Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa
File:                     3138312e34312e3139322e302f32302d3234203d3e203631333137.roa (raw, json)
Hash identifier:          CYJULZNLzeo2ck7eIQWJ2PVDfSxhafHN4aUcTJ/HCSE=
Subject key identifier:   A9:74:45:38:EA:F6:11:34:B9:C8:5A:21:55:8D:14:25:EC:37:3E:43
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       14CC72D3EEB8CB745312B2B3B2B3113A3B74C3E7
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        181.41.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:72:d3:ee:b8:cb:74:53:12:b2:b3:b2:b3:11:3a:3b:74:c3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject: CN=3082010A0282010100E661CC6E23B611B61A2B40A790C1D12C611FF22BB405688F5868A93AF20C683724196034BC793CC079873E5F61655E64BD7E1E596112D7A3DB288975D3970F9E2457CE5C5787218CA1E75818D652FEBE3B2D1A91E45D842022B87A71213D359B0FAD10CCAE51536CA16C1B9011A31B7697562A9F8662471AC543C4292FBB37782110D51F143E444B9CF7DB3A5ACC129105F0322EECAB750EC0FE428279CA5D565B0A5E3564AE11D03B1F2306C664BA3F5C87D6EC9F2F1F765C0D8FACE5571729EC3C1F4E5FD5D0E783F419B82869FFB908CA2C8A89F7D370BAADEDF1241CE6543A5023C370AA09AB48362DAEA86CFA6B341BBFBEE2BCDDDB5CBB6D842B795D190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:cc:6e:23:b6:11:b6:1a:2b:40:a7:90:c1:
                    d1:2c:61:1f:f2:2b:b4:05:68:8f:58:68:a9:3a:f2:
                    0c:68:37:24:19:60:34:bc:79:3c:c0:79:87:3e:5f:
                    61:65:5e:64:bd:7e:1e:59:61:12:d7:a3:db:28:89:
                    75:d3:97:0f:9e:24:57:ce:5c:57:87:21:8c:a1:e7:
                    58:18:d6:52:fe:be:3b:2d:1a:91:e4:5d:84:20:22:
                    b8:7a:71:21:3d:35:9b:0f:ad:10:cc:ae:51:53:6c:
                    a1:6c:1b:90:11:a3:1b:76:97:56:2a:9f:86:62:47:
                    1a:c5:43:c4:29:2f:bb:37:78:21:10:d5:1f:14:3e:
                    44:4b:9c:f7:db:3a:5a:cc:12:91:05:f0:32:2e:ec:
                    ab:75:0e:c0:fe:42:82:79:ca:5d:56:5b:0a:5e:35:
                    64:ae:11:d0:3b:1f:23:06:c6:64:ba:3f:5c:87:d6:
                    ec:9f:2f:1f:76:5c:0d:8f:ac:e5:57:17:29:ec:3c:
                    1f:4e:5f:d5:d0:e7:83:f4:19:b8:28:69:ff:b9:08:
                    ca:2c:8a:89:f7:d3:70:ba:ad:ed:f1:24:1c:e6:54:
                    3a:50:23:c3:70:aa:09:ab:48:36:2d:ae:a8:6c:fa:
                    6b:34:1b:bf:be:e2:bc:dd:db:5c:bb:6d:84:2b:79:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:74:45:38:EA:F6:11:34:B9:C8:5A:21:55:8D:14:25:EC:37:3E:43
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139322e302f32302d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:b5:40:67:6a:20:64:f6:22:f1:85:5a:79:c8:d1:43:43:dd:
         0e:76:d0:4b:87:90:72:d7:60:c2:9d:3b:12:35:9d:ee:6c:7d:
         59:2c:78:7c:ce:0b:66:16:3d:2a:6b:26:7c:b4:9f:0c:29:65:
         6a:20:73:df:02:fe:0d:9f:b8:63:77:65:12:3e:ff:c1:fd:36:
         93:71:3f:a4:b4:74:01:1d:09:5f:60:cd:bc:79:31:2c:fa:ba:
         fc:89:5a:b7:75:fd:7e:33:e1:fe:a5:5e:07:21:6a:32:72:12:
         60:d9:82:da:37:b5:f4:d1:6f:82:9a:c3:e7:e3:4f:eb:67:17:
         e2:f1:19:36:8a:f8:c5:30:8c:f2:99:49:2b:a2:ee:4f:64:d1:
         b1:65:87:18:d2:d6:7a:f5:17:70:8a:21:8f:f1:69:ab:1f:56:
         0e:19:be:18:ab:b0:a1:07:57:c7:14:7c:82:25:65:94:09:9e:
         97:70:1c:95:94:0f:60:12:59:9e:3e:e6:15:ba:e4:92:d2:2a:
         3f:a7:28:aa:26:5f:8c:50:e2:0c:14:00:dc:3f:9a:8c:91:5e:
         7b:7e:14:44:7a:2d:c6:4e:8f:aa:ec:32:aa:2d:57:6c:ab:47:
         f8:e3:28:66:be:32:96:4a:2f:46:f1:a6:ed:04:31:f6:ba:b0:
         a0:28:80:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----