Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa
File:                     3138312e34312e3232322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          PW+HH9JWYQ+F/C8YYKBE8qqfRom7S9MUy+efWgZhxtU=
Subject key identifier:   0B:BE:1C:BA:C6:2E:E9:62:42:8D:FA:72:EA:C0:C9:D5:91:39:45:E8
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       23DDEF7454F211F2762AB93363C7AC20B73268C4
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     61317
IP address blocks:        181.41.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:ef:74:54:f2:11:f2:76:2a:b9:33:63:c7:ac:20:b7:32:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject: CN=3082010A0282010100C436BFB8D6EFE48E77027AC3B5F2E741CF2B4D3884CA96064CF6B553496B6B275E96C18099FFEF01349721DE6815D37578F7CD0F4ADAD506EC572618211C9A9D8C798084DE726BAFD7BD82A54909135F2010BDD4CB7AFA24B2746EC4B04DC9E341E5C598F2FAE5701B1EF2BF0079A9C3AF9DFFAEE692F374365D8CA53CA58B776A64B2120F5AE65121D7248FDED2CB1C6194CA65BBF28E6E3BA3965AAAA303EF78A1B4D8FA7A02B83540C36CD140A843670759016C1FC29C111BDBE1370ED5339F6206F5CE08A7F63AB16CB850777D1D95F05F6401B565D56A3772DD5A05B83A4884DB6826FDE7FDBA2FE9DCCECC475F0CB70F7F6C71D1E278594CEA628568930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:bf:b8:d6:ef:e4:8e:77:02:7a:c3:b5:f2:
                    e7:41:cf:2b:4d:38:84:ca:96:06:4c:f6:b5:53:49:
                    6b:6b:27:5e:96:c1:80:99:ff:ef:01:34:97:21:de:
                    68:15:d3:75:78:f7:cd:0f:4a:da:d5:06:ec:57:26:
                    18:21:1c:9a:9d:8c:79:80:84:de:72:6b:af:d7:bd:
                    82:a5:49:09:13:5f:20:10:bd:d4:cb:7a:fa:24:b2:
                    74:6e:c4:b0:4d:c9:e3:41:e5:c5:98:f2:fa:e5:70:
                    1b:1e:f2:bf:00:79:a9:c3:af:9d:ff:ae:e6:92:f3:
                    74:36:5d:8c:a5:3c:a5:8b:77:6a:64:b2:12:0f:5a:
                    e6:51:21:d7:24:8f:de:d2:cb:1c:61:94:ca:65:bb:
                    f2:8e:6e:3b:a3:96:5a:aa:a3:03:ef:78:a1:b4:d8:
                    fa:7a:02:b8:35:40:c3:6c:d1:40:a8:43:67:07:59:
                    01:6c:1f:c2:9c:11:1b:db:e1:37:0e:d5:33:9f:62:
                    06:f5:ce:08:a7:f6:3a:b1:6c:b8:50:77:7d:1d:95:
                    f0:5f:64:01:b5:65:d5:6a:37:72:dd:5a:05:b8:3a:
                    48:84:db:68:26:fd:e7:fd:ba:2f:e9:dc:ce:cc:47:
                    5f:0c:b7:0f:7f:6c:71:d1:e2:78:59:4c:ea:62:85:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BE:1C:BA:C6:2E:E9:62:42:8D:FA:72:EA:C0:C9:D5:91:39:45:E8
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:a3:cc:a2:66:a5:9c:c8:51:54:9d:04:99:9f:bf:f9:12:
         c1:67:21:61:f1:56:a5:b3:ce:ff:d3:12:17:77:9d:62:46:5f:
         a2:69:96:26:97:e5:b8:99:70:dd:3a:1a:14:17:31:b3:1f:0b:
         0a:43:ee:d0:91:d8:ed:57:05:76:13:c7:ff:4c:86:11:03:c5:
         32:a1:87:bf:41:f4:f8:16:14:32:86:87:fb:99:15:cd:1f:e4:
         ed:0f:b4:9e:d3:86:3e:85:99:82:2a:ce:cf:79:40:0a:6b:6e:
         e0:56:38:8f:44:65:8b:a5:20:f4:c4:45:dc:30:c7:40:4e:fd:
         3f:ec:64:09:44:1d:97:d0:c4:1d:7f:fe:f1:1a:fc:ee:1f:82:
         d6:d3:c7:b8:85:8f:ae:10:ac:23:6f:20:c1:69:e1:1f:c9:f7:
         cc:76:19:37:dd:27:6f:96:3b:0a:51:d7:d5:a0:ce:bf:8d:cd:
         07:20:45:02:a2:47:2e:64:8d:68:89:c0:cd:6b:4e:88:b9:44:
         a2:64:36:42:d1:0c:4a:43:48:25:a6:79:9a:3b:84:7b:c6:49:
         13:85:fd:ba:44:24:89:90:44:7f:c8:1d:00:89:ed:1e:11:39:
         6e:65:6c:a8:da:86:5e:23:48:8c:b5:03:f1:3d:9f:b3:bb:98:
         29:1e:bf:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----