Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2034373835.roa
File:                     3139342e35302e3135342e302f32342d3234203d3e2034373835.roa (raw, json)
Hash identifier:          CCpTWQBGLxrgeezK6yuy+w004aWk0tPy8334ZtC2rA0=
Subject key identifier:   CB:3B:6B:DA:13:AE:03:32:9C:3E:E8:49:42:25:47:BC:1B:75:56:5C
Certificate issuer:       /CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
Certificate serial:       164ED57B93DB378FFF6B53DF3EAC227ED5B65CD8
Authority key identifier: 09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer
Subject info access:      rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2034373835.roa
Signing time:             Fri 22 Sep 2023 10:19:43 +0000
ROA not before:           Fri 22 Sep 2023 10:14:43 +0000
ROA not after:            Fri 20 Sep 2024 10:19:43 +0000
asID:                     4785
IP address blocks:        194.50.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4e:d5:7b:93:db:37:8f:ff:6b:53:df:3e:ac:22:7e:d5:b6:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
        Validity
            Not Before: Sep 22 10:14:43 2023 GMT
            Not After : Sep 20 10:19:43 2024 GMT
        Subject: CN=CB3B6BDA13AE03329C3EE849422547BC1B75565C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:ad:fd:78:19:19:5d:03:3d:31:3e:65:9a:
                    d2:d0:ed:79:e0:22:00:0e:cd:9e:4b:fa:15:ed:e6:
                    d6:e3:10:4c:b5:80:6c:5d:38:73:d9:bb:f2:83:69:
                    97:22:35:aa:b7:eb:3d:86:b0:c5:3b:09:6b:0e:00:
                    11:38:b2:e2:fc:73:41:55:23:36:55:90:ae:be:e5:
                    e2:79:88:3b:c9:02:02:75:89:90:4d:69:09:7d:e5:
                    9e:7b:ab:e3:58:7f:71:1d:f1:ce:04:61:66:2e:ce:
                    59:22:66:43:f1:0e:d0:7c:b9:f4:1b:49:4d:38:53:
                    e6:7d:19:66:5a:4c:89:59:49:c3:e4:e2:fd:04:1b:
                    36:06:8e:ee:c6:9f:4f:92:8e:14:58:6e:81:d8:3f:
                    11:ec:e8:b1:00:b0:de:48:9e:2d:aa:a4:41:84:a2:
                    01:df:24:40:ec:bf:97:5a:f2:a1:d4:07:0a:65:13:
                    fd:66:7d:e7:e8:ee:24:e1:0a:15:0c:f4:b6:b3:20:
                    5b:e9:19:d2:f5:c2:0c:97:4d:2c:40:65:04:56:75:
                    4b:88:0a:10:00:3d:92:ba:19:e1:7d:3b:f0:31:ca:
                    c2:1e:ad:41:2a:04:d5:d1:7a:7b:8b:d4:b4:d7:78:
                    ac:89:56:9b:27:79:c3:84:7c:6d:ac:2f:cd:46:d7:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3B:6B:DA:13:AE:03:32:9C:3E:E8:49:42:25:47:BC:1B:75:56:5C
            X509v3 Authority Key Identifier:
                keyid:09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/28/092BBE41F98DB0613D0FBC44366D61E28DE55B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2034373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b3:04:02:fd:ba:d4:13:5e:69:ec:27:2b:24:ae:44:06:e3:
         61:a1:aa:6f:84:e5:b5:c9:d5:47:68:1a:c8:ff:e9:85:39:92:
         69:06:e6:5d:6e:96:68:18:76:54:54:1c:99:33:bc:ae:96:b4:
         71:51:8b:98:78:dc:17:9b:b0:aa:17:ff:1d:fe:45:ad:6b:1c:
         c1:a1:1c:53:12:22:0d:7b:7e:45:07:17:79:57:de:18:ef:5b:
         c1:38:86:3f:10:2f:3a:10:cd:09:17:8a:74:7b:3e:5a:d4:d2:
         e3:ea:f2:26:0d:98:32:d5:99:45:c3:1b:15:17:59:97:c8:d6:
         41:c3:b8:7a:aa:23:dc:f9:ce:9e:bd:35:fe:1d:e8:2e:fe:db:
         c5:37:17:d2:6d:21:bd:16:1f:fc:f0:89:dd:78:ae:ab:fe:6d:
         19:d8:8f:20:ac:ba:31:66:28:e0:a4:c1:b9:4b:7c:8b:50:9d:
         42:71:14:b3:ae:62:42:eb:6e:32:ff:dc:fe:81:50:5f:59:72:
         89:1d:61:43:86:67:68:31:fe:f4:d8:f3:82:ba:fc:b0:4c:48:
         a5:6a:47:36:52:23:7a:6c:fe:e9:81:09:f1:95:f8:d2:04:9f:
         f0:bc:9d:59:34:5b:58:c2:7e:1c:cf:11:c4:a6:3e:ff:ab:42:
         be:5f:a6:7d
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUFk7Ve5PbN4//a1PfPqwiftW2XNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkyYmJlNDFmOThkYjA2MTNkMGZiYzQ0MzY2ZDYxZTI4
ZGU1NWI4ZTAeFw0yMzA5MjIxMDE0NDNaFw0yNDA5MjAxMDE5NDNaMDMxMTAvBgNV
BAMTKENCM0I2QkRBMTNBRTAzMzI5QzNFRTg0OTQyMjU0N0JDMUI3NTU2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVq39eBkZXQM9MT5lmtLQ7Xng
IgAOzZ5L+hXt5tbjEEy1gGxdOHPZu/KDaZciNaq36z2GsMU7CWsOABE4suL8c0FV
IzZVkK6+5eJ5iDvJAgJ1iZBNaQl95Z57q+NYf3Ed8c4EYWYuzlkiZkPxDtB8ufQb
SU04U+Z9GWZaTIlZScPk4v0EGzYGju7Gn0+SjhRYboHYPxHs6LEAsN5Ini2qpEGE
ogHfJEDsv5da8qHUBwplE/1mfefo7iThChUM9LazIFvpGdL1wgyXTSxAZQRWdUuI
ChAAPZK6GeF9O/AxysIerUEqBNXRenuL1LTXeKyJVpsnecOEfG2sL81G1zVXAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUyztr2hOuAzKcPuhJQiVHvBt1VlwwHwYDVR0j
BBgwFoAUCSu+QfmNsGE9D7xENm1h4o3lW44wDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzI4LzA5MkJCRTQxRjk4
REIwNjEzRDBGQkM0NDM2NkQ2MUUyOERFNTVCOEUuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9DU3UtUWZtTnNHRTlEN3hFTm0xaDRvM2xXNDQuY2VyMGwGCCsGAQUF
BwELBGAwXjBcBggrBgEFBQcwC4ZQcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMjgvMzEz
OTM0MmUzNTMwMmUzMTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3Mzgz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMIymjANBgkqhkiG9w0BAQsFAAOCAQEAQbMEAv261BNeaewn
KySuRAbjYaGqb4TltcnVR2gayP/phTmSaQbmXW6WaBh2VFQcmTO8rpa0cVGLmHjc
F5uwqhf/Hf5FrWscwaEcUxIiDXt+RQcXeVfeGO9bwTiGPxAvOhDNCReKdHs+WtTS
4+ryJg2YMtWZRcMbFRdZl8jWQcO4eqoj3PnOnr01/h3oLv7bxTcX0m0hvRYf/PCJ
3Xiuq/5tGdiPIKy6MWYo4KTBuUt8i1CdQnEUs65iQutuMv/c/oFQX1lyiR1hQ4Zn
aDH+9Njzgrr8sExIpWpHNlIjemz+6YEJ8ZX40gSf8LydWTRbWMJ+HM8RxKY+/6tC
vl+mfQ==
-----END CERTIFICATE-----