Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038383838.roa
File:                     36322e332e31352e302f32342d3234203d3e2038383838.roa (raw, json)
Hash identifier:          C5MXSfUAUcmJaf0M8GAk+hLdiMhiKSWy9o/9EDZLsOA=
Subject key identifier:   66:3E:7F:1B:C1:9C:F1:53:3E:D4:3E:21:9A:0A:F5:77:9B:51:F5:E9
Certificate issuer:       /CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
Certificate serial:       057F7C8FB1AEA255605B6ABF639B476382E52A4B
Authority key identifier: AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer
Subject info access:      rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:41 +0000
ROA not before:           Fri 22 Sep 2023 10:14:41 +0000
ROA not after:            Fri 20 Sep 2024 10:19:41 +0000
asID:                     8888
IP address blocks:        62.3.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7f:7c:8f:b1:ae:a2:55:60:5b:6a:bf:63:9b:47:63:82:e5:2a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
        Validity
            Not Before: Sep 22 10:14:41 2023 GMT
            Not After : Sep 20 10:19:41 2024 GMT
        Subject: CN=663E7F1BC19CF1533ED43E219A0AF5779B51F5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:67:d4:75:db:d8:4a:58:c0:2d:66:47:fd:1b:
                    b6:2e:0d:ea:fb:ce:3e:b4:b0:4e:2b:5c:3d:1d:02:
                    39:16:08:0a:2f:95:a9:8e:e1:38:8c:6a:80:3a:50:
                    cd:4a:d6:2a:9f:05:c5:68:fc:e1:f3:84:cf:1b:24:
                    0c:90:1b:25:46:09:4b:c1:d4:1f:67:ee:df:f2:4f:
                    d3:41:4c:86:ed:9b:fc:46:a8:2b:cc:c5:87:87:a2:
                    ab:b1:50:3c:a0:5e:c0:29:23:69:a7:34:24:b0:1c:
                    ff:65:8d:b7:55:b4:b6:d0:fa:4c:7a:75:5b:a6:f6:
                    72:0d:ce:60:90:05:23:c0:ce:f7:6b:46:c1:a9:82:
                    1a:07:08:32:4a:96:16:44:4a:ae:ec:48:87:eb:51:
                    03:1a:74:70:18:27:4d:96:85:cb:42:01:5a:3c:5e:
                    27:da:41:46:a0:d1:86:c2:1e:3c:50:4d:a3:3a:be:
                    92:4e:4b:8f:62:d4:a5:71:e6:72:e5:0a:16:1e:82:
                    21:a1:78:be:34:13:2c:e9:50:4f:bf:0d:f6:2b:6d:
                    a4:b0:41:9e:d5:ff:74:2c:ef:1f:53:34:be:97:07:
                    f8:8c:05:1c:91:57:46:30:e4:14:e0:7b:b5:54:cd:
                    12:4c:19:ac:47:86:3f:8d:ca:29:47:88:2c:fc:d0:
                    31:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3E:7F:1B:C1:9C:F1:53:3E:D4:3E:21:9A:0A:F5:77:9B:51:F5:E9
            X509v3 Authority Key Identifier:
                keyid:AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/9/AC9C74C1FB9F99E611FB0382784B64D6CC69AB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:de:d4:7f:8a:09:6f:51:5c:30:03:46:d6:67:3b:6b:2d:a4:
         dd:47:9e:db:59:98:7d:10:e3:ff:32:87:94:1e:c3:03:bc:42:
         60:35:57:61:89:a1:fc:ae:46:65:f6:55:11:a0:72:b8:e2:16:
         a5:e4:64:64:bc:a8:ca:42:04:d0:69:11:50:9a:b0:61:c1:7e:
         e2:bb:d9:fd:1a:e8:60:9e:fa:b9:d6:6b:03:b6:17:e1:85:2d:
         f3:ba:0b:28:04:f8:e0:1a:25:3f:b2:d3:67:1a:04:13:6c:86:
         19:c1:9e:47:27:07:23:9b:ff:61:2f:c6:85:bd:1f:79:9f:a6:
         c5:5a:74:36:7c:68:d9:8e:fa:ed:f6:47:b5:b6:59:82:ee:56:
         72:0b:c2:77:ca:18:c6:5d:1c:24:4d:5e:0a:29:5d:a7:0d:3d:
         d5:a3:36:9b:30:a9:ca:77:a5:a9:ca:53:ee:a6:dd:32:dc:93:
         f7:ca:9f:0e:f1:9b:a5:f8:b0:01:38:b5:9f:7d:8b:9f:c7:67:
         f5:63:50:59:78:6f:1c:9e:11:9c:23:4d:e8:76:e4:1d:24:95:
         0b:15:da:e5:07:8b:e3:ce:0c:5a:91:6b:8a:b6:72:d8:fb:57:
         db:50:9d:36:da:c3:dc:d8:5e:75:aa:67:84:20:e3:ed:00:1c:
         16:b5:09:10
-----BEGIN CERTIFICATE-----
MIIEqDCCA5CgAwIBAgIUBX98j7GuolVgW2q/Y5tHY4LlKkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM5Yzc0YzFmYjlmOTllNjExZmIwMzgyNzg0YjY0ZDZj
YzY5YWI0MjAeFw0yMzA5MjIxMDE0NDFaFw0yNDA5MjAxMDE5NDFaMDMxMTAvBgNV
BAMTKDY2M0U3RjFCQzE5Q0YxNTMzRUQ0M0UyMTlBMEFGNTc3OUI1MUY1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZ9R129hKWMAtZkf9G7YuDer7
zj60sE4rXD0dAjkWCAovlamO4TiMaoA6UM1K1iqfBcVo/OHzhM8bJAyQGyVGCUvB
1B9n7t/yT9NBTIbtm/xGqCvMxYeHoquxUDygXsApI2mnNCSwHP9ljbdVtLbQ+kx6
dVum9nINzmCQBSPAzvdrRsGpghoHCDJKlhZESq7sSIfrUQMadHAYJ02WhctCAVo8
XifaQUag0YbCHjxQTaM6vpJOS49i1KVx5nLlChYegiGheL40EyzpUE+/DfYrbaSw
QZ7V/3Qs7x9TNL6XB/iMBRyRV0Yw5BTge7VUzRJMGaxHhj+NyilHiCz80DFvAgMB
AAGjggGyMIIBrjAdBgNVHQ4EFgQUZj5/G8Gc8VM+1D4hmgr1d5tR9ekwHwYDVR0j
BBgwFoAUrJx0wfufmeYR+wOCeEtk1sxpq0IwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud
HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzkvQUM5Qzc0QzFGQjlG
OTlFNjExRkIwMzgyNzg0QjY0RDZDQzY5QUI0Mi5jcmwwZAYIKwYBBQUHAQEEWDBW
MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E
RUZBVUxUL3JKeDB3ZnVmbWVZUi13T0NlRXRrMXN4cHEwSS5jZXIwZQYIKwYBBQUH
AQsEWTBXMFUGCCsGAQUFBzALhklyc3luYzovLzAuc2IvcmVwby9zYi85LzM2MzIy
ZTMzMmUzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzODM4Mzgucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA+Aw8wDQYJKoZIhvcNAQELBQADggEBAGDe1H+KCW9RXDADRtZnO2stpN1H
nttZmH0Q4/8yh5QewwO8QmA1V2GJofyuRmX2VRGgcrjiFqXkZGS8qMpCBNBpEVCa
sGHBfuK72f0a6GCe+rnWawO2F+GFLfO6CygE+OAaJT+y02caBBNshhnBnkcnByOb
/2EvxoW9H3mfpsVadDZ8aNmO+u32R7W2WYLuVnILwnfKGMZdHCRNXgopXacNPdWj
Npswqcp3panKU+6m3TLck/fKnw7xm6X4sAE4tZ99i5/HZ/VjUFl4bxyeEZwjTeh2
5B0klQsV2uUHi+PODFqRa4q2ctj7V9tQnTbaw9zYXnWqZ4Qg4+0AHBa1CRA=
-----END CERTIFICATE-----