Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323131313932.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier:          2/kLv850NylvorwfzkKI5gHrWSJiN6S+RRzQusC6TQY=
Subject key identifier:   C5:9F:07:65:AF:B4:DB:BB:F5:22:A1:6A:36:8F:F5:4E:A9:64:B2:C0
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       3382FEDCACF8F28158EB5F0C2A3144D33F646FF5
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323131313932.roa
Signing time:             Sat 18 Mar 2023 05:41:24 +0000
ROA not before:           Sat 18 Mar 2023 05:36:24 +0000
ROA not after:            Sat 16 Mar 2024 05:41:24 +0000
asID:                     211192
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:82:fe:dc:ac:f8:f2:81:58:eb:5f:0c:2a:31:44:d3:3f:64:6f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Mar 18 05:36:24 2023 GMT
            Not After : Mar 16 05:41:24 2024 GMT
        Subject: CN=C59F0765AFB4DBBBF522A16A368FF54EA964B2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:f8:7d:54:2d:83:8a:1e:d9:71:60:56:9a:
                    4d:9f:e4:93:6b:b8:89:ac:5d:57:aa:6a:05:39:e7:
                    fd:d2:9d:d5:8e:08:46:5d:85:fc:2c:3c:7b:bc:30:
                    47:fc:e9:e8:66:a9:33:6f:9e:45:6e:2c:ec:fe:05:
                    f8:b2:64:91:b2:29:85:4d:7c:f9:ab:21:3a:b5:b1:
                    17:95:e7:d5:fa:36:c8:17:40:34:36:9c:e2:b5:ae:
                    2c:7e:15:1f:cb:3a:a2:ed:8b:89:7b:b3:79:73:82:
                    ea:77:60:0d:02:5d:c0:9a:0c:58:3f:81:9f:4d:29:
                    64:28:34:89:5f:3d:bf:24:d4:4c:5b:fb:e6:2d:28:
                    fd:19:e5:e4:dd:e0:f1:2e:43:c9:9f:aa:0b:02:d4:
                    86:6b:b7:12:cd:b3:5e:c1:5b:8c:7a:78:5f:7d:92:
                    af:7c:6d:6b:50:89:0b:e0:2a:e2:9e:15:1f:ef:bb:
                    a0:31:0b:98:76:a0:71:f2:d6:42:de:b1:5d:65:8a:
                    33:6c:96:0d:1f:4e:90:0d:4d:2f:85:9f:56:e1:bb:
                    8f:48:b3:7d:a6:1c:42:6a:9a:f2:f0:f7:f0:9d:15:
                    0f:7d:9a:25:df:55:c3:0c:9f:4d:76:96:48:bb:a5:
                    97:bb:08:6a:8a:22:52:ad:19:ab:7b:b2:73:a5:c1:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9F:07:65:AF:B4:DB:BB:F5:22:A1:6A:36:8F:F5:4E:A9:64:B2:C0
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20323131313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:d4:5c:bf:06:7a:73:8f:1f:61:19:cc:6f:0d:d1:d1:42:
         58:53:bb:3a:32:fb:ab:16:39:e1:48:87:f2:bc:fc:1d:a0:54:
         ca:9f:20:5c:d4:bc:21:4e:ba:08:c7:8c:dd:82:bd:13:8c:ed:
         a3:74:5e:1a:02:c5:7d:c6:b4:a8:8b:b9:92:f0:a8:60:42:0a:
         b1:84:dc:0c:f2:06:f5:b4:2d:95:76:67:63:b2:f9:47:9f:ea:
         3e:39:06:07:30:9e:60:1b:74:e7:f7:04:b4:fd:d5:70:d7:e5:
         3e:6f:90:81:2f:80:e5:15:42:88:c8:a1:9f:ed:6f:c3:8e:9a:
         ff:a8:9a:bd:d3:17:19:2c:9c:0c:f6:d1:70:8f:71:68:a9:4e:
         47:af:07:55:79:aa:74:d8:44:b5:d7:4d:12:45:01:44:23:7d:
         da:e3:ac:27:63:88:7d:9c:77:ef:28:3d:b7:bf:48:37:5e:29:
         1c:1f:c8:46:ad:16:0c:3f:b4:6e:e5:c5:86:5e:f1:b8:c1:b1:
         80:62:9a:89:1c:bf:97:62:31:f3:19:8c:d1:c8:71:af:a5:6f:
         86:59:05:b6:e0:9e:21:9f:99:de:ff:28:cb:f9:44:80:73:69:
         02:50:e0:be:4b:80:6d:ca:a3:ca:18:57:57:44:ab:a8:77:36:
         d2:0e:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----