Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e2038383838.roa
File:                     3231332e3231372e392e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          5zyJ0juFAcLTFHCaaktYlxsSEZtJFZEQH1iugHq37FA=
Subject key identifier:   AC:66:26:8B:7F:2B:96:54:93:2F:60:8A:A2:3D:30:88:AB:BE:B2:E9
Certificate issuer:       /CN=f8ce54a4c62e61b125423fa90ca3f9d8350c7d3d
Certificate serial:       5A364E935BAB81BB91EB618A73C1A849EEC67C8C
Authority key identifier: F8:CE:54:A4:C6:2E:61:B1:25:42:3F:A9:0C:A3:F9:D8:35:0C:7D:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-M5UpMYuYbElQj-pDKP52DUMfT0.cer
Subject info access:      rsync://0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:41 +0000
ROA not before:           Fri 22 Sep 2023 10:14:41 +0000
ROA not after:            Fri 20 Sep 2024 10:19:41 +0000
asID:                     8888
IP address blocks:        213.217.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:36:4e:93:5b:ab:81:bb:91:eb:61:8a:73:c1:a8:49:ee:c6:7c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ce54a4c62e61b125423fa90ca3f9d8350c7d3d
        Validity
            Not Before: Sep 22 10:14:41 2023 GMT
            Not After : Sep 20 10:19:41 2024 GMT
        Subject: CN=AC66268B7F2B9654932F608AA23D3088ABBEB2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:7c:31:67:4a:57:72:60:28:ba:27:1c:bc:
                    e3:e4:46:89:14:6e:ff:bf:66:e1:a2:c4:4f:dc:c0:
                    87:8b:1c:85:93:22:01:bf:11:b7:50:a1:f5:b0:96:
                    a9:a1:41:44:02:e5:02:0f:2b:b3:4c:70:4d:09:f9:
                    e4:30:56:a6:e8:bb:97:af:ec:c5:f5:5b:d6:64:4d:
                    b9:09:6e:c8:b4:1c:0e:56:b6:fc:71:a7:9b:6c:52:
                    c8:6e:dd:3a:92:72:29:06:83:db:b8:4f:a3:17:df:
                    18:c6:0f:b4:9e:8c:5d:d6:2a:ef:b2:f7:72:30:d9:
                    f9:57:7a:56:30:81:a6:b8:2e:7c:51:06:26:03:f8:
                    99:5c:f7:87:92:6d:67:2f:1f:e5:55:61:45:a0:82:
                    45:3f:75:fd:16:e6:e1:8c:0d:0e:1d:0a:43:ec:43:
                    fc:02:40:cf:08:14:37:4e:98:33:a7:0c:d4:24:3d:
                    ad:58:5a:a1:84:0a:e3:73:86:db:90:27:e2:d4:9e:
                    a8:55:0d:a9:86:5e:c0:cc:1d:90:db:23:48:05:2e:
                    98:45:4d:7e:73:b0:25:01:79:4f:b9:46:dc:07:6f:
                    61:86:4b:dd:77:ca:fc:34:9e:e8:d8:91:97:73:5a:
                    26:69:53:6e:30:72:e6:37:b8:4d:f7:94:e3:2f:b5:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:66:26:8B:7F:2B:96:54:93:2F:60:8A:A2:3D:30:88:AB:BE:B2:E9
            X509v3 Authority Key Identifier:
                keyid:F8:CE:54:A4:C6:2E:61:B1:25:42:3F:A9:0C:A3:F9:D8:35:0C:7D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/30/F8CE54A4C62E61B125423FA90CA3F9D8350C7D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M5UpMYuYbElQj-pDKP52DUMfT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/30/3231332e3231372e392e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.217.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:9b:a6:5e:cd:04:54:d0:56:b1:ec:8c:45:03:27:db:8f:
         91:7f:4c:58:4d:68:e3:b1:25:f4:1b:88:0e:b6:3f:2d:a9:d6:
         59:e5:0d:5f:ee:1b:06:3e:c9:d8:03:58:d6:4f:13:3a:7f:f1:
         26:45:92:49:ea:cf:87:42:80:18:80:95:25:c1:09:51:24:79:
         28:00:0a:d5:5e:c1:c0:95:52:51:79:86:e2:65:b6:17:c7:b0:
         9b:71:44:6c:90:2d:c9:2f:fc:88:49:82:bb:04:d7:25:48:1c:
         07:ad:eb:e1:8b:6f:77:b5:3a:8e:fe:1e:78:c4:84:f4:a2:56:
         fe:28:e9:87:1b:f3:4b:3e:b5:8f:1d:21:87:6e:38:44:b8:d8:
         91:63:b9:24:33:9c:ed:fb:8c:fa:97:8e:c2:b9:ca:23:c3:a8:
         6d:67:fe:46:6b:40:4e:ee:c9:3b:91:57:99:82:cd:cd:24:8e:
         b1:b2:69:e3:6d:33:b1:a9:1d:92:c2:68:d0:a4:76:67:6e:ae:
         71:99:55:7a:e8:f7:27:74:eb:7d:f5:8a:c0:30:8d:91:20:6d:
         7b:ad:44:6b:1f:8c:1e:7f:d7:c3:eb:70:69:a7:20:78:43:32:
         c5:4a:86:0e:52:db:e9:a6:4d:c3:92:64:03:be:42:1d:be:30:
         8c:d4:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----