Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/3/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
File:                     39342e3132342e37392e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          TnVLpRyhmIYbGadP7MGId8SLmLmOVeIRFZH80kgMyUw=
Subject key identifier:   BB:85:1E:F8:C7:71:EC:7B:47:73:A6:99:43:A9:88:26:BA:D8:1D:84
Certificate issuer:       /CN=4411d0e418f4a200aae7ce0f87713e647365cbf5
Certificate serial:       2196A494EDC961A6F9BB18E8730EA0F3785928EC
Authority key identifier: 44:11:D0:E4:18:F4:A2:00:AA:E7:CE:0F:87:71:3E:64:73:65:CB:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBHQ5Bj0ogCq584Ph3E-ZHNly_U.cer
Subject info access:      rsync://0.sb/repo/sb/3/39342e3132342e37392e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     8888
IP address blocks:        94.124.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:96:a4:94:ed:c9:61:a6:f9:bb:18:e8:73:0e:a0:f3:78:59:28:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4411d0e418f4a200aae7ce0f87713e647365cbf5
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=BB851EF8C771EC7B4773A69943A98826BAD81D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:d3:53:76:52:68:53:bb:d3:cc:38:e0:e0:
                    9f:2d:dd:5e:f5:c6:cb:8c:17:9c:09:e7:f9:ee:b2:
                    fc:61:6a:14:ba:1c:a1:ec:80:06:ad:f0:40:28:36:
                    9d:46:42:14:ee:5a:67:e6:86:c6:cf:bd:2e:18:77:
                    f4:91:aa:e4:c0:af:4a:5b:86:c3:77:56:bc:6a:37:
                    df:3b:32:37:ed:20:43:52:54:8d:35:65:31:a5:43:
                    ef:c2:8c:8d:ac:12:92:69:c8:71:7f:90:dc:00:98:
                    d3:33:b4:aa:07:b8:27:5a:35:6d:e2:24:8b:40:3f:
                    de:f1:9f:bc:98:ed:3f:fb:c6:f7:b3:7b:b8:7f:aa:
                    45:d2:47:a8:78:fb:93:5c:4d:b5:ef:7f:da:ab:d5:
                    60:c9:54:4e:83:51:19:24:de:61:64:f6:4f:93:5b:
                    ff:f0:33:4c:d0:fd:90:3c:66:54:cb:d1:f6:c5:bc:
                    22:02:51:67:00:3f:99:51:01:03:13:79:2d:6a:24:
                    4a:82:a3:8b:f7:95:ac:71:5a:77:f0:eb:df:da:03:
                    df:8c:4c:d4:41:77:f2:3c:ee:d7:96:a2:ee:92:68:
                    b5:bf:4a:95:c2:1e:43:98:d9:9c:0c:5c:f9:90:bb:
                    ff:a2:63:02:ee:d2:c5:d0:5c:40:db:ed:37:95:7f:
                    31:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:1E:F8:C7:71:EC:7B:47:73:A6:99:43:A9:88:26:BA:D8:1D:84
            X509v3 Authority Key Identifier:
                keyid:44:11:D0:E4:18:F4:A2:00:AA:E7:CE:0F:87:71:3E:64:73:65:CB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/3/4411D0E418F4A200AAE7CE0F87713E647365CBF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBHQ5Bj0ogCq584Ph3E-ZHNly_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/3/39342e3132342e37392e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:00:cd:db:2e:ff:1e:db:83:4e:20:54:46:12:4b:d9:51:5f:
         a3:6c:f6:93:b5:14:e3:51:c5:19:b7:d2:5c:55:ee:df:b5:1a:
         ef:b4:13:d3:62:81:c9:b4:95:61:54:63:56:ca:34:2f:93:fa:
         77:13:d2:28:97:09:0e:8d:10:29:ca:31:b4:ae:89:00:be:4a:
         a4:77:0b:44:46:22:1c:cd:61:02:0c:6f:70:da:ba:99:c6:2e:
         f8:ff:7c:82:ca:cf:e2:ff:f7:75:bd:47:5e:2e:dd:64:bb:1e:
         75:0e:42:21:8a:dd:0d:75:74:3b:67:87:90:0e:c4:58:cb:4e:
         85:11:b7:3d:5a:fa:70:22:cf:51:2c:89:b9:1d:a7:c9:57:a8:
         fc:f4:95:ed:6e:67:89:d5:db:83:bf:08:d5:d5:68:b3:db:4a:
         6b:4c:0e:4c:07:9e:aa:2f:88:23:01:55:5f:31:fc:c5:4c:29:
         f2:bb:41:1b:35:3d:26:a8:b7:f4:97:65:38:8c:e5:63:65:b5:
         4c:7b:33:ea:69:05:8a:09:8a:e6:c4:7b:b5:55:01:39:bf:e6:
         8b:93:18:68:1f:e2:b4:b4:96:53:d1:b1:44:01:5f:eb:87:ed:
         9b:9b:e6:d5:d7:d6:dc:b4:bf:41:89:68:3c:31:34:b1:f3:62:
         12:7e:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----