Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038383838.roa
File:                     3134362e31392e3131322e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          IfvSmdX+Qj8xaMTNY5px/uDtN5RQ1WJdrJw7VSz9r80=
Subject key identifier:   EB:CE:75:21:ED:10:73:4C:4D:69:75:78:71:73:F6:E3:A7:6F:3D:B5
Certificate issuer:       /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial:       13914523AC984A85B634D1F58DFFE1E7E0C1F093
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access:      rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:39 +0000
ROA not before:           Fri 22 Sep 2023 10:14:39 +0000
ROA not after:            Fri 20 Sep 2024 10:19:39 +0000
asID:                     8888
IP address blocks:        146.19.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:91:45:23:ac:98:4a:85:b6:34:d1:f5:8d:ff:e1:e7:e0:c1:f0:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
        Validity
            Not Before: Sep 22 10:14:39 2023 GMT
            Not After : Sep 20 10:19:39 2024 GMT
        Subject: CN=EBCE7521ED10734C4D6975787173F6E3A76F3DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:28:92:8a:fa:d5:bc:f9:e4:23:f0:ec:e7:
                    43:ed:0f:d8:1a:67:e5:95:86:7f:dc:14:b6:1c:49:
                    7f:24:22:7e:95:03:66:02:71:32:44:60:a3:f8:08:
                    a3:ba:83:2b:87:b4:19:8e:71:1a:81:42:2f:85:70:
                    9a:d6:7c:25:6a:7d:32:e3:de:87:20:c1:53:c0:33:
                    b8:94:51:b2:4b:cd:a7:e1:97:23:ed:15:b0:3e:df:
                    88:5e:ce:d2:e5:3f:32:29:19:96:0a:82:8f:b7:5b:
                    34:40:b6:d2:e6:10:a4:00:3f:35:94:23:82:60:b6:
                    b2:94:a6:b5:e2:fe:8f:43:cf:5a:3c:86:9b:51:d5:
                    ab:33:95:d6:30:1a:03:9b:5b:a7:4c:83:86:53:c0:
                    09:a3:c3:9e:60:72:1d:3d:96:9e:03:88:7f:41:b5:
                    06:a4:e6:37:36:c9:95:a4:de:4e:c1:f5:ce:e7:7c:
                    92:3f:68:ed:fd:61:bf:a2:3c:28:cd:02:d7:c0:1a:
                    87:2f:ca:e8:c7:6e:16:98:a8:48:78:af:a6:71:f7:
                    2d:72:72:95:bf:3c:20:04:0a:ec:d0:00:2f:2a:07:
                    50:84:6d:f7:31:31:cb:eb:00:02:19:64:3d:7d:33:
                    de:41:bb:ee:4e:d9:ff:63:c7:55:ea:eb:97:c9:89:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:75:21:ED:10:73:4C:4D:69:75:78:71:73:F6:E3:A7:6F:3D:B5
            X509v3 Authority Key Identifier:
                keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/8/3134362e31392e3131322e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:77:69:3b:c5:84:87:a9:8c:53:a9:2c:26:e7:98:fc:87:
         c8:7e:19:77:12:f1:ee:af:b5:5f:1d:a6:ab:42:32:86:92:dc:
         34:d0:01:5b:1b:72:d2:85:20:c1:76:7c:34:25:58:0e:4d:9c:
         3d:b6:28:75:04:7d:1d:2d:bb:1d:d4:af:0b:1d:01:dd:b9:35:
         07:2a:ef:e4:7a:0c:18:0b:a5:e3:c7:bd:62:40:6d:cf:5b:46:
         df:ca:b0:b2:4e:66:94:4b:1f:79:91:fc:fc:4e:a6:ad:ba:f2:
         6e:f7:17:bb:14:37:b7:e8:f5:5f:fe:1e:6c:44:6e:6c:b7:e1:
         a2:02:45:5b:9d:ae:b4:b4:78:f0:5c:25:b3:6b:c7:a3:76:78:
         66:69:96:a0:2d:a8:49:07:c5:2c:01:62:ba:f8:c3:16:1e:31:
         5f:bc:72:6c:16:34:f4:6b:44:85:5d:95:24:61:9f:7d:53:e8:
         13:8d:7d:cf:aa:08:d7:c2:94:a3:b1:c7:f5:32:c4:d7:2f:4e:
         88:70:e0:cb:e7:62:bf:19:e3:de:9a:6c:51:7b:7a:1d:a5:cc:
         a9:1a:d0:d5:ad:2f:c3:df:58:f7:27:f2:f5:1f:74:8e:ba:f1:
         fd:b2:b0:34:c9:2b:69:b9:73:cb:05:ab:99:a4:1b:ac:c3:9c:
         4c:d8:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----