Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2038383838.roa
File:                     3134362e31392e3131362e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          t23HRjbygRDMGnKTy8U9qrOJjFo1qGj3Rkne5zxO/QQ=
Subject key identifier:   F9:5E:0E:BA:1F:98:23:4F:2A:70:E2:24:EF:56:69:29:90:E7:26:7A
Certificate issuer:       /CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
Certificate serial:       22E013C0E34D894BD0073E3EF000E62DA1E9B306
Authority key identifier: C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer
Subject info access:      rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     8888
IP address blocks:        146.19.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e0:13:c0:e3:4d:89:4b:d0:07:3e:3e:f0:00:e6:2d:a1:e9:b3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=F95E0EBA1F98234F2A70E224EF56692990E7267A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:ed:cc:8a:94:a3:30:d4:b5:39:63:d2:1d:
                    19:48:1c:ae:a7:05:06:aa:75:c4:4c:17:82:b8:67:
                    ba:85:23:54:b2:27:c8:68:f2:c0:b2:88:11:55:bd:
                    74:da:43:1d:29:81:62:62:eb:1b:0b:71:5f:d4:5e:
                    58:04:0e:0d:8b:08:71:58:8f:a1:74:39:f1:60:83:
                    9e:5d:be:6b:49:e0:d6:8b:0f:06:f1:b3:5f:9a:3c:
                    8c:52:fe:32:86:39:f1:71:3d:16:21:64:7a:f2:67:
                    bd:b7:00:4f:2f:c6:0d:31:67:4c:53:2a:35:ce:a1:
                    ac:af:7c:5d:7b:ea:c6:ce:6b:83:53:ca:ec:d2:65:
                    07:71:5d:dc:53:a4:d4:bc:b6:e8:13:4f:c3:0b:ce:
                    0d:ab:01:9f:5c:e1:26:2f:05:60:35:7a:ab:cd:04:
                    bf:74:e3:90:5f:36:23:2f:83:43:fa:cb:8d:f8:f2:
                    98:af:d3:c3:7a:66:48:30:cf:7e:97:94:37:2c:0d:
                    57:8f:aa:a9:63:98:d4:7d:a4:33:1e:0e:6b:e5:38:
                    85:6e:69:7e:f5:3c:b3:40:ad:af:44:59:4f:35:a4:
                    96:af:b7:89:ee:ad:cd:34:c8:f8:b7:e9:e6:9e:62:
                    09:8c:72:4d:b7:56:c3:50:b5:ac:fb:cc:94:e9:00:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5E:0E:BA:1F:98:23:4F:2A:70:E2:24:EF:56:69:29:90:E7:26:7A
            X509v3 Authority Key Identifier:
                keyid:C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:31:c6:8c:95:d7:c4:36:ff:9c:fe:e2:ee:5d:31:56:21:0b:
         01:f0:11:7c:19:8e:7e:d3:8c:90:6e:96:b3:a3:9f:b9:86:4a:
         d4:bc:72:91:a2:e0:fe:0b:fa:55:47:5e:c4:78:11:d2:f7:9e:
         58:b5:57:e0:fd:ce:66:1b:4d:c0:6f:1c:58:2d:66:70:b1:a7:
         65:7f:9d:19:3f:2b:06:d5:e7:d1:ae:91:c5:ab:31:d6:9c:5b:
         28:64:a6:4b:9e:50:e5:d0:4b:d0:41:7d:c6:6d:88:ce:aa:18:
         59:eb:68:c6:c5:6c:f7:93:36:3f:b0:15:6b:1d:b9:a2:af:6e:
         a6:89:01:9e:0c:98:c9:17:d4:92:09:d7:39:6f:9a:e3:04:fa:
         0a:23:5f:4d:1e:64:70:0d:73:fc:f4:2d:fa:59:80:5c:55:14:
         59:35:60:ee:74:d0:ec:29:a8:f5:d9:1b:8c:5e:72:90:34:25:
         0a:6b:17:51:ce:d2:93:7a:aa:f2:69:d4:38:7b:94:38:78:cd:
         f1:5c:e9:8c:aa:8d:a1:d8:e8:f0:ec:44:9f:f4:fb:e3:7a:44:
         9a:5a:e1:76:74:3f:4f:37:f1:73:ba:00:88:21:5a:3e:44:44:
         12:ae:35:b0:75:1a:05:cd:00:ce:9a:b5:0c:a8:3b:09:cf:7c:
         d1:16:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----