Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa
File:                     326131313a343238303a3a2f32392d3438203d3e20323130383833.roa (raw, json)
Hash identifier:          xPqA0esHK2/+IGeZS0dlac1h3o6ZZWulQMbmlZHVoEE=
Subject key identifier:   97:31:6E:96:D9:5C:87:B4:FF:AF:87:87:21:6C:C2:D6:C9:EB:4E:0E
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       47B5C6EA5A0B84CCBC0B380FBD1CECDE61B5C064
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     210883
IP address blocks:        2a11:4280::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b5:c6:ea:5a:0b:84:cc:bc:0b:38:0f:bd:1c:ec:de:61:b5:c0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=97316E96D95C87B4FFAF8787216CC2D6C9EB4E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:00:a3:34:e9:bd:4e:e8:4a:20:28:e1:8f:
                    d5:38:9a:53:5a:37:df:80:0b:94:c2:93:bc:4c:30:
                    52:1e:7b:e5:88:20:e9:fb:44:f4:bb:03:c9:96:5b:
                    77:9c:41:9f:08:34:a6:3a:2a:8a:37:3b:d1:f8:53:
                    1d:cf:56:13:be:c9:62:c2:a8:c9:54:a6:b0:fd:1c:
                    e8:18:b0:1b:44:a1:0a:5b:17:fa:5c:73:30:50:c6:
                    ef:7f:a8:5e:7b:b5:58:d0:f3:fe:91:23:c5:89:65:
                    d4:3e:03:55:b6:f6:a6:07:40:c1:33:08:a8:2d:35:
                    4e:37:ca:94:7d:05:71:53:31:36:64:73:af:1a:35:
                    69:3c:d3:17:e3:a0:a7:45:52:e8:46:c6:b6:53:50:
                    f2:a7:be:ac:0c:48:2f:7c:39:a9:dc:90:0f:e0:9c:
                    a1:a5:67:9b:1b:d5:de:a5:61:ea:c9:f2:c4:77:9f:
                    08:c8:42:89:3c:50:da:58:40:60:19:23:f9:61:6f:
                    16:4d:c9:b8:a9:98:91:04:9d:82:03:d4:75:b5:4c:
                    8c:d9:1c:ae:81:35:cb:f1:d4:2b:b2:6b:66:ef:38:
                    de:52:47:67:96:03:d4:ed:86:b4:d4:c0:13:81:d2:
                    fe:24:64:d0:2f:51:15:15:63:68:3c:84:3d:82:b2:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:31:6E:96:D9:5C:87:B4:FF:AF:87:87:21:6C:C2:D6:C9:EB:4E:0E
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e20323130383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:4280::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:c9:57:70:bb:bd:e7:fa:31:d3:c4:08:1d:c0:6c:31:64:
         f1:4c:fc:6a:bc:91:e5:a2:61:09:a1:c6:28:43:1a:63:b7:f1:
         3d:7a:e4:a2:38:6e:7b:c9:c6:bc:69:88:ee:2f:04:3b:3d:78:
         9c:48:01:a9:11:2b:1b:6e:63:aa:d4:46:12:13:76:9f:e2:7c:
         63:80:e0:e2:0c:f0:ed:9f:f6:f3:31:0b:de:89:07:7f:aa:3e:
         61:b7:ac:20:20:90:46:7f:ce:82:29:99:36:74:d8:a3:8a:eb:
         e9:5c:7f:82:14:60:98:d4:f2:ed:22:bf:4b:cb:d6:54:08:70:
         84:3b:8e:7e:23:44:7c:34:f3:de:36:9c:d9:6e:12:91:2a:a6:
         03:07:5c:f4:38:10:ef:0d:52:66:9a:a5:e1:0c:4c:24:bd:12:
         8b:18:52:62:77:d7:23:05:e0:6d:6f:65:de:55:6c:cd:a1:de:
         db:27:fd:97:3f:0b:53:60:14:df:f9:61:73:6e:74:8b:be:02:
         ad:f3:ff:6e:7c:e3:45:e7:80:71:ff:94:6f:f0:1b:e1:59:60:
         8e:dc:8f:ab:f9:40:83:fc:13:63:e3:e9:21:eb:d3:34:20:5f:
         7e:9b:f9:cf:70:41:f7:9b:61:5c:d1:4d:b7:56:8c:c6:ac:5e:
         7e:fe:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----