Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e203631313338.roa
File:                     3138352e3132322e3230372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          VzsD40aJUu/OPupEZH27N83B4h8qbyf/mnZejeZPt4U=
Subject key identifier:   16:30:5F:96:AF:B3:69:3A:CE:6E:76:B5:4E:2A:20:65:57:DF:11:2E
Certificate issuer:       /CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Certificate serial:       13D4CFE74215C48936C6D3477777811224E906A2
Authority key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject info access:      rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e203631313338.roa
Signing time:             Fri 21 Oct 2022 09:58:36 +0000
ROA not before:           Fri 21 Oct 2022 09:53:36 +0000
ROA not after:            Fri 20 Oct 2023 09:58:36 +0000
asID:                     61138
IP address blocks:        185.122.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d4:cf:e7:42:15:c4:89:36:c6:d3:47:77:77:81:12:24:e9:06:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
        Validity
            Not Before: Oct 21 09:53:36 2022 GMT
            Not After : Oct 20 09:58:36 2023 GMT
        Subject: CN=16305F96AFB3693ACE6E76B54E2A206557DF112E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:63:b6:0f:6f:2c:e6:b2:61:cb:ff:d8:9d:
                    4b:96:c4:e2:f8:e6:e8:a7:76:c3:e5:0b:20:d4:e0:
                    04:a8:3b:f6:cf:9c:66:00:92:fa:b9:fb:21:8b:ad:
                    73:c2:42:34:6c:9b:dc:ba:cf:7d:3b:fa:4a:dd:bb:
                    1e:be:23:fd:c8:a4:2a:d2:3e:87:ec:5a:2b:24:ab:
                    08:f9:e1:ac:95:1d:ff:4a:b1:23:85:8d:32:28:3e:
                    28:a1:00:47:17:b0:3f:e6:94:1c:1d:f6:62:52:e6:
                    a6:8a:c8:d3:27:49:a6:01:dc:3a:22:89:f5:97:55:
                    d4:9a:07:02:77:94:2f:07:0f:bb:25:73:30:a3:bf:
                    c0:c1:5f:f5:35:90:05:5a:e3:54:79:9b:4c:98:8c:
                    a7:0f:8a:ac:ec:8f:38:c8:38:b5:61:c0:2a:d6:7a:
                    c5:de:a8:7f:b1:0c:d5:2b:c1:f5:14:8f:81:22:e0:
                    ee:7c:24:af:fc:db:3a:be:39:82:7f:62:c3:8e:0e:
                    5f:3c:34:a7:fa:05:3b:02:1e:84:d6:d3:f9:ea:f5:
                    5e:75:1d:22:52:43:b4:7c:82:d0:62:45:d5:bf:77:
                    46:dc:41:d2:5f:68:3e:bd:fb:ca:2a:c6:a8:b0:f9:
                    a4:5e:fd:68:27:76:ec:33:16:c7:99:89:bc:1f:cf:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:5F:96:AF:B3:69:3A:CE:6E:76:B5:4E:2A:20:65:57:DF:11:2E
            X509v3 Authority Key Identifier:
                keyid:75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:17:2d:79:66:8e:49:4e:9a:3b:bc:08:92:3f:94:81:07:
         53:53:9d:b0:da:d5:f4:b3:66:5f:43:95:f9:a5:9c:8b:28:f3:
         8a:c1:f8:97:e9:61:87:8f:40:04:fa:a5:71:63:20:c2:c4:21:
         0d:52:96:11:00:b5:fc:01:8b:98:d0:b4:a7:1d:75:7c:37:2c:
         ea:ff:2d:7a:c9:68:78:e5:f7:55:b2:97:51:6a:12:a5:56:4a:
         e2:af:e0:86:67:6d:3c:9b:6c:45:07:85:3a:b8:d4:16:bc:76:
         9a:27:c5:24:b8:c8:ad:71:85:97:b5:6b:65:bb:11:40:bc:d9:
         5d:94:36:04:ae:88:98:b8:60:e3:d4:18:c2:de:01:89:07:d2:
         a8:70:1c:76:ef:4f:a2:0e:45:6f:6d:a5:ef:38:45:15:fe:ff:
         b4:bd:99:ce:4d:6d:3b:d5:fb:2a:c5:bc:84:22:cc:c7:29:4a:
         bc:8d:8b:86:58:c0:e3:18:b1:19:a8:07:e6:d0:01:d7:11:29:
         a3:24:f1:d4:b0:6f:1f:ef:e5:62:55:c0:63:c6:4e:06:df:2b:
         63:88:89:6f:7d:28:58:6f:68:0a:17:88:a9:58:e6:fc:f8:80:
         12:66:49:fe:65:e0:70:8d:3e:dc:78:f2:c1:eb:4e:5c:5d:89:
         21:a8:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----