1:31:01:cb:e4:41:db:17:8e:9b:dd:
                    93:9c:26:45:37:2c:d2:17:32:7f:3c:b1:08:4e:71:
                    69:61:e3:27:c8:70:54:37:dd:7e:10:de:c2:0d:07:
                    08:42:92:49:87:89:8c:2d:14:4f:4c:09:b3:43:fa:
                    94:a3:a7:ad:51:e1:9e:a7:c4:2d:cd:89:6f:e5:79:
                    64:00:f6:5b:52:45:76:b6:ea:8b:f9:a2:4b:8a:0b:
                    0f:61:c2:d4:23:1f:ce:23:78:93:8d:ea:54:96:42:
                    66:a9:54:d3:b1:86:64:ab:51:55:d2:7a:26:86:55:
                    d9:8a:d3:f8:a4:02:d4:5c:da:18:3c:f9:eb:37:3f:
                    f1:e4:da:1a:56:7d:8f:03:32:f4:42:6c:bf:9d:7c:
                    2e:52:cd:70:6a:3f:d7:75:f1:50:d9:41:a0:87:33:
                    ae:95:aa:9f:86:06:16:e2:bf:5e:cd:21:f0:21:ee:
                    d7:33:a2:df:de:b5:a0:8a:f0:88:61:2d:5f:a8:96:
                    d4:7b:c6:63:c4:16:f6:b1:f7:0a:a2:01:a3:c9:73:
                    a1:4c:a3:3a:58:6c:3c:b6:0b:17:ff:97:88:61:c3:
                    36:0d:4e:7c:1b:08:da:f0:96:66:35:3e:b4:0b:2c:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E1:4D:0E:3B:9E:66:6E:75:3E:80:82:93:8C:AF:8D:30:05:41:43
            X509v3 Authority Key Identifier:
                keyid:4B:23:22:A1:62:31:FE:24:0D:6F:80:E4:F0:53:85:71:E8:3B:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/26/4B2322A16231FE240D6F80E4F0538571E83BED10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyMioWIx_iQNb4Dk8FOFceg77RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e20323036353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:0a:af:37:82:b9:7a:72:d3:91:d4:96:78:37:94:55:4e:
         1c:17:f0:c6:28:58:53:e0:a6:00:d4:4c:5f:0b:63:f6:6f:eb:
         00:f5:dc:1a:0d:8f:4e:e6:94:68:0e:76:0e:4e:42:5b:54:66:
         a5:27:57:e2:26:f8:a0:43:50:6c:d9:74:c7:aa:6a:3c:6d:27:
         31:17:0a:c7:90:62:64:27:44:c1:11:88:a0:36:82:52:54:67:
         cf:64:78:81:21:04:9c:bc:f2:b5:79:61:4d:8b:82:13:2f:d3:
         dd:1b:76:12:46:a0:32:c3:2c:89:1e:e4:89:e5:23:80:03:b4:
         cc:ee:f4:a9:ca:91:19:7d:34:c9:03:37:e0:51:d9:42:7b:eb:
         5e:b3:98:5a:37:50:22:c1:76:fc:6f:24:cf:a2:6e:c3:87:18:
         e1:5d:e2:ce:9d:3a:6b:ee:8c:a4:8a:f8:c6:62:3c:f5:26:33:
         8c:92:ce:f9:7e:8a:b9:f6:3c:c3:7d:9a:cd:1f:16:70:23:64:
         66:f9:64:a1:d7:86:ef:c1:4d:e8:11:fc:aa:fd:8c:25:15:5d:
         1b:bc:b2:18:cf:b8:a8:ed:82:91:3d:9b:a7:ce:44:57:59:db:
         f3:2f:5e:5c:7b:86:8d:4b:56:07:3f:3e:8a:07:47:61:3a:11:
         f1:e5:2a:c6
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUFFVo6tetpAMvHsTsVM9IgPo2Y4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIyMzIyYTE2MjMxZmUyNDBkNmY4MGU0ZjA1Mzg1NzFl
ODNiZWQxMDAeFw0yMzAzMjkxNDU0MjVaFw0yNDAzMjcxNDU5MjVaMDMxMTAvBgNV
BAMTKEVFRTE0RDBFM0I5RTY2NkU3NTNFODA4MjkzOENBRjhEMzAwNTQxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22X7UOzAs6tte6yMNSoR/QBXB
MQHL5EHbF46b3ZOcJkU3LNIXMn88sQhOcWlh4yfIcFQ33X4Q3sINBwhCkkmHiYwt
FE9MCbND+pSjp61R4Z6nxC3NiW/leWQA9ltSRXa26ov5okuKCw9hwtQjH84jeJON
6lSWQmapVNOxhmSrUVXSeiaGVdmK0/ikAtRc2hg8+es3P/Hk2hpWfY8DMvRCbL+d
fC5SzXBqP9d18VDZQaCHM66Vqp+GBhbiv17NIfAh7tczot/etaCK8IhhLV+oltR7
xmPEFvax9wqiAaPJc6FMozpYbDy2Cxf/l4hhwzYNTnwbCNrwlmY1PrQLLOTDAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQU7uFNDjueZm51PoCCk4yvjTAFQUMwHwYDVR0j
BBgwFoAUSyMioWIx/iQNb4Dk8FOFceg77RAwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzI2LzRCMjMyMkExNjIz
MUZFMjQwRDZGODBFNEYwNTM4NTcxRTgzQkVEMTAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9TeU1pb1dJeF9pUU5iNERrOEZPRmNlZzc3UkEuY2VyMG4GCCsGAQUF
BwELBGIwYDBeBggrBgEFBQcwC4ZScnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjYvMzEz
NzM4MmUzMjMyMmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzUz
MDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAshYaMA0GCSqGSIb3DQEBCwUAA4IBAQBt/QqvN4K5enLT
kdSWeDeUVU4cF/DGKFhT4KYA1ExfC2P2b+sA9dwaDY9O5pRoDnYOTkJbVGalJ1fi
JvigQ1Bs2XTHqmo8bScxFwrHkGJkJ0TBEYigNoJSVGfPZHiBIQScvPK1eWFNi4IT
L9PdG3YSRqAywyyJHuSJ5SOAA7TM7vSpypEZfTTJAzfgUdlCe+tes5haN1AiwXb8
byTPom7DhxjhXeLOnTpr7oykivjGYjz1JjOMks75foq59jzDfZrNHxZwI2Rm+WSh
14bvwU3oEfyq/YwlFV0bvLIYz7io7YKRPZunzkRXWdvzL15ce4aNS1YHPz6KB0dh
OhHx5SrG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org