Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e203631333137.roa
File:                     3138352e3134372e35352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8oIyE4yyRILTytTZx+acy7iloVgyepblUtRlQsvwYDQ=
Subject key identifier:   F6:86:BA:0E:43:49:FE:A2:A6:CF:99:BD:BF:7E:54:64:26:1F:FF:D0
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       275E2E496CDFC1F034B9A3E07132CF918A1E4F61
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 23 Feb 2022 02:36:28 +0000
ROA not before:           Wed 23 Feb 2022 02:31:28 +0000
ROA not after:            Wed 22 Feb 2023 02:36:28 +0000
asID:                     61317
IP address blocks:        185.147.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5e:2e:49:6c:df:c1:f0:34:b9:a3:e0:71:32:cf:91:8a:1e:4f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Feb 23 02:31:28 2022 GMT
            Not After : Feb 22 02:36:28 2023 GMT
        Subject: CN=F686BA0E4349FEA2A6CF99BDBF7E5464261FFFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:42:d8:b7:dc:5f:24:ca:64:45:a4:4d:96:
                    ee:8c:01:67:c3:64:4d:90:d5:06:1d:95:a5:f1:f2:
                    0f:36:9f:93:76:98:3e:76:e8:47:73:13:44:1f:ed:
                    d6:0a:5e:2e:5d:62:64:e6:1b:d0:ea:f8:24:cd:f7:
                    45:7b:74:c5:9e:c6:6a:bc:bf:4f:cf:b0:1a:fa:a1:
                    54:a6:e2:f5:8f:e4:be:0a:dd:66:d8:df:64:ab:02:
                    98:43:e2:54:d8:b9:a8:99:79:68:3c:c9:3a:6a:c2:
                    8f:26:d4:76:21:aa:1a:45:e9:85:dc:3f:81:1a:27:
                    bd:1b:b9:27:3e:dd:53:79:4c:cc:61:23:bb:70:e9:
                    f1:1e:6d:12:53:87:71:2f:87:99:6a:2d:e1:fa:0b:
                    34:34:04:a1:81:df:6d:66:95:13:86:7b:da:7a:8e:
                    41:ea:49:b7:a6:41:9a:5c:e2:08:6f:8f:d7:47:c1:
                    76:55:86:12:2b:ab:7a:a8:1e:be:bc:b3:09:fb:64:
                    2e:75:5c:40:ef:d0:56:51:f2:68:17:2a:72:3b:3d:
                    d1:b2:32:76:99:76:bf:b5:c0:30:33:05:ae:b2:58:
                    db:57:8c:ac:48:de:7c:56:ce:6a:5a:20:57:ec:02:
                    90:38:42:d3:49:4f:1d:39:f7:0c:c5:05:3e:62:5f:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:86:BA:0E:43:49:FE:A2:A6:CF:99:BD:BF:7E:54:64:26:1F:FF:D0
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/3138352e3134372e35352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.147.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:7f:6e:1a:ab:f6:37:fb:f1:87:88:fb:f9:ba:b7:57:aa:9c:
         f8:f6:53:59:54:b8:08:c7:81:9c:34:6b:e1:1c:21:98:22:ef:
         50:f8:e9:f9:83:ab:fe:97:29:bd:c6:50:86:56:b9:1b:9c:38:
         e9:00:7a:43:02:86:c2:82:f1:72:64:85:da:89:12:73:7b:22:
         dc:e4:d4:59:03:dc:b8:e1:ab:9e:a3:2e:c7:60:55:ef:c1:e0:
         14:65:e8:5e:47:38:16:51:a7:d6:48:e0:6c:05:ec:ca:9c:87:
         9e:2a:fd:dd:5a:9e:04:99:f3:67:09:41:cd:42:a3:7a:a9:88:
         e5:b5:9a:bb:f8:af:9d:20:92:6e:5a:c8:b4:76:ee:48:6c:4c:
         ee:b0:29:34:0e:48:0e:70:4a:17:7c:c7:a7:66:32:dd:6d:78:
         4e:4d:dc:5d:df:75:59:c8:5d:7b:a6:21:a0:c3:dc:e1:ab:7a:
         96:66:d7:c7:77:ad:e7:06:fd:6c:0d:d0:0c:99:a4:d1:cf:1a:
         77:48:96:d7:88:b7:39:02:c0:08:58:e3:f0:33:9a:36:d1:8c:
         64:e3:73:7d:f1:e6:2b:1b:c3:3c:e1:4b:6a:03:7d:cb:2c:68:
         43:16:cb:ec:d2:b5:d1:9a:8e:2b:79:32:77:e4:02:0b:89:b4:
         f2:68:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----