Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/SboGMTB-9QHWroFpAbYSHcl3CKo.roa
File:                     SboGMTB-9QHWroFpAbYSHcl3CKo.roa (raw, json)
Hash identifier:          rffHNVeJmra0y8Rg18pTmGMriRjMrSI/KkXaHsDinBM=
Subject key identifier:   49:BA:06:31:30:7E:F5:01:D6:AE:81:69:01:B6:12:1D:C9:77:08:AA
Certificate issuer:       /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial:       019427B68633A8125DEE69DD5406979F6798
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/SboGMTB-9QHWroFpAbYSHcl3CKo.roa
Signing time:             Thu 02 Jan 2025 15:51:00 +0000
ROA not before:           Thu 02 Jan 2025 15:51:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210321
IP address blocks:        185.242.248.0/22 maxlen: 24
                          2a0c:f780::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:86:33:a8:12:5d:ee:69:dd:54:06:97:9f:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
        Validity
            Not Before: Jan  2 15:51:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=49ba0631307ef501d6ae816901b6121dc97708aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:5e:2d:4a:ff:1b:f8:d3:7b:2c:cb:51:0b:
                    fa:7f:2b:09:67:86:d1:b3:e3:2d:41:b9:b3:50:47:
                    14:ad:34:00:0a:87:6f:99:bd:eb:f7:7a:6c:fa:39:
                    6b:80:7a:bd:0d:7e:9c:98:5d:c8:13:6c:22:7b:c2:
                    25:ae:d8:50:fa:5b:24:85:a0:fb:91:fa:1f:79:0c:
                    3a:70:c9:23:c5:5f:89:0a:ae:12:10:c5:f0:b5:5a:
                    f2:65:97:37:b8:4d:fc:06:a4:fa:c6:79:ad:bc:74:
                    7e:3b:19:26:63:92:2b:0d:09:fc:ea:b1:3c:f2:66:
                    8d:32:ed:49:24:96:3a:a7:c0:b0:a0:1a:60:8c:51:
                    45:a8:29:a1:b7:7d:5f:b2:ed:4a:b3:dc:91:cc:b9:
                    02:18:ad:fe:30:bd:c8:f5:e8:77:21:77:53:b9:b6:
                    03:cb:80:a3:57:59:61:b1:1b:94:d0:67:ab:f5:7b:
                    f0:66:44:1e:44:79:f3:b0:1e:6e:60:67:f5:51:0e:
                    60:2e:1b:ca:3d:2a:45:39:f1:ee:d7:72:7a:6b:7a:
                    87:a5:5c:a5:ce:68:58:73:2a:c7:80:33:14:f5:be:
                    ec:df:43:80:0b:6a:89:15:c3:c1:d2:1a:1a:93:7f:
                    2f:d4:3d:3f:90:dc:ea:04:21:06:36:39:2f:c3:a4:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BA:06:31:30:7E:F5:01:D6:AE:81:69:01:B6:12:1D:C9:77:08:AA
            X509v3 Authority Key Identifier:
                keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/SboGMTB-9QHWroFpAbYSHcl3CKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.248.0/22
                IPv6:
                  2a0c:f780::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:12:9e:93:e3:89:3d:4b:e5:8f:b3:14:49:8f:e8:f7:ab:
         3b:74:e5:fb:9c:5a:20:5a:76:d3:0f:bf:5e:b8:90:3d:b8:63:
         47:b9:d8:c9:69:ca:af:f6:79:46:b3:d7:ec:43:f1:c3:21:db:
         fb:e7:3f:00:8c:84:8a:03:09:47:b1:81:80:fa:00:00:0a:8f:
         5a:58:9d:ac:5e:72:99:0c:d0:61:b6:b2:2e:44:26:2a:54:ad:
         14:e2:0f:15:1e:c7:59:14:81:4a:c2:99:75:02:25:46:1e:40:
         43:d1:af:66:27:ed:56:11:9a:06:8a:4c:9e:b8:9b:75:92:1c:
         c9:8c:66:d0:63:75:e8:89:79:7f:c8:4a:7b:79:9b:66:e5:63:
         71:45:bb:03:ea:13:b2:9a:ae:9f:9d:fd:33:79:4f:7f:81:f5:
         e2:74:41:4a:2c:12:28:56:86:68:5c:c4:9d:97:56:0e:b6:55:
         32:5d:77:ff:85:93:de:82:a0:3b:9a:14:5d:c4:f4:6e:21:2e:
         30:b8:48:db:ec:45:d4:a9:8d:4a:f3:a0:1f:9a:3a:8d:91:88:
         aa:b9:29:f5:e0:08:86:15:13:f4:b2:f2:d1:cc:de:dd:2b:fb:
         ed:11:c8:56:b8:a0:53:e6:73:b3:55:2f:17:df:d8:91:f3:01:
         31:49:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----