Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2038383838.roa
File:                     3139342e35302e3135342e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          t5mnY6WftCNwcI0U8xZy8HfOsn2kE8JyYwHARMTjvQ8=
Subject key identifier:   DE:FF:2B:67:F8:12:39:78:8C:0A:35:2F:8C:AD:96:69:05:C5:A1:DA
Certificate issuer:       /CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
Certificate serial:       71786F92937537ED4E8250A405601D4577AD662F
Authority key identifier: 09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer
Subject info access:      rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:43 +0000
ROA not before:           Fri 22 Sep 2023 10:14:43 +0000
ROA not after:            Fri 20 Sep 2024 10:19:43 +0000
asID:                     8888
IP address blocks:        194.50.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:78:6f:92:93:75:37:ed:4e:82:50:a4:05:60:1d:45:77:ad:66:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092bbe41f98db0613d0fbc44366d61e28de55b8e
        Validity
            Not Before: Sep 22 10:14:43 2023 GMT
            Not After : Sep 20 10:19:43 2024 GMT
        Subject: CN=DEFF2B67F81239788C0A352F8CAD966905C5A1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:16:59:6c:36:59:b3:72:d6:cf:66:62:8d:
                    64:f2:0d:5e:be:c4:d3:77:ce:01:cc:84:16:97:50:
                    5c:cf:68:c3:4b:26:88:f7:db:47:78:f6:c5:24:70:
                    0a:d5:71:a1:20:d9:d0:2c:d3:7e:7a:9c:93:cf:99:
                    7e:fe:d7:da:36:ff:ea:f1:71:96:3a:27:44:5f:77:
                    a8:5f:06:df:d0:01:e5:0f:c9:8f:4b:c0:61:8c:ac:
                    4f:bb:1f:bc:56:3f:f8:bc:56:46:56:0e:1e:ee:35:
                    18:fd:9d:fa:db:ca:0e:9c:24:d4:53:80:bb:de:9a:
                    2d:e9:93:cd:80:a1:89:af:b7:1c:f0:83:7a:d4:dc:
                    b0:ff:0d:f0:6d:47:0d:dc:79:a8:18:5f:4d:40:6e:
                    f8:4f:e0:b5:d6:a6:71:63:21:2a:b0:ec:1c:53:d7:
                    a9:62:61:f3:ec:fd:36:84:45:f6:41:58:d7:e1:9c:
                    06:49:43:f1:af:dc:9e:38:38:12:8c:81:ae:5a:4f:
                    ad:00:89:05:6c:d4:a5:e0:76:04:9c:c8:cf:61:41:
                    b6:b6:12:19:1a:10:1f:b3:b0:79:d9:9e:2c:69:78:
                    45:f3:5b:19:90:1f:83:86:1d:e6:46:da:5f:4b:e7:
                    d2:cb:91:bc:10:0a:f9:f8:df:a2:48:14:9e:41:f7:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:2B:67:F8:12:39:78:8C:0A:35:2F:8C:AD:96:69:05:C5:A1:DA
            X509v3 Authority Key Identifier:
                keyid:09:2B:BE:41:F9:8D:B0:61:3D:0F:BC:44:36:6D:61:E2:8D:E5:5B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/28/092BBE41F98DB0613D0FBC44366D61E28DE55B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSu-QfmNsGE9D7xENm1h4o3lW44.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/28/3139342e35302e3135342e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:da:d8:b3:bc:d4:ca:1e:25:a6:e1:18:bd:07:cd:12:bd:b9:
         f9:f8:8a:db:46:94:45:8c:db:9d:4f:93:92:df:09:0c:f3:97:
         5a:f4:e4:26:10:45:82:e9:e9:a2:2e:13:ae:90:cd:f8:0d:b3:
         01:67:cc:8b:71:29:e1:06:e9:c2:03:1a:ce:fe:41:90:0e:e9:
         47:45:17:db:7d:23:82:df:97:bc:0c:7f:66:cc:28:5d:3b:83:
         dd:31:01:26:57:1b:ae:f5:94:7e:a5:5b:f8:9c:ad:74:70:a0:
         f3:42:19:99:ee:c1:4d:29:d3:e3:f9:09:e1:8c:f9:06:aa:b2:
         46:0d:c3:cc:fa:2f:66:ec:b6:00:b3:50:b9:be:8d:09:02:0a:
         e0:c9:5f:1c:33:b9:df:b4:42:09:fb:ec:01:70:34:6e:c3:2d:
         d9:83:cc:67:11:f5:49:94:69:ec:fe:5e:27:a3:57:96:1d:6b:
         f6:e2:73:95:c6:b4:5d:f8:ce:d5:8c:af:ab:84:13:0c:2d:45:
         d0:85:f2:bf:1f:95:44:5c:08:d5:05:c4:cf:f9:f3:80:b0:02:
         cc:a7:fd:84:45:82:5e:c5:e2:82:ab:ad:a6:09:91:55:b9:24:
         16:c2:f9:78:c5:ba:7d:39:2a:3f:58:dc:e3:80:2f:0b:ea:d1:
         65:1c:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----