Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203630373231.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          KRu9Q78KZuYj0QkwKuIejrMDMRlWz8sVK5NSTS7L3Pg=
Subject key identifier:   07:68:D6:B3:DA:79:4F:55:8C:56:26:2E:1A:72:D0:C0:EB:C5:C8:84
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       711C9CBCB413A583B2B81B8FE0B6252E3F8160E9
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 08 Mar 2022 03:25:36 +0000
ROA not before:           Tue 08 Mar 2022 03:20:36 +0000
ROA not after:            Tue 07 Mar 2023 03:25:36 +0000
asID:                     60721
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1c:9c:bc:b4:13:a5:83:b2:b8:1b:8f:e0:b6:25:2e:3f:81:60:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Mar  8 03:20:36 2022 GMT
            Not After : Mar  7 03:25:36 2023 GMT
        Subject: CN=0768D6B3DA794F558C56262E1A72D0C0EBC5C884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:0c:55:ba:ca:df:4e:37:bb:88:61:7b:f8:
                    41:1a:bb:57:45:84:c0:49:30:9c:65:0a:d8:16:76:
                    1e:88:38:81:5f:f2:0b:47:46:ce:2a:a0:ed:cc:61:
                    87:d8:89:b3:17:75:b5:47:ca:cc:6f:20:c5:17:e6:
                    99:a1:a5:22:39:2e:e4:84:b4:39:43:c7:a2:13:91:
                    1d:b7:a1:4e:2b:c4:3b:ef:1b:a8:df:2b:ef:f1:c4:
                    b6:ef:31:d7:fa:29:41:fc:73:75:e8:11:30:5e:f8:
                    30:28:64:ef:6c:ea:21:a2:80:8c:18:8c:6c:0e:3c:
                    99:8b:d0:6b:ea:bf:43:22:f7:3a:51:a5:25:60:1a:
                    59:16:d6:0c:e7:de:10:ef:39:a8:c1:4b:92:50:21:
                    8e:a9:22:7f:26:cb:7f:a0:b0:92:31:04:77:0e:bd:
                    b1:75:b5:8f:14:f7:70:74:43:f6:4f:90:5d:ae:82:
                    84:99:77:12:2f:36:ad:25:54:0d:ff:92:b1:31:57:
                    7b:a9:a9:ff:b6:6f:fb:da:8f:af:ac:8b:de:a9:4a:
                    9e:2a:f7:bd:ca:97:d2:2b:aa:cc:15:55:64:23:49:
                    fa:2b:c8:b6:ca:b6:b6:c8:88:28:da:b5:c7:b2:f6:
                    bb:e0:2e:18:3f:16:45:ed:00:1a:f7:57:0b:7e:d0:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:68:D6:B3:DA:79:4F:55:8C:56:26:2E:1A:72:D0:C0:EB:C5:C8:84
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:80:f6:b5:49:27:1f:88:83:ab:2c:e1:26:ec:17:e2:52:d0:
         33:25:06:0b:d3:16:4a:54:66:bd:38:f1:22:03:c7:a9:08:cc:
         ca:54:00:5d:7a:a0:8a:9c:3e:b8:7f:24:6c:42:d8:2f:7c:a2:
         8a:88:43:68:74:7b:17:b2:08:a5:99:04:91:e1:24:18:80:d2:
         5a:30:10:fb:58:56:85:7c:18:ae:e0:c3:02:c5:3c:b7:1b:07:
         42:b9:c9:20:7c:12:2a:c0:db:e0:c9:b3:f3:08:25:32:9f:28:
         28:1c:68:8d:f3:7c:0b:36:ec:62:74:56:93:eb:14:80:99:1a:
         2a:79:ef:c1:01:1c:0d:5e:de:28:a2:79:7c:3b:10:02:77:62:
         f7:45:a4:c7:7f:59:cf:38:82:48:aa:b1:64:d6:f8:95:bf:81:
         e6:89:30:5b:52:0a:95:96:76:fd:d2:ef:48:b1:3f:59:a1:70:
         70:07:98:5e:d9:d2:d6:54:6b:6c:3b:d5:87:c2:d9:c4:89:73:
         89:c4:f1:c7:8c:69:b7:7e:87:bf:95:2c:fd:82:29:bd:dc:64:
         fa:f1:6c:ec:88:a4:50:92:97:9c:30:45:d2:b3:8a:e1:7f:e7:
         58:29:75:2e:09:63:5a:05:06:a8:4f:47:17:bc:47:28:93:47:
         78:f4:ff:91
-----BEGIN CERTIFICATE-----
MIIEsDCCA5igAwIBAgIUcRycvLQTpYOyuBuP4LYlLj+BYOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTE0ZDRmY2IwYjBmYmUxYmU4NmYwMjg3NzcyZjg3YTkw
MDgyZjdlNDAeFw0yMjAzMDgwMzIwMzZaFw0yMzAzMDcwMzI1MzZaMDMxMTAvBgNV
BAMTKDA3NjhENkIzREE3OTRGNTU4QzU2MjYyRTFBNzJEMEMwRUJDNUM4ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevQxVusrfTje7iGF7+EEau1dF
hMBJMJxlCtgWdh6IOIFf8gtHRs4qoO3MYYfYibMXdbVHysxvIMUX5pmhpSI5LuSE
tDlDx6ITkR23oU4rxDvvG6jfK+/xxLbvMdf6KUH8c3XoETBe+DAoZO9s6iGigIwY
jGwOPJmL0Gvqv0Mi9zpRpSVgGlkW1gzn3hDvOajBS5JQIY6pIn8my3+gsJIxBHcO
vbF1tY8U93B0Q/ZPkF2ugoSZdxIvNq0lVA3/krExV3upqf+2b/vaj6+si96pSp4q
973Kl9IrqswVVWQjSforyLbKtrbIiCjatcey9rvgLhg/FkXtABr3Vwt+0NoJAgMB
AAGjggG6MIIBtjAdBgNVHQ4EFgQUB2jWs9p5T1WMViYuGnLQwOvFyIQwHwYDVR0j
BBgwFoAUoU1PywsPvhvobwKHdy+HqQCC9+QwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzUvQTE0RDRGQ0IwQjBG
QkUxQkU4NkYwMjg3NzcyRjg3QTkwMDgyRjdFNC5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL29VMVB5d3NQdmh2b2J3S0hkeS1IcVFDQzktUS5jZXIwbQYIKwYBBQUH
AQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovLzAuc2IvcmVwby9zYi81LzMxMzgz
ODJlMzYzNDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3MzIz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALxAjzANBgkqhkiG9w0BAQsFAAOCAQEAVID2tUknH4iDqyzh
JuwX4lLQMyUGC9MWSlRmvTjxIgPHqQjMylQAXXqgipw+uH8kbELYL3yiiohDaHR7
F7IIpZkEkeEkGIDSWjAQ+1hWhXwYruDDAsU8txsHQrnJIHwSKsDb4Mmz8wglMp8o
KBxojfN8CzbsYnRWk+sUgJkaKnnvwQEcDV7eKKJ5fDsQAndi90Wkx39ZzziCSKqx
ZNb4lb+B5okwW1IKlZZ2/dLvSLE/WaFwcAeYXtnS1lRrbDvVh8LZxIlzicTxx4xp
t36Hv5Us/YIpvdxk+vFs7IikUJKXnDBF0rOK4X/nWCl1LgljWgUGqE9HF7xHKJNH
ePT/kQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org