Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e2038383838.roa
File:                     326131313a343238303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          AgFJEMjzOF9/iEZFW8U00S3vsfApmU/ZbDHy3G1o45I=
Subject key identifier:   0E:A0:EC:0B:C0:11:B6:FE:BB:EE:E8:9E:FA:CB:C7:99:A5:89:77:45
Certificate issuer:       /CN=6411bbefa91d9c012ca6a875339db300481a6deb
Certificate serial:       4DB84EA91DD32D5F610E8AF5A1139049CCC0A8EF
Authority key identifier: 64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer
Subject info access:      rsync://0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Fri 21 Oct 2022 09:58:37 +0000
ROA not before:           Fri 21 Oct 2022 09:53:37 +0000
ROA not after:            Fri 20 Oct 2023 09:58:37 +0000
asID:                     8888
IP address blocks:        2a11:4280::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b8:4e:a9:1d:d3:2d:5f:61:0e:8a:f5:a1:13:90:49:cc:c0:a8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6411bbefa91d9c012ca6a875339db300481a6deb
        Validity
            Not Before: Oct 21 09:53:37 2022 GMT
            Not After : Oct 20 09:58:37 2023 GMT
        Subject: CN=0EA0EC0BC011B6FEBBEEE89EFACBC799A5897745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:47:54:35:43:23:aa:49:74:d4:38:bf:dd:
                    5e:a4:9f:f8:1c:f9:13:02:9e:1c:d4:76:ed:5b:20:
                    22:b6:49:48:49:3f:f2:63:d5:63:8d:ff:e7:be:a1:
                    d0:80:a5:db:e0:4b:b0:f3:97:ce:1f:cd:53:77:b1:
                    6a:b3:ae:1e:a8:59:e1:5d:54:5c:d7:ba:7f:1e:b2:
                    1a:9b:0b:a4:1e:5d:fa:97:91:2f:8e:1b:85:0f:4d:
                    6d:bb:38:e0:e6:bc:e2:a2:a7:e0:61:a8:7b:e3:27:
                    60:b1:2e:cc:59:ab:7d:ea:fc:05:83:b3:40:c2:fa:
                    e4:9e:1a:4b:f2:89:54:48:ca:03:4f:32:d9:6c:c7:
                    ba:f2:19:f6:84:f4:92:a2:62:47:33:98:99:98:aa:
                    2c:ee:e2:a8:a1:e6:ff:7f:be:1c:6c:00:8f:43:c2:
                    86:e5:e5:3b:d5:25:1b:a6:5e:6e:d6:d1:05:ba:7e:
                    2b:f0:52:59:56:b2:65:07:48:86:57:28:62:37:eb:
                    63:39:ab:da:7e:e1:83:6e:76:b0:cb:07:0a:31:77:
                    63:e1:f7:f1:46:a9:c0:ab:69:c7:66:c4:24:49:66:
                    82:25:49:a1:76:09:be:58:52:99:7f:ce:42:80:75:
                    31:55:b8:b4:5f:6e:82:ab:6c:37:cf:77:c6:36:fd:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:EC:0B:C0:11:B6:FE:BB:EE:E8:9E:FA:CB:C7:99:A5:89:77:45
            X509v3 Authority Key Identifier:
                keyid:64:11:BB:EF:A9:1D:9C:01:2C:A6:A8:75:33:9D:B3:00:48:1A:6D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/6/6411BBEFA91D9C012CA6A875339DB300481A6DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBG776kdnAEspqh1M52zAEgabes.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/6/326131313a343238303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:4280::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:2f:de:e6:99:23:e9:38:94:fa:04:e0:29:b7:95:59:49:46:
         f2:69:92:dd:74:d4:5f:bc:7f:38:f5:95:44:48:e9:18:3d:53:
         34:e5:38:b2:86:22:e3:d1:6d:13:98:15:c3:58:4f:82:50:b5:
         0a:26:a5:b1:0c:e4:5a:b8:44:e4:cf:43:8a:56:2e:37:b9:b0:
         ff:20:e1:5e:9b:4a:27:39:67:ac:b5:df:99:d1:41:83:da:c6:
         f3:8f:59:b6:a2:8b:11:b7:b4:94:56:6b:ad:ea:21:25:b1:f7:
         96:77:8d:12:2c:3c:fd:02:e5:c9:f4:0d:a9:3d:81:c7:8a:1f:
         58:05:20:b0:91:2e:85:4f:0e:49:7c:26:16:21:d2:be:73:0e:
         e9:6b:65:8e:0e:c3:b5:8c:f6:09:0b:d5:ba:6f:29:b9:83:8d:
         3d:a4:4f:ca:79:c4:c0:27:70:7b:36:8e:df:8b:09:3b:ec:78:
         a2:02:2b:d8:1e:8d:b8:cd:7e:49:39:77:18:4f:4f:4f:ac:cd:
         59:b3:2f:e4:59:2f:cd:ca:14:74:7f:4f:2e:35:60:67:58:3a:
         b7:62:16:3d:d0:7e:03:c6:39:33:fa:91:ef:0f:53:f8:0e:09:
         fc:12:f1:18:25:7b:7c:48:a9:51:f9:de:a8:81:43:7f:1a:cb:
         9a:f6:0a:36
-----BEGIN CERTIFICATE-----
MIIErTCCA5WgAwIBAgIUTbhOqR3TLV9hDor1oROQSczAqO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQxMWJiZWZhOTFkOWMwMTJjYTZhODc1MzM5ZGIzMDA0
ODFhNmRlYjAeFw0yMjEwMjEwOTUzMzdaFw0yMzEwMjAwOTU4MzdaMDMxMTAvBgNV
BAMTKDBFQTBFQzBCQzAxMUI2RkVCQkVFRTg5RUZBQ0JDNzk5QTU4OTc3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYkdUNUMjqkl01Di/3V6kn/gc
+RMCnhzUdu1bICK2SUhJP/Jj1WON/+e+odCApdvgS7Dzl84fzVN3sWqzrh6oWeFd
VFzXun8eshqbC6QeXfqXkS+OG4UPTW27OODmvOKip+BhqHvjJ2CxLsxZq33q/AWD
s0DC+uSeGkvyiVRIygNPMtlsx7ryGfaE9JKiYkczmJmYqizu4qih5v9/vhxsAI9D
wobl5TvVJRumXm7W0QW6fivwUllWsmUHSIZXKGI362M5q9p+4YNudrDLBwoxd2Ph
9/FGqcCracdmxCRJZoIlSaF2Cb5YUpl/zkKAdTFVuLRfboKrbDfPd8Y2/cqLAgMB
AAGjggG3MIIBszAdBgNVHQ4EFgQUDqDsC8ARtv677uie+svHmaWJd0UwHwYDVR0j
BBgwFoAUZBG776kdnAEspqh1M52zAEgabeswDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzYvNjQxMUJCRUZBOTFE
OUMwMTJDQTZBODc1MzM5REIzMDA0ODFBNkRFQi5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL1pCRzc3NmtkbkFFc3BxaDFNNTJ6QUVnYWJlcy5jZXIwaQYIKwYBBQUH
AQsEXTBbMFkGCCsGAQUFBzALhk1yc3luYzovLzAuc2IvcmVwby9zYi82LzMyNjEz
MTMxM2EzNDMyMzgzMDNhM2EyZjMyMzkyZDM0MzgyMDNkM2UyMDM4MzgzODM4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDKhFCgDANBgkqhkiG9w0BAQsFAAOCAQEAoC/e5pkj6TiU+gTgKbeV
WUlG8mmS3XTUX7x/OPWVREjpGD1TNOU4soYi49FtE5gVw1hPglC1CialsQzkWrhE
5M9DilYuN7mw/yDhXptKJzlnrLXfmdFBg9rG849ZtqKLEbe0lFZrreohJbH3lneN
Eiw8/QLlyfQNqT2Bx4ofWAUgsJEuhU8OSXwmFiHSvnMO6Wtljg7DtYz2CQvVum8p
uYONPaRPynnEwCdwezaO34sJO+x4ogIr2B6NuM1+STl3GE9PT6zNWbMv5FkvzcoU
dH9PLjVgZ1g6t2IWPdB+A8Y5M/qR7w9T+A4J/BLxGCV7fEipUfneqIFDfxrLmvYK
Ng==
-----END CERTIFICATE-----