Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa
File:                     34352e3134322e3136362e302f32342d3234203d3e2033323538.roa (raw, json)
Hash identifier:          QNIlZiqZZF8DXKMiFxLC55CwvT+924vYRePuM8BNK9o=
Subject key identifier:   5C:AB:8C:BE:13:06:16:C7:48:CF:D6:E8:70:FD:BA:62:68:79:67:AF
Certificate issuer:       /CN=761c616364b89659ed9f18cb0af77420437cc7da
Certificate serial:       3B20B985D5EA048AC78DFBA41973709CA260F9FA
Authority key identifier: 76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer
Subject info access:      rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa
Signing time:             Fri 11 Apr 2025 08:52:20 +0000
ROA not before:           Fri 11 Apr 2025 08:47:20 +0000
ROA not after:            Fri 10 Apr 2026 08:52:20 +0000
asID:                     3258
IP address blocks:        45.142.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:20:b9:85:d5:ea:04:8a:c7:8d:fb:a4:19:73:70:9c:a2:60:f9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c616364b89659ed9f18cb0af77420437cc7da
        Validity
            Not Before: Apr 11 08:47:20 2025 GMT
            Not After : Apr 10 08:52:20 2026 GMT
        Subject: CN=5CAB8CBE130616C748CFD6E870FDBA62687967AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:17:90:e9:a0:76:03:cf:ab:c6:7e:20:4f:
                    8b:71:b5:24:c5:57:59:3b:84:f3:67:4a:c3:19:cf:
                    4f:46:d1:9a:81:22:0a:24:2e:aa:ef:62:cf:08:10:
                    27:e3:25:9e:d7:aa:f2:9e:6c:23:e1:38:5c:3b:5a:
                    6e:e2:e8:4f:06:1e:aa:2f:7d:c8:00:b3:6a:94:d9:
                    cc:39:11:8e:b2:2c:bc:10:07:2e:31:9d:0f:1f:19:
                    d0:aa:0f:ab:13:7f:41:26:6e:56:20:14:c7:af:9f:
                    46:4c:f9:7f:c8:a5:54:4a:5c:88:79:6d:c1:4d:05:
                    9b:d1:46:fc:a1:a6:80:70:90:01:a3:0e:84:f1:7b:
                    0a:f0:1e:07:76:52:1b:49:e2:35:57:22:d3:d4:1a:
                    b1:b6:13:ef:89:38:17:48:1e:b9:08:b6:03:96:d7:
                    66:bf:09:54:5b:64:0d:15:9b:54:07:1c:a1:c4:38:
                    22:26:07:ae:3e:ef:b9:81:0b:5a:0d:6a:6c:8b:30:
                    67:d0:11:95:be:d3:b0:31:d8:f8:30:c3:9d:ed:61:
                    49:18:3b:d0:43:d6:4f:9d:0d:52:38:95:94:39:81:
                    a5:16:00:46:f0:3b:98:da:87:7a:02:f4:cb:e6:a2:
                    fa:f8:18:b9:e5:f7:8f:68:e0:95:3d:86:b8:c2:38:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AB:8C:BE:13:06:16:C7:48:CF:D6:E8:70:FD:BA:62:68:79:67:AF
            X509v3 Authority Key Identifier:
                keyid:76:1C:61:63:64:B8:96:59:ED:9F:18:CB:0A:F7:74:20:43:7C:C7:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/21/761C616364B89659ED9F18CB0AF77420437CC7DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhxhY2S4llntnxjLCvd0IEN8x9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/21/34352e3134322e3136362e302f32342d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:6b:4a:cb:2a:c1:a9:dd:7c:f2:6a:10:46:83:31:72:48:
         29:4c:01:16:cc:5a:08:a5:ed:c4:e2:4a:15:81:5f:6e:b6:f2:
         62:cb:64:9e:c6:80:9d:f8:d7:4f:05:21:bf:b4:a9:19:a7:39:
         2d:ab:37:c6:4e:90:41:8f:f4:ac:02:56:41:d2:1e:f0:3f:2f:
         16:24:53:d5:7b:17:90:91:80:ac:9b:c1:f9:7b:5a:3f:e7:55:
         50:2e:73:5f:41:9c:1d:0f:9e:aa:68:90:94:ce:8a:c5:15:b4:
         25:20:98:50:b2:ec:e4:28:54:8b:78:48:c3:e8:c9:06:6a:4c:
         37:77:dc:7d:39:e1:5a:fd:ff:3f:ed:f0:2b:70:d5:f9:87:ad:
         79:c9:b4:f6:5e:26:a3:a7:c1:b7:1e:17:38:53:2c:3e:e2:66:
         96:56:85:ee:1b:a9:2d:c2:01:68:66:a9:cc:1b:c7:88:ca:e6:
         85:19:3a:02:7c:97:1e:a7:f2:df:81:a7:b1:85:51:71:97:95:
         eb:33:a3:17:4e:bc:dd:2a:2c:b5:50:b3:96:ff:23:b6:2d:41:
         cd:aa:2c:44:9f:a3:9e:5e:d9:47:d3:cd:49:7a:5b:d9:fc:41:
         ed:e7:af:7f:f1:95:18:12:0b:4a:15:de:5b:6e:e0:1c:50:39:
         66:5c:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----