Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2033323538.roa
File:                     3139342e35302e3135342e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          w9tp8l9ZwxBM+r4fserHusAJ/SzxJgsTZqdXSpojV6g=
Subject key identifier:   75:9D:B7:1A:42:15:DB:39:38:41:08:6C:C1:7D:39:14:E9:48:7E:FA
Certificate issuer:       /CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
Certificate serial:       537DEDE83BBA2AABFC3315210467F70F52B5AA22
Authority key identifier: 09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer
Subject info access:      rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2033323538.roa
Signing time:             Tue 26 Sep 2023 11:19:19 +0000
ROA not before:           Tue 26 Sep 2023 11:14:19 +0000
ROA not after:            Tue 24 Sep 2024 11:19:19 +0000
asID:                     3258
IP address blocks:        194.50.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7d:ed:e8:3b:ba:2a:ab:fc:33:15:21:04:67:f7:0f:52:b5:aa:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
        Validity
            Not Before: Sep 26 11:14:19 2023 GMT
            Not After : Sep 24 11:19:19 2024 GMT
        Subject: CN=759DB71A4215DB393841086CC17D3914E9487EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:4a:70:37:9c:70:f7:07:f6:2a:61:8e:db:
                    fc:10:2d:a1:c8:f2:49:ea:52:23:33:35:6e:40:74:
                    cb:c2:3f:5a:57:32:ad:9a:c4:90:dc:cc:72:65:5e:
                    6c:07:92:cd:12:6a:ca:20:69:61:74:71:93:d5:ef:
                    56:3e:59:85:8e:ec:63:88:b6:d9:13:71:27:ba:e1:
                    18:c7:da:48:8f:8a:62:ce:5f:e1:87:98:3b:a1:75:
                    fb:b0:6c:ae:64:79:e3:d7:e0:2a:32:68:20:f2:ba:
                    20:7f:4e:89:f5:f7:3e:b5:75:c4:0c:d1:7e:b2:c1:
                    56:e6:ec:18:db:34:07:bc:50:44:37:de:c8:9e:a5:
                    b7:1a:de:08:29:71:3e:75:13:1e:10:32:f1:2b:51:
                    f1:8b:75:01:53:f1:01:63:ed:27:90:6d:c5:be:7f:
                    66:ac:8f:2e:39:34:fc:a0:f1:26:1b:e7:00:84:70:
                    5a:b0:de:25:91:cc:67:01:4a:04:96:1f:d7:66:6b:
                    0f:e4:55:49:d7:06:e2:38:42:9a:6d:65:e7:18:f0:
                    ab:60:d2:7d:36:d0:44:da:da:77:fc:79:47:f7:b4:
                    66:a3:8f:c8:01:53:82:b9:da:0d:0a:aa:ed:3e:39:
                    c1:ec:01:63:6e:82:47:6e:d2:8a:76:05:5b:e3:df:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:B7:1A:42:15:DB:39:38:41:08:6C:C1:7D:39:14:E9:48:7E:FA
            X509v3 Authority Key Identifier:
                keyid:09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/28/092BBE41F98DB0613D0FBC44366D61E28DE55B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:42:c9:0a:aa:c7:de:10:aa:0c:84:fe:74:56:ec:7e:fb:14:
         a5:c5:f5:9b:bb:61:89:84:bc:bf:4d:50:4a:fa:ce:ad:0b:0c:
         fa:c1:99:b4:1b:ea:83:91:a3:da:58:7b:12:5b:ee:b9:c8:0a:
         11:d4:10:60:4a:5f:f7:04:85:a8:ac:09:b1:e6:6d:dd:e5:ca:
         69:ec:48:3d:24:47:c7:0f:30:02:b8:7c:83:4f:45:2f:70:84:
         a5:45:5f:ae:ed:d7:b0:8b:61:c0:5e:85:c4:79:a7:6f:ae:21:
         69:87:e8:26:95:1d:61:32:12:4a:9b:c4:07:30:96:a1:b4:9a:
         f1:53:96:4e:3e:5f:7c:77:f2:c2:28:e0:f1:2a:91:6d:62:f9:
         f6:c9:88:a2:f1:7c:3b:78:ea:dc:47:bd:5d:64:48:d5:41:9f:
         e8:73:65:4f:79:d5:58:ce:9b:b1:b6:98:95:c6:70:f6:fd:cc:
         de:91:cf:e0:6c:eb:62:32:3d:21:c5:9e:ae:0b:ee:64:e7:ed:
         71:92:04:0f:e9:4f:8b:6c:c9:7c:70:22:e8:2d:ac:e9:7b:56:
         8c:51:98:dc:c9:47:83:c8:c9:9a:fc:ad:e8:78:01:4b:94:5c:
         f5:9d:4f:ca:ee:24:76:97:81:79:db:27:65:22:48:0a:4e:16:
         d9:c3:73:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----