Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e20393439.roa
File:                     36322e332e31352e302f32342d3234203d3e20393439.roa (raw, json)
Hash identifier:          vcvqDVo4JTWa5OtcOiL2kEBIAIf93chgPK2lR1wT03o=
Subject key identifier:   FC:5F:24:E0:18:5D:24:88:F6:14:19:B6:B6:FC:84:EA:21:03:00:DA
Certificate issuer:       /CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
Certificate serial:       5639DCBEEFE1A5D7536F8CB3047ACE80267F861E
Authority key identifier: AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer
Subject info access:      rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e20393439.roa
Signing time:             Fri 22 Sep 2023 10:19:40 +0000
ROA not before:           Fri 22 Sep 2023 10:14:40 +0000
ROA not after:            Fri 20 Sep 2024 10:19:40 +0000
asID:                     949
IP address blocks:        62.3.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:39:dc:be:ef:e1:a5:d7:53:6f:8c:b3:04:7a:ce:80:26:7f:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9c74c1fb9f99e611fb0382784b64d6cc69ab42
        Validity
            Not Before: Sep 22 10:14:40 2023 GMT
            Not After : Sep 20 10:19:40 2024 GMT
        Subject: CN=FC5F24E0185D2488F61419B6B6FC84EA210300DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:27:ac:2d:fd:b0:09:ff:4d:54:cf:fe:85:0c:
                    da:12:58:cd:a0:3a:c0:a9:7b:a3:2d:91:92:52:8c:
                    20:e7:7c:4a:12:7c:1e:3e:c0:e0:42:46:ce:63:57:
                    fd:7b:47:5b:7d:34:c7:ef:2c:1e:63:99:fc:b3:20:
                    b4:bd:05:21:3f:e0:34:3a:79:7e:97:ce:78:fb:2f:
                    9f:93:7c:6f:d1:6d:b8:ce:9e:10:97:d8:10:1c:98:
                    76:bb:03:f9:37:8b:5d:0b:b8:1c:7f:fc:33:65:22:
                    ff:bb:ed:72:e3:fa:b8:85:29:64:33:69:2b:82:98:
                    6b:99:cb:7c:8f:5a:8a:3b:73:9f:b4:97:31:61:b8:
                    21:2c:b1:e9:77:92:26:d5:b1:5f:71:f0:70:69:72:
                    32:99:c0:42:df:97:45:dd:85:42:78:63:64:a6:ce:
                    39:e1:0a:f7:41:12:f7:be:51:35:e0:a5:1b:15:de:
                    9e:3d:fc:24:8a:f4:df:4f:b0:37:c3:d5:e3:22:99:
                    c7:f5:c2:c6:d1:51:08:7f:88:4c:31:15:28:8d:b6:
                    c1:2a:be:32:17:13:9e:69:77:2d:ce:0b:0a:84:69:
                    cb:c8:f8:c1:6b:56:2f:4f:b5:a3:e4:7a:47:64:36:
                    23:37:34:84:ee:73:a4:13:50:c1:cd:3b:c0:11:9c:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:24:E0:18:5D:24:88:F6:14:19:B6:B6:FC:84:EA:21:03:00:DA
            X509v3 Authority Key Identifier:
                keyid:AC:9C:74:C1:FB:9F:99:E6:11:FB:03:82:78:4B:64:D6:CC:69:AB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/9/AC9C74C1FB9F99E611FB0382784B64D6CC69AB42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJx0wfufmeYR-wOCeEtk1sxpq0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/9/36322e332e31352e302f32342d3234203d3e20393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:e6:1f:f8:ad:c7:a8:3d:75:85:6c:2c:e2:28:68:e2:2b:
         ce:cc:0b:7b:91:ff:5b:83:7b:a5:a1:10:19:6d:6f:bb:0a:2a:
         a1:e1:7c:b4:71:89:24:9f:66:b3:8b:af:63:e8:bc:dd:ef:82:
         48:43:6e:3f:0e:4f:fa:0c:ac:f2:73:18:da:4f:c5:2a:49:76:
         e4:e0:a8:38:8e:0f:fa:d9:15:3c:f6:8f:ba:a0:04:ef:21:e8:
         b6:56:a9:e0:5d:a0:4e:97:e0:68:97:6e:6b:af:07:0c:98:cb:
         e6:1b:54:65:37:e1:fd:f0:1b:ae:2a:0c:ec:2e:e9:d9:df:8d:
         b7:cd:ba:c1:31:1f:49:7a:10:74:ee:f7:6a:c8:ba:61:7b:5e:
         74:e8:db:e3:e7:95:e2:11:93:47:b6:ce:d4:f6:fa:85:03:33:
         b5:25:b5:9a:ec:c7:6f:e9:a3:05:d7:7f:9d:eb:1a:d3:f7:d6:
         f3:62:7c:18:2e:35:f9:1c:43:6e:26:ed:6d:88:b3:6b:7a:8f:
         f1:1a:2f:5e:d3:28:61:be:88:86:86:25:69:78:68:88:4b:4c:
         e6:3d:b1:32:fc:bc:8a:b9:e4:a7:01:e8:df:3f:2f:97:67:9b:
         a8:b5:f0:41:b3:5b:7c:34:42:07:8d:1d:85:14:93:2e:d2:7b:
         0a:90:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----