Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
File:                     323630323a666636323a3a2f33362d3438203d3e203631333137.roa (raw, json)
Hash identifier:          lnsmVfritkeU0WsRlFgkqCFoJBSCX1Q0g1af/WYpcqE=
Subject key identifier:   1E:AF:90:DD:1C:CF:FC:74:D6:1E:A3:26:CA:3C:22:A5:55:1D:9A:DB
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       2A415D425BB42D88D046F10B7EA878A6B3971F3D
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:31:42 +0000
ROA not before:           Mon 25 Oct 2021 08:26:42 +0000
ROA not after:            Mon 24 Oct 2022 08:31:42 +0000
asID:                     61317
IP address blocks:        2602:ff62::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:41:5d:42:5b:b4:2d:88:d0:46:f1:0b:7e:a8:78:a6:b3:97:1f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:42 2021 GMT
            Not After : Oct 24 08:31:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:71:60:25:57:eb:80:a3:36:13:c8:d7:89:04:
                    75:fe:e9:49:8d:20:f8:dc:bc:b1:a9:a1:dd:b1:b9:
                    d9:19:0f:65:06:71:0a:bd:1f:e2:6b:53:c8:f9:9c:
                    6e:81:63:77:02:91:e4:89:46:61:c3:ae:4e:ab:b8:
                    77:2f:d9:a6:ba:83:2b:1f:a2:65:e1:8a:42:38:be:
                    83:60:0c:bc:e2:81:6a:ba:e6:9a:b0:66:7e:91:1b:
                    b9:a0:3b:32:29:05:c1:81:75:ad:bc:c8:6d:78:1b:
                    b1:8b:8d:2d:e0:41:14:bc:ba:32:d6:59:2a:a2:b5:
                    c9:b5:b6:95:1f:fe:01:b8:47:e6:a6:c5:f1:aa:4b:
                    b7:b3:f2:95:c1:37:de:8a:0b:70:89:13:75:b2:b7:
                    4a:c4:06:6d:db:7c:30:a8:35:a8:0f:14:ad:48:93:
                    1e:e7:1f:b9:cd:7b:cd:5c:2c:eb:10:07:1a:22:6b:
                    ae:b2:2c:fc:5c:63:c9:be:65:24:b6:ac:89:1a:1e:
                    e2:f1:67:1f:69:62:cb:b0:fb:23:02:b8:55:4e:d9:
                    7c:85:d3:1b:8d:cc:05:f3:f2:f6:ee:f3:ee:72:95:
                    cf:89:a2:0f:2c:1c:8d:de:93:8f:b6:a4:46:1c:63:
                    0b:fb:b7:a2:9c:96:cd:ab:c2:ef:e1:70:22:e6:cd:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AF:90:DD:1C:CF:FC:74:D6:1E:A3:26:CA:3C:22:A5:55:1D:9A:DB
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/323630323a666636323a3a2f33362d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:8c:90:91:38:2c:02:5e:56:60:b9:97:4e:1b:f8:c5:e4:
         37:26:4a:84:a8:39:3d:dd:0c:74:06:89:8f:8a:29:c1:00:be:
         0b:33:05:72:55:03:26:93:11:f5:27:de:9e:29:b5:c2:82:34:
         1d:b6:d9:46:a4:0a:21:ea:47:99:a4:76:23:17:43:a8:66:5b:
         c8:7e:f6:42:ad:12:d6:84:62:a5:80:44:26:a6:8e:18:02:a6:
         62:ea:bd:ae:22:1b:71:48:6b:5d:62:25:13:fd:3b:f4:81:8f:
         36:b1:d7:4e:43:31:58:4f:76:3e:bc:7b:7b:78:89:e4:90:af:
         86:65:94:79:b0:78:ea:cf:c6:65:fd:4c:ef:0d:70:16:4d:e6:
         57:e7:cd:16:50:58:cf:64:1c:06:c6:b2:57:a1:4f:26:3c:6c:
         dd:da:b4:3b:08:ee:ef:11:48:de:a1:5d:fe:68:de:d7:c3:af:
         f7:ea:76:f2:df:63:a7:91:1d:1a:e8:0b:b0:b2:52:4d:15:c7:
         f3:60:e2:7c:21:76:57:08:28:ab:2c:17:fa:39:24:6b:1e:5b:
         f3:0f:b7:14:0d:9d:5d:96:92:26:13:af:fc:7e:41:c4:b5:cb:
         34:b5:e7:05:37:29:a9:36:ac:82:fe:9a:24:62:60:41:cf:d1:
         e0:bb:73:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----