Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203439393939.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          TGJV0iK0YxHroWjsZH0inwAMgPFhUN3ktQ0zslPZ5RA=
Subject key identifier:   AD:85:6B:A1:F2:4B:C2:07:32:B0:18:1D:12:8B:1F:4B:26:D5:E8:07
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       5531F9143B7BE34C4355729408CB5A1BC709F2E7
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203439393939.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     49999
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:f9:14:3b:7b:e3:4c:43:55:72:94:08:cb:5a:1b:c7:09:f2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=AD856BA1F24BC20732B0181D128B1F4B26D5E807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:f5:03:97:82:1a:1e:7d:a2:61:21:fe:60:
                    d4:6c:98:9e:e7:e1:03:ab:c5:ba:35:26:3d:23:ca:
                    9c:41:86:7e:06:1a:09:5d:db:13:81:e4:c4:0a:d0:
                    27:11:55:24:53:99:82:06:ad:99:f3:38:33:7b:13:
                    fb:eb:ac:ca:73:fe:95:69:29:af:8e:16:6e:a9:4f:
                    d0:6f:dc:23:12:1c:75:bc:46:ef:1a:67:3c:82:0d:
                    a1:f6:b0:fb:65:06:9d:12:95:f7:a8:75:05:dd:42:
                    c6:bb:dd:7e:bf:d0:e5:a9:ee:7a:be:a5:5a:e8:b9:
                    2f:6b:96:ee:8d:b1:eb:51:2a:7e:8f:d6:24:28:f0:
                    21:fb:37:50:27:01:73:c1:8c:0d:c7:9d:50:03:5d:
                    05:3c:e9:f0:ef:b8:98:64:ed:34:7e:ae:80:fe:c4:
                    73:c3:dc:1c:52:d9:4d:3e:4c:aa:04:d8:d9:c2:ba:
                    ca:ad:87:92:be:d0:39:d5:7d:78:e2:c2:15:29:f9:
                    90:78:cd:53:c2:e0:58:87:2f:0a:1e:34:5f:10:88:
                    27:5e:e8:f3:c0:20:3b:55:66:c4:36:9c:57:e8:42:
                    a3:43:31:dc:a7:83:d9:9d:9c:be:2c:9e:8b:bd:bc:
                    2b:90:49:8b:0e:54:35:fe:b9:e4:11:b3:20:99:30:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:6B:A1:F2:4B:C2:07:32:B0:18:1D:12:8B:1F:4B:26:D5:E8:07
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:4d:47:57:f0:de:d5:96:38:93:e5:70:40:87:d5:ce:c4:
         13:57:59:68:67:fd:65:2b:ae:a5:83:cc:29:f0:3f:9b:82:b5:
         0d:75:ae:87:39:ad:d9:36:1f:47:20:14:8e:45:80:08:d8:95:
         20:10:e4:0c:13:54:b8:fa:03:8c:83:5b:1e:34:0d:68:83:55:
         c1:96:61:85:42:45:07:e7:83:dc:df:bc:25:b4:3e:17:06:0f:
         22:ea:8b:c5:d6:99:36:2e:2e:0a:5e:c8:60:bc:c1:71:d8:7b:
         15:40:13:3b:69:1d:1e:1d:11:1c:82:5f:89:ee:7a:ef:8d:a0:
         72:af:d4:3a:09:5f:51:22:a6:fe:35:60:28:bb:6b:62:59:2e:
         06:b4:1c:17:41:d7:3b:36:88:4d:76:64:96:7a:63:cc:cf:a1:
         dc:6b:39:03:fe:d0:39:e3:88:dd:91:1c:bf:91:13:91:3c:23:
         e3:ba:d5:d0:a6:0b:2c:f3:03:b7:85:71:1e:bb:95:70:02:7e:
         76:d2:d6:b3:f4:53:6f:eb:e6:43:00:4a:10:3a:67:11:88:79:
         93:a5:51:2a:24:42:21:57:1a:27:19:e0:af:4c:cb:48:a6:16:
         9f:a7:4a:43:bb:b2:86:8d:63:86:07:e4:52:90:bc:93:07:be:
         11:25:91:15
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUVTH5FDt740xDVXKUCMtaG8cJ8ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTE0ZDRmY2IwYjBmYmUxYmU4NmYwMjg3NzcyZjg3YTkw
MDgyZjdlNDAeFw0yMjEwMjEwOTUzMzhaFw0yMzEwMjAwOTU4MzhaMDMxMTAvBgNV
BAMTKEFEODU2QkExRjI0QkMyMDczMkIwMTgxRDEyOEIxRjRCMjZENUU4MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRE/UDl4IaHn2iYSH+YNRsmJ7n
4QOrxbo1Jj0jypxBhn4GGgld2xOB5MQK0CcRVSRTmYIGrZnzODN7E/vrrMpz/pVp
Ka+OFm6pT9Bv3CMSHHW8Ru8aZzyCDaH2sPtlBp0SlfeodQXdQsa73X6/0OWp7nq+
pVrouS9rlu6NsetRKn6P1iQo8CH7N1AnAXPBjA3HnVADXQU86fDvuJhk7TR+roD+
xHPD3BxS2U0+TKoE2NnCusqth5K+0DnVfXjiwhUp+ZB4zVPC4FiHLwoeNF8QiCde
6PPAIDtVZsQ2nFfoQqNDMdyng9mdnL4snou9vCuQSYsOVDX+ueQRsyCZMJHbAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUrYVrofJLwgcysBgdEosfSybV6AcwHwYDVR0j
BBgwFoAUoU1PywsPvhvobwKHdy+HqQCC9+QwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzUvQTE0RDRGQ0IwQjBG
QkUxQkU4NkYwMjg3NzcyRjg3QTkwMDgyRjdFNC5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL29VMVB5d3NQdmh2b2J3S0hkeS1IcVFDQzktUS5jZXIwbQYIKwYBBQUH
AQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovLzAuc2IvcmVwby9zYi81LzMxMzgz
ODJlMzYzNDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzOTM5Mzkz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALxAjzANBgkqhkiG9w0BAQsFAAOCAQEAoClNR1fw3tWWOJPl
cECH1c7EE1dZaGf9ZSuupYPMKfA/m4K1DXWuhzmt2TYfRyAUjkWACNiVIBDkDBNU
uPoDjINbHjQNaINVwZZhhUJFB+eD3N+8JbQ+FwYPIuqLxdaZNi4uCl7IYLzBcdh7
FUATO2kdHh0RHIJfie56742gcq/UOglfUSKm/jVgKLtrYlkuBrQcF0HXOzaITXZk
lnpjzM+h3Gs5A/7QOeOI3ZEcv5ETkTwj47rV0KYLLPMDt4VxHruVcAJ+dtLWs/RT
b+vmQwBKEDpnEYh5k6VRKiRCIVcaJxngr0zLSKYWn6dKQ7uyho1jhgfkUpC8kwe+
ESWRFQ==
-----END CERTIFICATE-----