Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038313030.roa
File:                     36322e332e31352e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          E9wvOU8HM0xhwCmY1vHcIg9hRBTE6Jsq1UdJLHtHxV4=
Subject key identifier:   21:EB:F3:9F:BE:69:89:F1:E9:9C:C2:69:8E:34:AD:F0:2E:06:8F:0E
Certificate issuer:       /CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
Certificate serial:       6E63204BA9E24556AAE5103911F80A13BBC2353D
Authority key identifier: AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer
Subject info access:      rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 12 Jul 2022 22:57:12 +0000
ROA not before:           Tue 12 Jul 2022 22:52:12 +0000
ROA not after:            Tue 11 Jul 2023 22:57:12 +0000
asID:                     8100
IP address blocks:        62.3.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:20:4b:a9:e2:45:56:aa:e5:10:39:11:f8:0a:13:bb:c2:35:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
        Validity
            Not Before: Jul 12 22:52:12 2022 GMT
            Not After : Jul 11 22:57:12 2023 GMT
        Subject: CN=21EBF39FBE6989F1E99CC2698E34ADF02E068F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:de:b4:95:63:ef:15:90:b7:cd:6b:bd:16:
                    a8:8a:2c:33:d2:18:df:d9:8c:64:60:1c:93:b1:b2:
                    e6:47:d7:31:de:82:ff:4a:58:22:ba:14:3f:0a:83:
                    93:c1:7b:ae:a1:6e:69:3a:63:95:58:59:b7:26:63:
                    09:99:cf:d1:a0:23:2b:83:04:ce:fe:b1:91:fc:35:
                    08:c1:fb:3a:79:b5:9b:57:7c:45:8f:4c:d7:1e:d5:
                    46:0b:cc:be:f3:1b:7c:80:f7:9a:73:aa:c4:2e:7e:
                    5e:37:fc:5b:dd:57:cf:61:53:c0:59:2f:49:bd:fb:
                    bb:d5:fd:8e:0e:e6:8b:8d:05:bc:88:7a:17:e4:c2:
                    16:03:09:66:52:fe:01:07:23:f0:7d:4b:72:18:aa:
                    70:5f:ad:57:b1:92:cf:80:10:04:37:fd:65:d4:91:
                    a7:b8:92:f1:34:4d:13:4d:86:11:a1:80:ad:64:82:
                    28:a3:71:ee:c0:dc:a9:f8:87:9b:c4:14:b0:97:31:
                    9d:11:46:67:2c:94:e7:17:d5:5b:83:ed:49:58:50:
                    75:23:c5:6a:63:95:00:a2:3a:b8:3b:31:3f:a4:d2:
                    a9:17:73:ba:2e:82:51:ba:e5:e1:d0:d3:3e:42:8e:
                    f2:5a:11:74:67:43:32:28:04:96:ab:76:f1:33:a6:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EB:F3:9F:BE:69:89:F1:E9:9C:C2:69:8E:34:AD:F0:2E:06:8F:0E
            X509v3 Authority Key Identifier:
                keyid:AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/9/AC9C74C1FB9F99E611FB0382784B64D6CC69AB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:49:98:20:3a:31:1b:a4:89:a5:88:64:b2:b7:6e:59:29:9a:
         59:b6:64:bf:b3:e1:3c:7a:68:b2:6b:cc:4d:20:f9:6d:82:17:
         fe:21:86:ac:d0:da:9c:92:6a:fd:80:f4:e2:70:93:af:b8:35:
         b6:f2:28:7f:2b:22:5c:16:00:1f:1e:c6:a4:16:d9:08:8c:92:
         b8:30:15:73:2c:25:87:0f:bd:b4:de:09:d3:43:e5:44:3c:2a:
         3e:af:b4:b6:2d:6c:ed:e1:fe:6d:d0:70:82:e7:ed:1b:ed:4c:
         94:95:b5:1b:52:d8:0d:21:23:21:0a:e6:b0:62:d7:14:61:82:
         44:e5:ea:5e:cf:f8:ae:cd:fa:7b:fa:2d:82:70:44:53:b7:7d:
         fe:ce:55:9c:ec:87:3b:a5:55:08:9d:2e:c4:80:0d:a3:ce:b2:
         37:fc:73:3c:8f:24:f4:07:e6:66:24:ca:73:29:c7:4c:39:4f:
         86:ae:17:a5:1f:44:3b:3b:ae:d2:6c:72:1b:ef:42:d3:21:10:
         e1:86:36:a0:74:42:a1:4d:a8:70:07:cc:4c:9e:ad:58:71:b5:
         48:7c:cc:a5:34:cd:89:d1:34:b4:73:96:7f:6a:26:37:74:ca:
         5f:a4:ee:af:2f:60:0e:c6:99:6c:2c:46:0e:e6:7a:a7:bb:df:
         fc:8c:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----