Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/3/326131313a383038303a3a2f32392d3438203d3e2038383838.roa
File:                     326131313a383038303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          20mKxZwyeDns9f6Z4mHFx2BFPDsTUxJpnHpc9d5VYjg=
Subject key identifier:   AB:46:68:AC:32:0C:72:0C:37:1C:B1:83:21:82:8E:57:5C:59:A8:A5
Certificate issuer:       /CN=4411d0e418f4a200aae7ce0f87713e647365cbf5
Certificate serial:       42725FBB5D235B7359882AA0A98D7A1DD5237835
Authority key identifier: 44:11:D0:E4:18:F4:A2:00:AA:E7:CE:0F:87:71:3E:64:73:65:CB:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBHQ5Bj0ogCq584Ph3E-ZHNly_U.cer
Subject info access:      rsync://0.sb/repo/sb/3/326131313a383038303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     8888
IP address blocks:        2a11:8080::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:5f:bb:5d:23:5b:73:59:88:2a:a0:a9:8d:7a:1d:d5:23:78:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4411d0e418f4a200aae7ce0f87713e647365cbf5
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=AB4668AC320C720C371CB18321828E575C59A8A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a1:a5:c1:92:e5:11:1a:e5:8d:96:83:93:27:
                    ca:29:a1:2e:cf:b3:9c:ae:fc:3f:0e:c3:c9:a5:cf:
                    21:8e:39:49:1d:d6:1a:0b:67:62:21:3c:54:ef:90:
                    d3:6c:c1:25:fd:16:bf:f4:8f:2e:b4:61:cd:54:1e:
                    0e:f6:b1:09:d5:98:90:77:83:32:ae:fb:fb:99:1e:
                    35:a9:89:64:87:f6:e7:93:7d:7c:31:d4:0b:91:b2:
                    e6:e0:83:5f:62:03:dc:e2:7a:d1:61:46:31:a2:ad:
                    fe:1d:39:c2:90:05:36:b8:88:bd:c5:3a:49:03:83:
                    59:a8:9c:df:f0:a2:b3:de:de:24:ec:eb:16:ca:c6:
                    c0:8c:73:40:f4:85:d6:c4:20:c3:59:48:be:25:c7:
                    72:90:ff:f5:cf:ce:35:48:9e:a4:6d:9c:11:08:95:
                    d7:b0:9e:c9:fd:89:57:87:37:91:6e:2d:13:75:92:
                    57:e1:1d:f1:26:d4:96:f3:17:60:3e:09:8e:fb:0f:
                    de:4e:d0:02:9a:f5:44:2e:8d:9c:48:4c:c0:ef:c0:
                    6b:90:0b:66:fc:be:68:bd:a3:2f:9d:29:6c:36:69:
                    d8:bd:06:6a:b5:a9:5d:48:16:93:ff:bf:c2:14:42:
                    27:69:d9:1d:ec:06:b0:73:d6:45:df:b6:0f:c7:59:
                    82:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:46:68:AC:32:0C:72:0C:37:1C:B1:83:21:82:8E:57:5C:59:A8:A5
            X509v3 Authority Key Identifier:
                keyid:44:11:D0:E4:18:F4:A2:00:AA:E7:CE:0F:87:71:3E:64:73:65:CB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/3/4411D0E418F4A200AAE7CE0F87713E647365CBF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBHQ5Bj0ogCq584Ph3E-ZHNly_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/3/326131313a383038303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8080::/29

    Signature Algorithm: sha256WithRSAEncryption
         bf:71:88:bd:aa:5a:18:ca:46:c9:dd:12:65:4c:19:8c:d4:54:
         dc:c7:cf:9c:d0:3d:3d:85:41:78:08:a2:c8:33:cd:87:e2:8d:
         85:f8:81:05:09:30:29:c0:49:2b:9e:77:62:79:52:61:bc:be:
         4f:a3:b5:fb:3f:0c:e7:0e:05:35:09:bb:e4:f5:cb:de:dc:c8:
         64:17:c5:2f:3f:75:4e:8a:4a:c5:ef:a6:62:7a:5a:55:09:31:
         ac:26:f5:bb:fd:cd:55:f3:b9:58:9c:c2:ba:4a:01:4d:bd:0d:
         9b:7f:80:34:74:f2:a1:54:49:f3:4b:29:56:3f:0a:19:9c:ca:
         67:88:16:7c:4d:b4:7f:6c:f5:6c:e5:6b:1d:e7:01:8a:ca:d4:
         85:29:7e:13:a6:9d:80:5d:2b:88:33:30:79:66:6b:be:13:54:
         58:16:a5:03:34:b1:8d:1f:68:00:42:eb:ba:bf:31:b0:0f:e5:
         94:ba:49:bf:f6:bd:75:24:08:23:5d:e1:b1:de:aa:04:c5:dc:
         c9:ee:78:f7:7b:6d:20:2c:2b:36:f9:21:86:97:bb:fb:32:b7:
         30:c9:7e:a6:83:90:e4:d1:f1:87:4f:64:5c:52:7c:ed:ac:cd:
         e0:0b:48:ec:89:99:1b:cb:83:32:a8:3c:15:4c:79:4b:7a:c5:
         74:b9:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----