Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e203631333137.roa
File:                     3137382e32322e32362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zRrgsXacAFjE1WAX5MpBeC0jpXmn++oNfvi1V9ZiS68=
Subject key identifier:   A2:58:D9:AC:D6:F7:C6:46:20:DF:5D:40:4E:E6:77:C5:8E:E3:AD:E8
Certificate issuer:       /CN=4b2322a16231fe240d6f80e4f0538571e83bed10
Certificate serial:       28C85688C91EB72209A11B0430B0E262DE68E064
Authority key identifier: 4B:23:22:A1:62:31:FE:24:0D:6F:80:E4:F0:53:85:71:E8:3B:ED:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyMioWIx_iQNb4Dk8FOFceg77RA.cer
Subject info access:      rsync://0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 23 Jan 2023 06:22:44 +0000
ROA not before:           Mon 23 Jan 2023 06:17:44 +0000
ROA not after:            Mon 22 Jan 2024 06:22:44 +0000
asID:                     61317
IP address blocks:        178.22.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c8:56:88:c9:1e:b7:22:09:a1:1b:04:30:b0:e2:62:de:68:e0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2322a16231fe240d6f80e4f0538571e83bed10
        Validity
            Not Before: Jan 23 06:17:44 2023 GMT
            Not After : Jan 22 06:22:44 2024 GMT
        Subject: CN=A258D9ACD6F7C64620DF5D404EE677C58EE3ADE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:6d:29:4c:a8:ab:fe:82:94:28:12:f0:eb:
                    6c:15:23:47:2d:11:7f:19:26:0c:1d:e3:10:03:a2:
                    ef:c2:2d:17:52:d2:d1:d4:6e:83:f6:64:a5:3a:9a:
                    ef:60:cd:76:6c:13:bf:9c:9e:e1:75:f8:a2:c5:ac:
                    df:2b:09:17:75:fa:42:b6:46:d2:06:a4:3e:7b:c8:
                    0c:20:6c:18:79:55:68:22:f3:63:ed:06:a2:16:e2:
                    ec:82:d5:49:a1:3f:6b:4e:a4:05:85:a1:bc:68:da:
                    f5:37:34:83:a6:0e:dc:2a:64:76:a1:ad:bd:64:57:
                    ed:88:83:93:d4:68:b3:39:4f:3a:23:80:86:36:0a:
                    7b:05:be:d3:90:ee:39:e0:46:c7:a5:73:78:f3:77:
                    a5:f2:eb:b6:79:97:00:95:25:25:18:d1:58:47:72:
                    07:d3:f6:ff:62:12:ba:bb:46:85:59:e9:c7:52:96:
                    4e:21:3f:4f:13:1f:86:2c:fd:dc:b8:73:28:79:5e:
                    35:a2:f1:2b:28:2f:86:db:55:6e:26:ec:e4:a1:71:
                    86:15:52:ab:cf:85:1c:9d:bc:a4:b0:ce:a7:80:69:
                    07:b5:f7:ba:8e:d0:b9:2a:5e:9e:60:70:86:3c:ee:
                    ba:54:44:6b:ec:25:9b:91:0b:92:33:17:af:da:91:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:D9:AC:D6:F7:C6:46:20:DF:5D:40:4E:E6:77:C5:8E:E3:AD:E8
            X509v3 Authority Key Identifier:
                keyid:4B:23:22:A1:62:31:FE:24:0D:6F:80:E4:F0:53:85:71:E8:3B:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/26/4B2322A16231FE240D6F80E4F0538571E83BED10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyMioWIx_iQNb4Dk8FOFceg77RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/26/3137382e32322e32362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:59:1b:24:3e:08:57:20:4f:96:0f:3b:7a:59:19:95:e6:c2:
         7f:d2:20:4e:02:b7:67:b2:7d:3e:6c:d1:53:27:ab:5d:bd:d9:
         ef:42:23:c7:1b:f3:60:32:3a:95:24:22:ff:2a:31:72:23:ff:
         57:a2:55:96:3d:37:fb:30:b7:71:04:fc:2a:89:1f:90:de:29:
         c1:a6:d6:92:0d:fb:74:a9:cb:1e:f8:68:6b:87:c4:b2:29:2e:
         63:3f:e3:17:bc:3e:0c:85:74:09:27:95:89:63:bf:1a:f8:5f:
         e1:15:b8:69:85:2f:d9:85:0b:3a:e7:27:f8:a2:28:34:c8:89:
         68:cc:d3:af:96:a4:15:51:12:58:c2:98:30:f1:b4:42:7a:06:
         2e:07:a9:3b:41:4d:33:1d:1a:75:fa:d2:86:52:54:ca:3f:b0:
         f9:1d:f3:5d:77:83:06:08:98:a3:3b:6c:e4:1c:09:0f:cf:37:
         ae:44:da:b6:66:be:f1:4c:71:aa:5a:7f:6c:ef:f6:9c:65:40:
         8e:7f:5e:14:91:32:fc:8a:eb:73:0a:65:af:58:73:0b:7c:80:
         10:38:ff:0f:94:14:8b:18:15:d7:7e:57:32:7a:74:47:a7:03:
         bf:aa:5e:7a:0b:9d:ef:35:d5:31:42:7e:4a:e4:4d:57:36:d6:
         8d:89:62:12
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUKMhWiMketyIJoRsEMLDiYt5o4GQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGIyMzIyYTE2MjMxZmUyNDBkNmY4MGU0ZjA1Mzg1NzFl
ODNiZWQxMDAeFw0yMzAxMjMwNjE3NDRaFw0yNDAxMjIwNjIyNDRaMDMxMTAvBgNV
BAMTKEEyNThEOUFDRDZGN0M2NDYyMERGNUQ0MDRFRTY3N0M1OEVFM0FERTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJ20pTKir/oKUKBLw62wVI0ct
EX8ZJgwd4xADou/CLRdS0tHUboP2ZKU6mu9gzXZsE7+cnuF1+KLFrN8rCRd1+kK2
RtIGpD57yAwgbBh5VWgi82PtBqIW4uyC1UmhP2tOpAWFobxo2vU3NIOmDtwqZHah
rb1kV+2Ig5PUaLM5TzojgIY2CnsFvtOQ7jngRselc3jzd6Xy67Z5lwCVJSUY0VhH
cgfT9v9iErq7RoVZ6cdSlk4hP08TH4Ys/dy4cyh5XjWi8SsoL4bbVW4m7OShcYYV
UqvPhRydvKSwzqeAaQe197qO0LkqXp5gcIY87rpURGvsJZuRC5IzF6/akWp5AgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUoljZrNb3xkYg311ATuZ3xY7jregwHwYDVR0j
BBgwFoAUSyMioWIx/iQNb4Dk8FOFceg77RAwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzI2LzRCMjMyMkExNjIz
MUZFMjQwRDZGODBFNEYwNTM4NTcxRTgzQkVEMTAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9TeU1pb1dJeF9pUU5iNERrOEZPRmNlZzc3UkEuY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjYvMzEz
NzM4MmUzMjMyMmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALIWGjANBgkqhkiG9w0BAQsFAAOCAQEAFlkbJD4IVyBPlg87
elkZlebCf9IgTgK3Z7J9PmzRUyerXb3Z70IjxxvzYDI6lSQi/yoxciP/V6JVlj03
+zC3cQT8KokfkN4pwabWkg37dKnLHvhoa4fEsikuYz/jF7w+DIV0CSeViWO/Gvhf
4RW4aYUv2YULOucn+KIoNMiJaMzTr5akFVESWMKYMPG0QnoGLgepO0FNMx0adfrS
hlJUyj+w+R3zXXeDBgiYozts5BwJD883rkTatma+8Uxxqlp/bO/2nGVAjn9eFJEy
/Irrcwplr1hzC3yAEDj/D5QUixgV135XMnp0R6cDv6peegud7zXVMUJ+SuRNVzbW
jYliEg==
-----END CERTIFICATE-----