Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20393439.roa
File:                     3138352e3132322e3230372e302f32342d3234203d3e20393439.roa (raw, json)
Hash identifier:          ufy3OjIpJCBIZTHce1D8fnp3Lu/pHL+FlSHy8qmXdGQ=
Subject key identifier:   28:E7:69:90:FB:17:DB:68:8C:28:2E:F6:44:2B:6A:DF:ED:84:97:33
Certificate issuer:       /CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Certificate serial:       1E6513034CF03DFC08F83D819CD5AFFEDE494457
Authority key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
Subject info access:      rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20393439.roa
Signing time:             Fri 22 Sep 2023 10:19:37 +0000
ROA not before:           Fri 22 Sep 2023 10:14:37 +0000
ROA not after:            Fri 20 Sep 2024 10:19:37 +0000
asID:                     949
IP address blocks:        185.122.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:65:13:03:4c:f0:3d:fc:08:f8:3d:81:9c:d5:af:fe:de:49:44:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
        Validity
            Not Before: Sep 22 10:14:37 2023 GMT
            Not After : Sep 20 10:19:37 2024 GMT
        Subject: CN=28E76990FB17DB688C282EF6442B6ADFED849733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:7c:db:85:02:78:e8:e1:a8:c4:82:41:59:
                    26:11:fc:8c:da:b6:33:28:bc:27:47:54:25:8c:41:
                    33:eb:52:17:4d:f4:19:9a:c4:f3:83:a3:89:8a:52:
                    c3:e4:b9:9f:48:51:12:d6:3a:70:7d:ed:1e:3a:32:
                    76:ff:67:3f:25:7d:4d:6c:55:09:0b:5f:da:f5:d4:
                    76:aa:07:b9:35:4f:f3:b9:9b:84:88:47:5c:2a:8d:
                    dd:cf:3b:f9:88:81:5e:25:61:9f:01:15:85:a1:84:
                    e2:ff:df:b9:49:33:77:a0:8d:1d:fa:14:dc:0c:ed:
                    72:68:04:c1:a5:b0:c7:3d:a5:c4:d1:3f:56:9a:e2:
                    4e:72:ee:ec:1d:a7:f4:c6:26:07:d1:aa:aa:fa:31:
                    72:51:8a:1f:13:11:ae:b6:b8:16:61:b4:4e:f3:1d:
                    cb:ad:06:f1:a1:c1:ec:0a:a8:bd:fa:b6:27:30:45:
                    06:ad:e4:ec:59:aa:cb:f2:4e:f5:62:fb:9f:f6:54:
                    6d:0f:3a:94:03:e9:14:b7:18:48:8b:80:25:b8:d5:
                    5c:b9:46:5f:49:e6:6b:b9:36:b9:57:29:5c:f3:8e:
                    f2:af:55:8d:a8:cc:9e:61:11:1f:23:3d:56:f6:d9:
                    71:9c:5a:00:b2:c5:25:0b:42:b3:b3:31:c4:bc:23:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E7:69:90:FB:17:DB:68:8C:28:2E:F6:44:2B:6A:DF:ED:84:97:33
            X509v3 Authority Key Identifier:
                keyid:75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/29/3138352e3132322e3230372e302f32342d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:17:5c:17:9b:9b:59:dd:6e:57:20:f0:87:d0:c7:48:29:c9:
         e1:84:fe:09:ff:83:dd:fe:e1:1f:2c:73:ce:0d:a4:2f:2a:49:
         cb:61:57:ab:8e:53:57:55:f6:c7:8a:95:f7:02:79:34:da:bc:
         ce:d5:b7:7d:a6:80:82:4a:85:4a:f8:47:a7:e4:55:47:c8:b9:
         bc:1d:cc:38:b5:6a:27:d1:14:2b:4e:5c:cf:2a:7f:6f:14:81:
         ae:f3:b4:c5:6f:81:00:5f:52:db:23:9f:03:45:77:93:66:29:
         15:87:83:41:0f:b0:ad:67:2a:2a:02:3c:e6:e9:a5:e5:9b:bb:
         7a:5e:c2:4f:1e:8e:01:0c:34:e6:8d:e1:79:12:2f:a5:6e:50:
         3c:16:2b:70:2e:cd:96:11:1f:8e:c6:ea:12:49:65:3d:86:d8:
         fc:89:44:4c:a5:93:9a:1b:36:02:34:3e:d6:aa:62:d3:0c:a7:
         ad:4c:ca:05:0d:f1:a8:ba:27:af:69:0d:74:5c:64:06:7d:99:
         3b:7e:cd:e6:bf:8a:8b:4e:47:20:00:29:82:ee:7b:4e:cc:40:
         7a:cd:d8:7e:76:61:77:94:90:0c:ae:9e:b0:fe:ec:2a:b9:4f:
         b8:96:bd:ea:4d:f9:e3:52:8f:e9:9c:fc:eb:6b:b5:aa:d9:5a:
         16:9c:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----