Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323037333236.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          4Ghad+z19+h4X/+L2R+IceZ2647j6Kg6Usn/Y77Irvg=
Subject key identifier:   89:EB:57:9C:48:F1:8E:8B:9B:71:9E:11:9C:31:3E:35:76:84:27:74
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       45FAEE38FBE76B0252AFA7CCDC3E3BB7C0632D1F
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323037333236.roa
Signing time:             Wed 20 Apr 2022 16:55:00 +0000
ROA not before:           Wed 20 Apr 2022 16:50:00 +0000
ROA not after:            Wed 19 Apr 2023 16:55:00 +0000
asID:                     207326
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fa:ee:38:fb:e7:6b:02:52:af:a7:cc:dc:3e:3b:b7:c0:63:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Apr 20 16:50:00 2022 GMT
            Not After : Apr 19 16:55:00 2023 GMT
        Subject: CN=89EB579C48F18E8B9B719E119C313E3576842774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:c2:ec:8c:0d:6a:fe:f5:39:6c:e5:99:8d:
                    d1:87:6c:0e:f0:8b:d6:17:22:d3:57:dd:cc:b0:38:
                    00:a8:b5:de:62:04:13:af:48:3c:57:a3:1b:92:28:
                    d5:68:bb:a1:df:f3:30:23:fc:66:c8:d6:f4:9f:f3:
                    eb:0c:d4:61:b0:31:30:1c:d0:7e:b9:b6:d7:e1:47:
                    2f:58:c2:ec:41:ca:ca:6f:9b:9b:53:53:04:bf:94:
                    c8:4e:0b:99:bf:4b:5b:2d:6f:63:35:a0:cf:06:33:
                    f4:9b:c1:da:b2:b5:b8:3b:18:32:5e:8b:7f:d2:b2:
                    bf:16:d5:f1:f5:a4:59:ce:bb:88:50:a1:41:be:1c:
                    44:75:1d:d7:6a:cf:f5:89:f6:63:d1:6e:fd:96:7a:
                    e9:d8:11:7d:27:f8:a9:38:97:a7:5c:3b:d5:c0:90:
                    55:31:64:69:1d:8f:34:87:80:e1:6b:14:93:6e:e7:
                    69:b3:bc:cd:01:b9:7f:a5:c8:c0:f8:bf:fd:28:58:
                    da:22:91:52:2f:c9:5d:aa:a6:2e:44:04:02:a1:d1:
                    2f:54:7b:df:02:8f:f0:07:84:35:9f:92:5a:57:f0:
                    0b:3a:4d:b2:3f:4c:64:9e:be:78:a3:02:ff:bb:41:
                    42:57:9d:b5:10:c2:27:9e:e2:69:f4:f7:b3:8b:90:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EB:57:9C:48:F1:8E:8B:9B:71:9E:11:9C:31:3E:35:76:84:27:74
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f1:67:6b:56:52:97:90:e8:7f:9f:42:44:5f:d3:f1:58:e1:
         b2:db:34:e9:05:9f:fe:ba:e1:01:e2:ae:9c:4d:57:5b:72:84:
         0a:7f:a9:e6:c6:9a:66:c5:12:06:85:a5:ab:9e:b2:b9:b3:70:
         9d:31:75:6c:5b:50:0d:c6:b3:72:a9:82:15:dc:24:9a:c0:f2:
         30:b7:ea:b7:36:52:92:5e:35:3a:15:0b:b3:62:26:d2:08:63:
         8d:30:a5:9d:15:4c:78:57:15:7b:37:aa:24:ec:8d:dc:d2:ae:
         88:de:da:e2:0b:87:32:4d:10:eb:06:db:a4:ed:8f:81:4d:f3:
         15:29:b1:0a:94:e5:72:56:d2:7e:f7:4b:5f:33:14:ae:f5:92:
         a3:ea:71:6b:c1:3f:3f:79:83:f4:86:e6:45:28:59:49:04:d0:
         eb:ab:38:f6:d3:5c:5f:ea:7c:e2:25:25:f9:2a:70:4c:be:42:
         30:f0:70:49:d6:3d:8e:cd:65:4c:88:18:ac:67:cb:8a:68:a1:
         9e:e4:3c:cb:0c:c8:7c:a4:10:b8:78:b1:c8:92:e9:b5:33:6f:
         dc:f0:41:6e:db:83:ec:02:a9:ea:9f:90:dd:f7:aa:56:73:07:
         e7:42:32:90:d9:bf:94:34:c4:08:a9:de:8c:49:ae:56:f8:ad:
         e0:1a:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----