Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20383334.roa
File:                     3138382e36342e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          s2LOBf0nYyJ01oXh/deAHMIpczT4VXSrz4MpP+uzt2s=
Subject key identifier:   0E:A0:36:B6:36:6F:3D:97:26:DC:74:A6:20:45:D0:F0:87:DD:89:07
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       17CCDA215021E01147E2D493822DE08058263609
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20383334.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     834
IP address blocks:        188.64.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:da:21:50:21:e0:11:47:e2:d4:93:82:2d:e0:80:58:26:36:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=0EA036B6366F3D9726DC74A62045D0F087DD8907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:12:0d:15:27:81:26:c9:42:05:7e:d6:4e:d9:
                    e1:69:be:12:b1:96:c5:4c:f6:e8:cb:7b:27:73:71:
                    34:81:01:5a:40:92:d4:d2:36:0a:4d:4f:62:50:ad:
                    3a:c1:ab:b2:fc:76:35:a2:d8:6e:58:29:e7:e1:65:
                    c1:a6:7f:13:4a:9a:c0:30:2d:48:01:a5:96:cf:c2:
                    6a:bc:eb:18:a3:93:c2:72:9d:85:35:63:8b:4c:fb:
                    56:09:6b:51:93:2a:62:3c:b5:93:68:97:7a:ca:54:
                    21:9d:85:c8:70:f2:45:e0:05:eb:d8:4f:90:47:ab:
                    85:b7:f4:79:1e:69:6c:24:54:19:cf:7f:35:7c:60:
                    6b:91:ba:af:3c:f7:a8:cd:14:39:8e:9d:62:9a:af:
                    5b:e8:25:6c:8c:ba:66:01:8c:27:c8:d7:65:8a:e9:
                    b5:12:69:06:29:bf:4d:d1:18:bf:43:dd:f4:23:7c:
                    2a:48:86:7e:d8:35:72:6c:14:52:23:0f:92:a9:ee:
                    74:09:fb:2a:77:48:c3:77:e6:41:d5:31:64:db:ba:
                    09:4d:f3:eb:3f:6e:55:c9:2a:8f:b5:29:69:0f:6f:
                    1a:aa:93:26:5b:f2:0f:b6:ed:ff:f8:09:ed:96:9d:
                    f2:56:87:26:1a:8b:f9:b4:60:8b:96:51:2f:44:e0:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:36:B6:36:6F:3D:97:26:DC:74:A6:20:45:D0:F0:87:DD:89:07
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/3138382e36342e3134332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8b:ac:12:da:d1:e9:5f:2e:2a:bd:26:3f:fa:0f:c4:2e:29:
         2b:0e:df:4e:e6:91:e0:4a:19:ae:73:f6:46:a3:e4:5a:1b:e1:
         e1:1d:1b:91:a1:50:30:73:d2:7c:f6:56:0f:47:18:3a:4e:51:
         27:81:27:8d:14:7a:c7:f5:dc:86:64:35:c2:79:e6:00:26:a1:
         a8:c3:a3:83:bf:00:aa:cc:ff:ca:9f:f7:44:9a:8b:8e:34:15:
         61:7b:06:6b:3e:2d:4e:43:c9:41:ca:78:f6:74:3a:a5:59:2f:
         bb:ba:34:3a:61:c8:bc:66:9e:1a:96:9a:dc:ec:49:c8:17:53:
         da:18:fc:3d:d8:cb:ea:9f:7c:0b:19:55:b8:77:ab:d9:88:fa:
         7f:3f:0e:25:c8:b2:aa:49:c9:cb:e5:f1:7f:0a:f6:80:86:a5:
         98:5b:cd:ab:b6:61:15:92:ce:82:84:6c:fb:33:83:29:83:a9:
         ad:db:0c:84:9a:99:2b:70:61:cb:83:cb:7f:bb:99:f9:85:c2:
         da:17:da:d4:6a:1b:60:28:93:ec:3e:e8:32:66:f3:61:1a:1f:
         43:15:1c:ad:be:32:c0:40:f6:16:7c:2b:46:55:6f:64:04:e0:
         c7:9b:60:d5:3f:dc:79:24:4c:0f:eb:53:35:2a:00:da:24:ef:
         e9:a7:40:9b
-----BEGIN CERTIFICATE-----
MIIErDCCA5SgAwIBAgIUF8zaIVAh4BFH4tSTgi3ggFgmNgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTE0ZDRmY2IwYjBmYmUxYmU4NmYwMjg3NzcyZjg3YTkw
MDgyZjdlNDAeFw0yMjEwMjEwOTUzMzhaFw0yMzEwMjAwOTU4MzhaMDMxMTAvBgNV
BAMTKDBFQTAzNkI2MzY2RjNEOTcyNkRDNzRBNjIwNDVEMEYwODdERDg5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEg0VJ4EmyUIFftZO2eFpvhKx
lsVM9ujLeydzcTSBAVpAktTSNgpNT2JQrTrBq7L8djWi2G5YKefhZcGmfxNKmsAw
LUgBpZbPwmq86xijk8JynYU1Y4tM+1YJa1GTKmI8tZNol3rKVCGdhchw8kXgBevY
T5BHq4W39HkeaWwkVBnPfzV8YGuRuq8896jNFDmOnWKar1voJWyMumYBjCfI12WK
6bUSaQYpv03RGL9D3fQjfCpIhn7YNXJsFFIjD5Kp7nQJ+yp3SMN35kHVMWTbuglN
8+s/blXJKo+1KWkPbxqqkyZb8g+27f/4Ce2WnfJWhyYai/m0YIuWUS9E4B9XAgMB
AAGjggG2MIIBsjAdBgNVHQ4EFgQUDqA2tjZvPZcm3HSmIEXQ8IfdiQcwHwYDVR0j
BBgwFoAUoU1PywsPvhvobwKHdy+HqQCC9+QwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzUvQTE0RDRGQ0IwQjBG
QkUxQkU4NkYwMjg3NzcyRjg3QTkwMDgyRjdFNC5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL29VMVB5d3NQdmh2b2J3S0hkeS1IcVFDQzktUS5jZXIwaQYIKwYBBQUH
AQsEXTBbMFkGCCsGAQUFBzALhk1yc3luYzovLzAuc2IvcmVwby9zYi81LzMxMzgz
ODJlMzYzNDJlMzEzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAvECPMA0GCSqGSIb3DQEBCwUAA4IBAQC2i6wS2tHpXy4qvSY/+g/E
LikrDt9O5pHgShmuc/ZGo+RaG+HhHRuRoVAwc9J89lYPRxg6TlEngSeNFHrH9dyG
ZDXCeeYAJqGow6ODvwCqzP/Kn/dEmouONBVhewZrPi1OQ8lBynj2dDqlWS+7ujQ6
Yci8Zp4alprc7EnIF1PaGPw92Mvqn3wLGVW4d6vZiPp/Pw4lyLKqScnL5fF/CvaA
hqWYW82rtmEVks6ChGz7M4Mpg6mt2wyEmpkrcGHLg8t/u5n5hcLaF9rUahtgKJPs
PugyZvNhGh9DFRytvjLAQPYWfCtGVW9kBODHm2DVP9x5JEwP61M1KgDaJO/pp0Cb
-----END CERTIFICATE-----