Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-1/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          yuLwy9NpM5rRO3S1Q9Oyl41552pNowD725SswQyYZhk=
Subject key identifier:   8F:95:31:87:ED:C3:85:14:EB:D9:72:97:DA:53:80:39:FE:90:49:F4
Certificate issuer:       /CN=c37e77f5036bc5e007faade84675736e8074789d
Certificate serial:       6984A51147F22394843C98227B2B8FB9C99F43C0
Authority key identifier: C3:7E:77:F5:03:6B:C5:E0:07:FA:AD:E8:46:75:73:6E:80:74:78:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3539QNrxeAH-q3oRnVzboB0eJ0.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-1/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 28 Oct 2022 05:14:21 +0000
ROA not before:           Fri 28 Oct 2022 05:09:21 +0000
ROA not after:            Fri 27 Oct 2023 05:14:21 +0000
asID:                     61317
IP address blocks:        91.233.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:84:a5:11:47:f2:23:94:84:3c:98:22:7b:2b:8f:b9:c9:9f:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37e77f5036bc5e007faade84675736e8074789d
        Validity
            Not Before: Oct 28 05:09:21 2022 GMT
            Not After : Oct 27 05:14:21 2023 GMT
        Subject: CN=8F953187EDC38514EBD97297DA538039FE9049F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:01:27:85:b5:d1:5c:d6:06:66:a4:fe:66:
                    82:f5:55:d7:86:0c:79:ce:25:18:1e:c1:8b:43:e1:
                    9c:8a:02:10:43:a8:33:3e:ba:32:e0:96:ac:71:23:
                    62:5d:37:b9:7b:98:06:a2:22:8e:74:47:03:da:27:
                    93:39:ec:4e:87:7f:e8:e9:dd:2a:46:cb:b1:8a:4e:
                    46:d4:39:3f:6a:ae:1a:6a:b8:69:f0:ad:79:c7:4b:
                    1a:58:31:9b:a7:34:3d:d3:8d:2d:49:e8:7e:80:07:
                    b5:dd:b1:5c:81:98:e3:59:09:e6:5b:e1:93:ac:92:
                    57:6d:e5:19:ed:63:cf:fd:04:91:96:f7:ef:bc:12:
                    7e:1e:bd:71:31:d7:86:ca:44:a5:57:87:42:c1:f3:
                    ff:61:ca:26:7d:5d:df:a3:a0:d9:90:7a:ba:25:84:
                    99:90:22:b5:c6:62:c6:cd:18:1e:fb:93:e4:51:7c:
                    09:71:f3:00:93:8b:f5:d7:56:d7:7e:3b:af:89:f0:
                    64:1a:5e:dd:68:37:fa:7a:18:f1:ae:56:ab:a9:dc:
                    a9:53:71:a2:10:23:9f:0d:3a:df:bd:07:4d:05:27:
                    a2:15:4f:b5:19:c9:98:22:65:fd:32:b3:54:30:a1:
                    62:66:9a:bc:7f:5f:97:6f:96:72:0b:6d:fd:e9:92:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:31:87:ED:C3:85:14:EB:D9:72:97:DA:53:80:39:FE:90:49:F4
            X509v3 Authority Key Identifier:
                keyid:C3:7E:77:F5:03:6B:C5:E0:07:FA:AD:E8:46:75:73:6E:80:74:78:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-1/0/C37E77F5036BC5E007FAADE84675736E8074789D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3539QNrxeAH-q3oRnVzboB0eJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-1/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:07:33:0c:ac:ef:c1:fa:44:3f:9e:a2:07:2d:fb:8a:1e:
         5e:a0:58:d0:a8:9f:85:bd:46:dd:40:1b:f4:70:65:14:c1:03:
         3b:24:ba:62:9b:39:e3:3a:d2:79:c7:54:8d:aa:3f:06:f5:a9:
         de:79:77:62:48:f0:4f:a1:77:be:b7:a4:a4:6d:f5:93:88:78:
         28:45:43:9e:49:6b:87:95:84:9b:a1:1d:14:88:5c:37:a4:4b:
         78:a2:ba:fe:b3:32:a1:bf:49:fd:45:2a:27:3c:f6:4d:6a:31:
         23:1c:6f:c6:6a:ca:1c:13:94:57:e7:a7:08:01:f7:29:38:2b:
         b4:f1:37:ac:18:f2:da:79:f0:c9:7f:49:44:bb:9d:c4:9e:3b:
         ef:95:81:55:d3:bc:e4:c5:06:51:d6:46:9e:59:35:95:7b:dd:
         f8:0a:6d:84:65:e6:f8:3f:28:e4:af:ff:5f:9d:34:83:bb:57:
         96:40:4d:36:d9:d7:6d:d1:b9:c0:5f:ea:2c:a3:15:5c:94:34:
         ba:07:43:c1:1f:9b:27:7e:c8:52:7a:c0:9e:f1:82:60:f6:19:
         64:f7:67:c6:63:59:f6:42:60:8d:fd:f9:83:26:63:99:e2:e7:
         66:19:e3:3c:f2:33:69:8c:f5:97:96:59:63:37:60:f9:d6:cb:
         7e:08:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----