Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e20313336383937.roa
File:                     3231332e3231372e392e302f32342d3234203d3e20313336383937.roa (raw, json)
Hash identifier:          0loLSmkzmJtgO5T5VrL5y6HoRkOuO9Wm0vNjh2iks2I=
Subject key identifier:   BB:40:C0:BF:8C:E1:B2:C7:69:F5:A3:8F:24:F9:96:65:24:75:92:29
Certificate issuer:       /CN=f8ce54a4c62e61b125423fa90ca3f9d8350c7d3d
Certificate serial:       67C6825468640B598347A47A11C28A8FD9EC812A
Authority key identifier: F8:CE:54:A4:C6:2E:61:B1:25:42:3F:A9:0C:A3:F9:D8:35:0C:7D:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M5UpMYuYbElQj-pDKP52DUMfT0.cer
Subject info access:      rsync://0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e20313336383937.roa
Signing time:             Fri 22 Sep 2023 10:19:41 +0000
ROA not before:           Fri 22 Sep 2023 10:14:41 +0000
ROA not after:            Fri 20 Sep 2024 10:19:41 +0000
asID:                     136897
IP address blocks:        213.217.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c6:82:54:68:64:0b:59:83:47:a4:7a:11:c2:8a:8f:d9:ec:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ce54a4c62e61b125423fa90ca3f9d8350c7d3d
        Validity
            Not Before: Sep 22 10:14:41 2023 GMT
            Not After : Sep 20 10:19:41 2024 GMT
        Subject: CN=BB40C0BF8CE1B2C769F5A38F24F9966524759229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:f3:84:6c:cf:4d:cd:9c:e8:13:d7:d8:e4:
                    14:22:f9:af:08:07:a9:6b:90:cb:a0:b6:85:66:bb:
                    5a:f0:d4:0d:15:a4:82:67:f7:02:5a:11:a3:fe:8e:
                    b5:a5:ad:8e:4d:ab:71:2f:3f:8a:0c:ca:34:08:3d:
                    fa:59:c9:87:46:b0:ed:4d:e4:a7:8e:d4:f4:8f:a9:
                    b0:1a:13:61:20:89:65:1f:64:50:1f:00:6e:df:5a:
                    0c:28:7c:33:13:51:14:af:ea:2c:9c:50:21:bd:5c:
                    1a:0c:28:5a:73:97:9f:ed:b9:66:0b:1a:79:eb:c8:
                    35:64:62:3a:e3:0e:75:ce:43:ed:61:53:bd:fd:49:
                    e3:5a:9a:b4:8f:14:2c:65:f4:73:1b:98:cc:b4:5d:
                    3f:bd:fc:d5:10:57:2b:41:8b:85:07:c4:16:a7:9c:
                    b6:43:ca:a3:d8:4f:7f:94:52:1f:45:f5:b8:4a:ae:
                    06:8f:15:27:3c:30:06:f2:e2:24:79:1b:ea:75:fd:
                    a3:27:c5:5d:12:e5:89:93:d1:7f:e9:6e:04:9f:a8:
                    7d:c2:54:d1:e0:2b:ae:ce:c4:94:39:34:bd:62:f3:
                    f5:8c:47:c2:73:b6:fb:7a:ef:1d:25:a3:30:48:e1:
                    44:04:c3:c6:90:8f:98:56:35:3b:cc:88:24:60:27:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:40:C0:BF:8C:E1:B2:C7:69:F5:A3:8F:24:F9:96:65:24:75:92:29
            X509v3 Authority Key Identifier:
                keyid:F8:CE:54:A4:C6:2E:61:B1:25:42:3F:A9:0C:A3:F9:D8:35:0C:7D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/30/F8CE54A4C62E61B125423FA90CA3F9D8350C7D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M5UpMYuYbElQj-pDKP52DUMfT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e20313336383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b4:08:3a:21:2d:17:de:08:23:27:4b:0b:1f:3f:65:0d:fe:
         34:45:12:b6:2a:50:fd:50:58:53:75:00:f5:ac:36:a2:09:94:
         79:80:56:58:01:c4:45:42:97:a7:59:12:02:bb:26:83:cf:c6:
         b9:df:09:26:ae:d0:ac:b8:16:29:f4:1a:d4:b5:68:5a:a4:b6:
         53:60:67:08:45:7d:ff:e0:1d:fd:3a:f6:33:36:fd:f5:65:74:
         d0:1a:d3:bf:2b:69:85:6e:2d:e0:ab:df:4f:14:a1:5e:9d:2b:
         42:0b:6d:43:e4:b8:24:eb:63:16:57:86:3a:24:24:a4:06:0d:
         20:d6:fe:e8:f6:9c:a1:db:48:28:4f:03:31:b2:88:ff:e5:d7:
         cd:94:6a:20:39:f8:26:9f:08:13:a4:d2:a5:3f:9b:41:f7:89:
         8f:ac:45:0a:c3:f5:62:b5:01:84:61:e2:1a:b1:7f:ef:1b:1a:
         26:e9:47:94:ce:bd:4c:74:b7:49:0a:21:53:53:68:ad:b5:c3:
         06:67:09:c3:bf:34:92:c6:3a:a6:a5:01:db:91:d3:f6:e4:bc:
         1f:7c:a0:0b:e5:16:c1:a1:b4:7b:28:ae:65:fe:40:1b:b8:cf:
         08:dd:3e:b1:8e:87:c3:b4:2d:5d:12:5d:ec:eb:88:6f:33:dd:
         39:11:c6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----