Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/7/326131323a396430303a3a2f32392d3438203d3e2038383838.roa
File:                     326131323a396430303a3a2f32392d3438203d3e2038383838.roa (raw, json)
Hash identifier:          2COj+vBxjaF65KM55xTPHKT4y3hZ6QEPDEXsK2R0PTY=
Subject key identifier:   82:D3:E6:6E:CE:FB:27:B3:2D:DD:23:66:D9:81:B4:83:1F:0D:7A:47
Certificate issuer:       /CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
Certificate serial:       6000B1F69A295BAC19FB9AF07E9BCA89C49B4366
Authority key identifier: C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer
Subject info access:      rsync://0.sb/repo/sb/7/326131323a396430303a3a2f32392d3438203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:42 +0000
ROA not before:           Fri 22 Sep 2023 10:14:42 +0000
ROA not after:            Fri 20 Sep 2024 10:19:42 +0000
asID:                     8888
IP address blocks:        2a12:9d00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:00:b1:f6:9a:29:5b:ac:19:fb:9a:f0:7e:9b:ca:89:c4:9b:43:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
        Validity
            Not Before: Sep 22 10:14:42 2023 GMT
            Not After : Sep 20 10:19:42 2024 GMT
        Subject: CN=82D3E66ECEFB27B32DDD2366D981B4831F0D7A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:1b:c6:c1:20:06:7b:20:53:8d:f6:d9:01:
                    c1:85:d5:eb:9e:7d:db:2e:34:e6:71:8f:00:3b:83:
                    b8:26:98:a7:36:66:14:df:94:95:3e:62:d2:9c:0a:
                    01:a1:52:25:f3:20:34:43:ad:ac:79:0f:30:71:44:
                    ae:37:26:4a:4e:82:1c:5c:33:a3:5a:6c:47:8a:ee:
                    0a:3d:fa:d3:7b:7b:c3:8a:79:ab:a7:37:c5:ba:b8:
                    3d:90:b4:fc:61:ce:9d:e3:2d:cb:2e:0e:8f:a4:a8:
                    18:e8:4b:60:1c:d4:a3:a9:a5:ad:c1:eb:55:9e:32:
                    8a:83:df:10:d8:fc:53:d0:bc:72:61:f7:d4:00:5c:
                    23:b8:70:50:70:70:21:2e:e0:c5:27:eb:26:29:c1:
                    d7:b4:a6:11:31:07:5d:60:69:53:25:b1:ab:f7:99:
                    c7:ad:c9:33:95:f2:fd:ec:9d:45:c1:43:ea:42:90:
                    42:dc:12:91:41:e9:98:b9:2d:76:14:d2:4d:45:e2:
                    23:d5:6f:af:f1:1a:b2:89:df:7b:5f:13:66:00:ea:
                    83:50:be:9b:7c:94:07:4a:89:e6:a3:90:e6:4a:41:
                    43:c3:f9:97:eb:dc:93:05:13:a8:2f:1a:df:1c:ba:
                    d8:28:06:ce:30:93:ad:71:86:3f:f2:bc:b0:c7:82:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:E6:6E:CE:FB:27:B3:2D:DD:23:66:D9:81:B4:83:1F:0D:7A:47
            X509v3 Authority Key Identifier:
                keyid:C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/7/326131323a396430303a3a2f32392d3438203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         92:c4:d5:06:e5:50:e0:1f:d8:f1:27:da:f2:60:6d:1a:e4:77:
         24:6f:40:77:4e:f0:08:a1:80:74:64:2c:96:09:a8:21:a1:8c:
         4e:64:ff:e0:85:5c:84:2c:fa:c8:b4:a1:c5:7a:5f:51:f5:40:
         85:dc:2e:04:1b:76:af:ed:fc:7d:d0:9f:8b:64:35:e9:c9:e0:
         c5:aa:a7:56:68:46:e5:7f:fa:fc:6a:eb:54:6b:59:ad:e0:be:
         e0:87:65:9f:92:c8:8f:30:6a:84:8b:89:71:21:05:c9:45:29:
         6b:09:03:d5:0d:80:e2:a5:b6:06:c0:ac:25:c1:f0:71:36:e1:
         b5:47:b9:dd:de:f6:19:d9:48:e3:27:c7:7a:12:6a:44:51:8d:
         ac:df:2a:72:1e:54:e5:32:44:0e:93:dd:53:54:44:9a:d0:02:
         5d:dc:42:8a:c7:3f:35:c2:37:0d:5b:5c:f3:ab:b2:f8:a4:52:
         42:d3:e8:15:11:d1:e2:4e:ad:d8:dc:b9:6a:7d:fb:3e:c3:eb:
         0c:41:bd:6b:7b:8c:d6:72:46:c5:97:42:ab:6e:db:8f:c9:cf:
         c9:57:82:a4:6a:e5:de:27:51:60:a3:33:20:3a:2c:f9:82:41:
         41:5f:c0:e6:d4:41:db:31:08:b3:12:b1:dd:36:d9:b4:01:dd:
         ac:73:f1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----