Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e20393439.roa
File:                     3134362e31392e3131362e302f32342d3234203d3e20393439.roa (raw, json)
Hash identifier:          GLm3C55+V2V8JZOSp2q/Fvgh8JxO8+5MZiW9vlzYrDo=
Subject key identifier:   A4:36:35:A5:4E:77:A0:5B:FE:57:8D:1A:E1:90:D9:E9:C2:FB:56:AA
Certificate issuer:       /CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
Certificate serial:       502AD8042DA5622A73050B53BD9A9C0062079171
Authority key identifier: C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer
Subject info access:      rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e20393439.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     949
IP address blocks:        146.19.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2a:d8:04:2d:a5:62:2a:73:05:0b:53:bd:9a:9c:00:62:07:91:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=A43635A54E77A05BFE578D1AE190D9E9C2FB56AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:6a:71:34:09:da:9c:ee:c1:ab:5a:3a:ca:
                    df:8f:83:5f:88:ef:46:53:af:5a:72:90:b4:29:44:
                    85:2a:c8:de:b2:15:02:63:b0:e9:95:87:96:4f:c4:
                    89:8a:4e:64:59:10:dc:3b:e0:9f:7f:5f:35:84:38:
                    77:c6:55:83:e9:e1:2a:f8:38:de:14:a9:22:93:cd:
                    7b:04:e1:fe:b6:4c:38:5c:86:d5:3a:a0:b4:55:cf:
                    b1:5b:bf:06:50:23:05:0a:d2:a4:6a:56:bb:f5:6a:
                    69:99:7e:41:51:f3:fb:2c:47:02:14:69:b9:60:65:
                    ea:cc:ff:59:16:44:fa:43:02:07:41:83:7c:ac:c0:
                    27:41:aa:a3:c3:1a:5b:99:00:15:ef:9c:25:9d:48:
                    1a:20:34:4a:da:98:84:e4:bb:05:fc:1f:b1:79:c9:
                    4d:f1:32:9b:ba:5d:79:26:b1:c2:6a:91:5e:8f:a8:
                    72:b1:5a:bf:9c:4e:b5:89:a2:b8:d9:91:d4:27:8d:
                    72:81:ee:d0:cf:3e:28:5e:c3:c0:37:7d:13:d2:ad:
                    25:d3:3e:01:60:22:57:73:5a:1a:3d:9c:c0:fa:56:
                    8c:0f:14:2d:f5:f8:04:63:99:a8:cc:ff:78:fb:32:
                    c6:be:01:77:9c:a3:47:3c:45:6c:6a:52:f6:5c:78:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:35:A5:4E:77:A0:5B:FE:57:8D:1A:E1:90:D9:E9:C2:FB:56:AA
            X509v3 Authority Key Identifier:
                keyid:C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/7/3134362e31392e3131362e302f32342d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:dd:02:69:1a:e5:7c:82:a9:2a:4a:e7:7f:bd:55:08:a3:
         ba:5d:45:02:11:ef:83:70:62:46:79:ca:89:2d:fb:82:93:be:
         da:7f:92:83:50:a4:98:97:72:93:61:e2:da:95:b4:8c:83:66:
         7b:26:5c:61:fd:83:82:ef:c6:47:1b:9a:02:af:2f:26:40:db:
         40:34:82:52:d4:74:2d:40:49:fb:cf:47:f3:b2:41:5a:16:3f:
         7f:1a:3f:78:27:bb:57:b2:1f:5d:89:0b:d1:80:f6:30:74:8d:
         46:43:d3:4f:a9:b6:1a:dd:61:fe:7a:03:f5:ab:25:56:37:41:
         cb:a8:42:92:a6:21:15:8a:8f:d9:e1:41:97:5b:cd:6e:c3:20:
         6e:85:f9:81:a7:14:4f:e5:e4:9d:4c:11:23:16:bd:11:64:90:
         95:d0:02:21:fe:f1:b6:f1:c0:b5:97:95:05:14:d9:6a:1c:61:
         92:fd:59:97:e8:6f:97:76:5f:34:dd:c3:90:f4:9f:71:6d:af:
         c1:5b:01:be:8b:b9:98:47:52:f2:48:96:26:96:2d:00:b9:a8:
         69:c0:df:c1:91:b7:a7:32:0d:c1:64:e2:97:58:c1:eb:6b:b9:
         08:2d:c5:d1:58:15:f4:cf:5a:2d:14:cc:e1:2d:98:00:6a:ab:
         3d:a0:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----