Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323637383039.roa
File:                     3138352e3134372e35352e302f32342d3234203d3e20323637383039.roa (raw, json)
Hash identifier:          VdGzKVIOrRynYR/mMC8ymOhgmKQ/psxObcsQ/e+9pZ4=
Subject key identifier:   FF:18:21:00:91:BF:77:7D:5F:CF:80:32:02:BA:39:A0:8C:8C:C8:80
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       5CE78E5CCD218A3F59D29272DCE5011B3C7E9686
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323637383039.roa
Signing time:             Tue 25 Jan 2022 11:01:30 +0000
ROA not before:           Tue 25 Jan 2022 10:56:30 +0000
ROA not after:            Tue 24 Jan 2023 11:01:30 +0000
asID:                     267809
IP address blocks:        185.147.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e7:8e:5c:cd:21:8a:3f:59:d2:92:72:dc:e5:01:1b:3c:7e:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Jan 25 10:56:30 2022 GMT
            Not After : Jan 24 11:01:30 2023 GMT
        Subject: CN=FF18210091BF777D5FCF803202BA39A08C8CC880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:34:2b:6d:41:c8:41:af:98:3e:41:aa:cb:
                    4f:64:60:97:71:71:66:32:53:1f:a6:4c:83:e5:21:
                    29:36:53:91:d8:bb:4a:f0:6a:c4:48:9b:d8:48:bd:
                    be:9e:ec:67:c9:67:22:f8:8e:cb:fb:08:e9:ca:53:
                    9d:3a:4e:86:79:95:99:dc:4e:b0:16:04:db:60:e4:
                    0b:f3:da:cd:3d:88:f2:b3:c6:cd:76:59:d0:1e:51:
                    72:6c:cf:f4:46:dd:65:f3:cd:1b:1c:a0:97:32:b0:
                    c0:fc:16:93:ea:a7:0e:3b:85:06:e5:d4:6d:7d:e9:
                    e1:9e:55:de:39:42:57:e9:1b:d0:2f:77:f8:47:2a:
                    ad:36:62:7e:8a:46:d7:72:92:a4:36:e0:39:7e:87:
                    a2:0d:94:be:1b:48:93:ec:4a:47:a4:2c:8b:cf:15:
                    cd:b7:47:cd:16:45:2a:a5:70:96:52:87:ee:b7:33:
                    5e:4d:02:9c:8a:41:5e:22:5c:67:2d:7c:95:2e:95:
                    54:b7:28:3d:f9:fb:1f:e9:79:8d:e6:72:1f:e0:d6:
                    41:a3:a2:7d:84:7d:25:c8:24:59:e2:72:ef:0b:d9:
                    af:14:60:5c:a2:4e:88:d8:57:b6:09:16:80:ef:54:
                    65:f1:e6:3c:d0:13:14:4b:49:02:b2:ae:80:0c:50:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:18:21:00:91:BF:77:7D:5F:CF:80:32:02:BA:39:A0:8C:8C:C8:80
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e20323637383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:05:58:4b:af:cc:da:ef:38:66:a3:12:c4:67:69:e8:c4:57:
         73:80:ce:e5:6d:fe:59:a6:f8:97:ff:9c:c7:b9:74:cb:89:57:
         bd:2a:f6:ed:bb:b9:ec:34:af:55:53:b6:90:cb:02:b9:62:e5:
         c9:c8:7c:f5:56:f5:25:d1:42:f7:b4:c4:62:2b:4b:88:68:a0:
         a3:71:6b:bc:b2:5f:3e:c0:8f:6b:c6:22:cb:e6:28:4d:3f:4e:
         d7:4f:9c:6a:fe:6f:e0:ff:0c:fc:2f:c7:4b:e1:09:9e:3c:32:
         a1:fe:44:3f:27:5e:e3:2f:ab:90:e6:27:9a:95:f0:c2:1f:b8:
         9f:ec:71:90:7b:bc:2d:cc:e1:70:eb:1f:ed:fc:32:bb:ea:90:
         64:31:45:a4:38:d9:20:99:2a:22:ae:4d:8c:1d:be:b4:6d:1a:
         51:9f:e9:e5:cc:91:85:3a:e7:bf:52:66:6a:15:33:14:6c:39:
         ae:59:d8:41:39:66:46:d2:52:27:2e:b1:b3:39:07:3f:ef:24:
         18:8f:5a:2f:ad:fe:31:9b:eb:df:e7:4b:6d:04:4d:24:68:b9:
         c0:c4:f4:4d:ea:f9:28:ce:00:6f:a7:ba:16:dc:a6:27:76:a3:
         e8:ab:5f:d2:d3:13:a9:c2:83:46:79:62:9d:44:cc:e4:47:35:
         28:b5:cc:f1
-----BEGIN CERTIFICATE-----
MIIEsjCCA5qgAwIBAgIUXOeOXM0hij9Z0pJy3OUBGzx+loYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQxMWJiZWZhOTFkOWMwMTJjYTZhODc1MzM5ZGIzMDA0
ODFhNmRlYjAeFw0yMjAxMjUxMDU2MzBaFw0yMzAxMjQxMTAxMzBaMDMxMTAvBgNV
BAMTKEZGMTgyMTAwOTFCRjc3N0Q1RkNGODAzMjAyQkEzOUEwOEM4Q0M4ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UDQrbUHIQa+YPkGqy09kYJdx
cWYyUx+mTIPlISk2U5HYu0rwasRIm9hIvb6e7GfJZyL4jsv7COnKU506ToZ5lZnc
TrAWBNtg5Avz2s09iPKzxs12WdAeUXJsz/RG3WXzzRscoJcysMD8FpPqpw47hQbl
1G196eGeVd45QlfpG9Avd/hHKq02Yn6KRtdykqQ24Dl+h6INlL4bSJPsSkekLIvP
Fc23R80WRSqlcJZSh+63M15NApyKQV4iXGctfJUulVS3KD35+x/peY3mch/g1kGj
on2EfSXIJFnicu8L2a8UYFyiTojYV7YJFoDvVGXx5jzQExRLSQKyroAMUHLfAgMB
AAGjggG8MIIBuDAdBgNVHQ4EFgQU/xghAJG/d31fz4AyAro5oIyMyIAwHwYDVR0j
BBgwFoAUZBG776kdnAEspqh1M52zAEgabeswDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzYvNjQxMUJCRUZBOTFE
OUMwMTJDQTZBODc1MzM5REIzMDA0ODFBNkRFQi5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL1pCRzc3NmtkbkFFc3BxaDFNNTJ6QUVnYWJlcy5jZXIwbwYIKwYBBQUH
AQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovLzAuc2IvcmVwby9zYi82LzMxMzgz
NTJlMzEzNDM3MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3Mzgz
MDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAuZM3MA0GCSqGSIb3DQEBCwUAA4IBAQBkBVhLr8za7zhm
oxLEZ2noxFdzgM7lbf5ZpviX/5zHuXTLiVe9Kvbtu7nsNK9VU7aQywK5YuXJyHz1
VvUl0UL3tMRiK0uIaKCjcWu8sl8+wI9rxiLL5ihNP07XT5xq/m/g/wz8L8dL4Qme
PDKh/kQ/J17jL6uQ5iealfDCH7if7HGQe7wtzOFw6x/t/DK76pBkMUWkONkgmSoi
rk2MHb60bRpRn+nlzJGFOue/UmZqFTMUbDmuWdhBOWZG0lInLrGzOQc/7yQYj1ov
rf4xm+vf50ttBE0kaLnAxPRN6vkozgBvp7oW3KYndqPoq1/S0xOpwoNGeWKdRMzk
RzUotczx
-----END CERTIFICATE-----