Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2037303138.roa
File:                     3134362e31392e3131362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          pta+XK5Me3CIJRP+vDNmZ5Fvw6ePHrGbuEvhMuVcNng=
Subject key identifier:   46:C3:74:23:7C:71:86:8F:5C:5B:98:2D:FE:3C:C6:E5:9F:FA:11:76
Certificate issuer:       /CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
Certificate serial:       7C743655C1D0A659E51BC37A36D4863D742974D1
Authority key identifier: C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer
Subject info access:      rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 12 Jul 2022 22:57:22 +0000
ROA not before:           Tue 12 Jul 2022 22:52:22 +0000
ROA not after:            Tue 11 Jul 2023 22:57:22 +0000
asID:                     7018
IP address blocks:        146.19.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:74:36:55:c1:d0:a6:59:e5:1b:c3:7a:36:d4:86:3d:74:29:74:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
        Validity
            Not Before: Jul 12 22:52:22 2022 GMT
            Not After : Jul 11 22:57:22 2023 GMT
        Subject: CN=46C374237C71868F5C5B982DFE3CC6E59FFA1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:46:be:ee:72:a4:43:c7:bb:a5:f9:63:c5:
                    ae:6b:60:e8:c4:75:03:f0:09:a5:d5:69:d3:0f:63:
                    29:8f:5b:e1:2d:5c:1d:68:d5:a9:98:41:91:a8:be:
                    e7:12:68:b9:fd:22:ba:a5:c6:b1:de:8b:53:2a:e9:
                    07:b2:7b:09:65:14:58:01:ce:4b:3d:4f:8e:b0:8e:
                    26:7b:e6:7c:b5:a5:73:d1:1a:d8:e1:6d:52:e7:b1:
                    1e:38:89:b4:6e:e6:fd:e6:1e:59:10:59:3f:a9:f6:
                    98:9a:bc:6e:82:60:28:fe:97:e6:ed:95:3f:a7:17:
                    2d:ef:f5:11:b0:f8:ad:f7:0f:60:b7:4a:bd:f4:56:
                    c5:bb:e4:34:11:74:e0:17:2f:97:5a:2a:eb:a0:3b:
                    f0:f6:e7:8d:51:82:0c:1e:7d:64:f2:9f:79:b7:29:
                    7f:63:2d:a4:d4:c1:9f:25:fd:02:3d:80:7c:e3:99:
                    ce:bd:5c:07:7e:19:05:bd:40:aa:5b:74:c9:9b:dc:
                    e4:4b:19:47:3c:18:8e:80:ad:72:5d:94:32:95:bd:
                    62:28:2b:ab:00:6c:66:c8:6f:37:aa:97:b5:7c:89:
                    3f:18:93:bc:e3:62:bd:3e:df:b8:13:08:ef:3f:cc:
                    0a:77:b5:db:6f:c4:76:b4:c2:49:31:66:0c:ed:2f:
                    e0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C3:74:23:7C:71:86:8F:5C:5B:98:2D:FE:3C:C6:E5:9F:FA:11:76
            X509v3 Authority Key Identifier:
                keyid:C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fc:7d:bc:ea:0d:1c:7c:32:38:4f:27:c3:94:01:3c:bf:09:
         d9:e1:c5:b0:1c:0f:fe:f8:d2:1f:2b:49:2a:cb:3e:86:95:80:
         7e:bf:2b:da:d7:fb:5d:ca:07:58:5c:55:fa:3c:cd:06:25:c0:
         c4:93:b4:cd:5a:c9:39:7e:b3:d6:f4:35:b1:7f:48:a7:a5:c7:
         d7:b3:7f:e6:5b:21:8d:81:8e:c3:7f:9b:34:86:fa:10:e2:a3:
         aa:7d:53:c8:2c:10:72:e9:76:7e:7e:6f:87:8a:f0:b1:e8:de:
         e5:a1:95:ea:90:28:a4:93:4f:b6:7c:33:6e:03:bd:1e:39:0e:
         2e:ae:48:54:86:a5:c1:f3:b9:1c:56:30:89:43:db:35:fd:1e:
         0d:01:90:08:fd:6a:13:5a:df:b3:a5:b9:cf:b6:ec:ec:d8:46:
         d6:32:a7:a7:87:97:aa:45:29:7f:47:5b:c9:1b:cb:e6:39:75:
         e1:17:56:37:fc:64:57:12:99:b2:6d:28:df:e7:10:95:07:36:
         2f:a6:16:66:69:0d:de:ac:0f:bb:af:a3:a5:a7:a3:a6:bf:f8:
         ff:51:04:80:2a:52:c6:89:bb:e6:73:f6:cc:c1:1f:7b:81:63:
         fb:92:1c:d4:3b:64:d6:82:6a:54:1e:04:57:fe:56:12:e2:7f:
         78:85:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----