Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203631333137.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          b/OfshgBvtn3yT6mnmbIwSA8DXxYfUCai1jqAuA9Tzk=
Subject key identifier:   25:FE:82:72:0B:ED:15:93:E8:90:29:BB:3C:26:34:96:64:D2:EC:E2
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       53955428D991B05AA5CB36387FCF80854B5B3D99
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     61317
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:95:54:28:d9:91:b0:5a:a5:cb:36:38:7f:cf:80:85:4b:5b:3d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=25FE82720BED1593E89029BB3C26349664D2ECE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:60:41:24:aa:a1:9f:07:3c:41:52:69:19:
                    90:6a:c4:d2:ad:de:91:65:d6:ca:c9:1b:0a:f8:51:
                    2b:0d:39:a2:c2:66:c6:28:62:6e:51:49:7d:1b:c0:
                    b7:9b:5c:1a:f8:95:e8:59:46:67:a8:3c:24:8e:22:
                    d3:d3:f9:af:0f:ac:78:d5:9a:14:8d:b6:b0:06:97:
                    34:63:dd:68:32:25:13:82:47:68:16:6e:d7:f4:e0:
                    9d:8f:da:a5:a6:5e:d2:c3:d1:c7:de:3d:58:84:40:
                    ef:29:89:58:62:31:3e:8b:79:38:84:ee:ba:c5:cb:
                    41:8e:d1:60:2e:06:67:42:9a:18:7c:9a:4a:74:18:
                    d7:08:f8:8b:08:22:d3:99:94:32:02:e0:85:ac:15:
                    70:86:b0:d9:e3:af:76:3b:9a:93:6a:77:47:25:52:
                    14:e6:42:e3:be:14:ac:4c:c3:ef:2c:b6:a4:30:03:
                    15:b1:48:8a:ed:30:fc:16:f5:27:80:ac:9e:8a:b4:
                    c3:c1:cb:97:de:41:22:02:d4:e8:ba:64:ba:da:b7:
                    f1:d4:c7:d4:fc:56:d7:d1:a9:7a:fa:9e:f8:6c:75:
                    19:84:68:14:e7:25:3c:fe:d3:63:ad:cf:33:d4:9c:
                    3b:4a:e6:95:21:34:04:07:2c:e2:4c:b7:73:d2:b0:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FE:82:72:0B:ED:15:93:E8:90:29:BB:3C:26:34:96:64:D2:EC:E2
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:0f:4f:4d:02:22:6c:87:ba:8d:fd:a5:16:f2:f4:12:87:
         5b:c9:73:99:f1:96:cc:25:7b:d8:cc:6b:b0:37:46:41:60:1a:
         47:16:95:4b:34:5f:76:43:d9:a8:a1:27:66:d6:cf:9d:6a:de:
         37:f4:1b:52:7f:88:e9:85:e5:57:5d:98:cd:fe:c0:43:bf:98:
         b6:03:17:4b:f9:d1:4b:c8:68:86:58:1c:52:29:ad:3b:0a:57:
         cb:99:f5:16:4a:1e:d9:b9:30:ce:18:43:76:bc:49:fa:24:71:
         4c:5a:c9:02:26:b0:3f:70:fc:e7:05:4e:6a:e6:85:d9:ee:54:
         ab:6e:fa:83:2b:73:49:2c:19:f9:99:7a:9f:27:00:30:c7:8b:
         c9:36:27:f1:68:a5:d3:1d:d9:d1:5a:82:80:fd:8d:31:15:e1:
         49:b2:79:36:c3:1c:30:0f:c3:e7:fb:ad:b5:f9:0f:56:05:c3:
         72:4b:51:27:b3:7e:b9:77:ee:39:8c:ce:e5:e2:d5:84:02:76:
         38:32:b0:25:9d:3e:0c:a2:cd:18:47:99:82:0a:07:4a:7b:9e:
         35:51:54:52:83:e3:a9:8b:9c:1b:e5:b0:be:28:f6:7e:c9:59:
         e1:1a:f2:a3:8d:e3:56:1d:f0:4a:0e:0d:a1:6d:54:07:58:93:
         1f:fe:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----