Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa
File:                     3138312e34312e3139342e302f32332d3233203d3e203630363032.roa (raw, json)
Hash identifier:          IQtWuaizR07HzFm/kTPra/5oTwECUXCRoEYZkEA9q7c=
Subject key identifier:   D6:ED:8D:3A:4E:7B:62:C8:67:86:A7:E4:19:83:FB:96:DA:FD:65:57
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       1F3D4E497D43637494C168A84C40A9412EB65879
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     60602
IP address blocks:        181.41.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3d:4e:49:7d:43:63:74:94:c1:68:a8:4c:40:a9:41:2e:b6:58:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4c:8b:eb:25:54:29:a4:7b:38:0f:14:64:b6:
                    81:b4:46:37:54:a6:c7:43:5f:b4:c3:a3:8a:1b:69:
                    aa:fe:87:df:70:a7:51:8c:ac:07:64:38:45:13:12:
                    07:d5:92:e3:b4:83:2f:e3:b5:af:13:0f:8b:8c:04:
                    e9:6b:93:ec:dd:e8:d3:0f:0e:3f:92:7b:66:0e:3a:
                    48:b7:0c:a7:f4:7b:4a:90:32:d0:36:87:89:2a:eb:
                    ce:b5:7d:e5:04:fd:dc:89:bf:ee:38:31:f1:f4:cf:
                    62:54:2e:52:88:94:ae:13:d1:fe:10:19:62:99:13:
                    e3:f1:d8:b5:44:db:7a:04:4f:1c:59:cb:7c:d4:0c:
                    e4:52:87:88:86:38:c9:e1:65:52:c8:40:91:15:0b:
                    e3:e6:89:74:a7:ae:73:d7:97:d6:f9:d4:1f:c8:62:
                    a6:ec:77:76:08:1e:ce:8d:5c:d8:74:6f:4d:85:0c:
                    92:9a:57:d5:ea:aa:f2:25:2b:bc:ce:38:ac:05:4f:
                    d7:0e:64:0a:d8:ed:78:bc:ac:94:f1:cc:72:f0:7d:
                    00:e7:5f:5a:00:ac:ff:42:37:fd:ba:70:7e:c2:8f:
                    c5:19:a3:22:aa:ca:28:33:af:73:88:e3:17:c6:22:
                    30:9c:1a:5b:b7:bb:84:a1:36:ea:ec:86:b1:07:1c:
                    11:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:ED:8D:3A:4E:7B:62:C8:67:86:A7:E4:19:83:FB:96:DA:FD:65:57
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3139342e302f32332d3233203d3e203630363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:01:f4:fe:e5:c3:dd:df:39:af:27:5e:d5:b9:fe:15:e4:d8:
         a2:9a:73:fb:76:1a:cf:df:db:54:6e:b1:b4:54:fb:7a:76:31:
         72:df:e2:cd:9c:88:bd:5b:ea:fd:0a:66:0c:c0:5e:26:63:2d:
         e6:46:10:df:ab:78:94:2a:f8:f3:c2:97:3d:2c:62:ea:a6:3f:
         72:76:8b:0d:b1:52:ba:b2:49:4d:d7:60:aa:a4:d6:aa:d4:82:
         29:e5:de:0f:91:14:5f:a0:07:42:b0:9f:6f:4d:3c:f6:72:b2:
         a4:86:e5:33:5f:ff:0d:45:d1:2c:a9:2c:72:be:c7:24:62:5b:
         66:a8:7c:92:8f:ea:5d:f1:95:ad:5a:bc:14:b7:50:18:64:2f:
         01:55:38:75:16:f2:e2:a8:c5:74:96:c3:60:26:63:1e:58:52:
         27:a5:d7:33:8d:65:13:c2:1d:f2:24:81:2e:25:e0:30:ae:70:
         b2:5d:a4:36:38:d4:59:4a:09:93:86:f6:88:02:a6:52:6b:2f:
         44:2a:18:b8:3d:ae:d6:cd:2b:80:ff:0e:a4:15:a0:16:6d:10:
         6b:49:9b:72:6e:74:e6:db:72:a2:d8:b0:e7:81:fa:87:92:eb:
         44:5f:8f:87:45:06:19:51:1a:65:dd:80:64:52:77:9b:78:43:
         57:ea:15:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----