Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323132333834.roa
File:                     3138352e3134372e35352e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          jISB31cd8nwyFBPtYYZ41Sqrslj/BlR2+rXzE1IaMHk=
Subject key identifier:   83:5C:98:1E:D8:9B:B7:A3:90:B8:94:ED:5E:D3:23:9E:39:48:AE:F5
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       742B627FFFA5B4BE1904822C912E9BECA0A67542
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323132333834.roa
Signing time:             Wed 16 Nov 2022 12:55:06 +0000
ROA not before:           Wed 16 Nov 2022 12:50:06 +0000
ROA not after:            Wed 15 Nov 2023 12:55:06 +0000
asID:                     212384
IP address blocks:        185.147.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2b:62:7f:ff:a5:b4:be:19:04:82:2c:91:2e:9b:ec:a0:a6:75:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Nov 16 12:50:06 2022 GMT
            Not After : Nov 15 12:55:06 2023 GMT
        Subject: CN=835C981ED89BB7A390B894ED5ED3239E3948AEF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:29:80:43:34:cc:4d:96:62:1a:60:c8:65:
                    6a:c7:b6:8b:d2:0f:35:90:1a:92:9e:5a:e2:73:8e:
                    15:d1:cb:32:d0:34:fa:5d:a2:fd:dd:74:36:a7:4c:
                    53:d9:b2:ad:46:59:b1:b7:4e:db:dc:f5:47:32:b0:
                    fd:c8:50:e9:eb:69:3f:16:c2:b6:a6:a1:8d:92:2d:
                    13:6a:d4:b1:d4:53:8c:e1:b3:f8:ab:5f:d1:40:7e:
                    f5:b9:df:65:33:5f:58:40:80:59:43:60:24:c2:00:
                    7e:3b:f0:d4:29:f1:a7:23:b6:2c:6a:6d:60:8c:cb:
                    e0:60:a2:e4:fc:9e:e2:24:b5:e5:cb:88:2f:d2:87:
                    b7:80:7b:33:1a:6a:49:b4:0e:e5:73:2e:a5:1a:dc:
                    9f:ed:8b:a3:d7:d3:bb:29:00:31:76:2e:58:cd:70:
                    27:d7:44:6f:96:5a:04:6b:2f:9a:64:bb:9b:6a:14:
                    a9:d7:78:ef:4e:01:41:c3:b6:7e:3c:29:8f:12:f9:
                    0a:dc:ce:76:8c:e0:58:fa:1c:d3:03:b0:d7:80:bc:
                    bc:5e:20:a3:4c:b8:92:36:68:0e:89:47:18:af:6e:
                    ec:5c:1c:28:45:18:21:c4:32:d1:7a:0a:da:5f:1b:
                    37:60:4e:f7:e6:19:4c:4c:bc:eb:90:02:2b:2f:56:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:98:1E:D8:9B:B7:A3:90:B8:94:ED:5E:D3:23:9E:39:48:AE:F5
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:e7:47:6d:ef:2d:6d:18:d3:cd:ad:f3:52:f3:d4:34:71:
         26:b8:68:de:c9:c0:b3:a5:61:02:ec:01:9f:59:b4:92:ac:51:
         9d:e3:45:a2:f3:4b:21:03:5d:8a:0e:1d:d7:09:1f:df:02:b1:
         91:be:8e:06:f0:8a:63:50:99:1a:bd:fc:ae:55:4a:ba:0d:ff:
         45:c6:f2:1a:b3:2f:c6:67:69:59:d1:31:5e:e9:ec:71:da:80:
         38:f9:0a:68:53:54:6c:3d:18:a8:76:78:ec:0c:e1:f2:b3:80:
         07:05:7d:63:a6:50:a9:bf:82:43:e6:b8:cf:6d:17:d3:1a:c7:
         42:00:e5:d3:25:ba:b4:1c:08:a9:4a:72:e6:88:30:c8:b2:12:
         f7:fa:60:2f:7d:cb:a6:56:2d:44:16:f3:4a:81:7b:4f:e3:cd:
         c9:5b:66:01:62:49:8a:1b:f8:88:9c:46:20:f1:4b:75:8d:b6:
         5b:99:fd:3c:bf:fd:7c:a7:d4:89:8c:6f:f1:ff:bb:0e:1a:59:
         b1:d8:72:01:5d:92:f6:d9:b5:a9:d4:3d:be:24:73:f7:3d:26:
         22:48:fe:79:fc:3a:b7:fb:00:b5:f6:25:c3:c9:6e:36:bc:69:
         48:06:11:c3:c7:21:39:89:a3:ae:8e:e6:4b:3b:83:b0:3e:65:
         2e:27:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----