Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
File:                     3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          l41FcIqktbLTl7fejGYvPdhlAw9O7LmyjUK6Awj2rA8=
Subject key identifier:   F1:07:30:45:5D:56:D8:8E:EE:7A:03:5B:3A:6A:E4:43:C5:AD:9C:8E
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       0298BDF351B67849F187116D6EE413BF7E4EFAD8
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        185.135.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:bd:f3:51:b6:78:49:f1:87:11:6d:6e:e4:13:bf:7e:4e:fa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:d3:66:4b:bc:53:4c:c3:c1:00:69:98:b4:
                    0d:f1:ad:c2:6c:0d:84:d6:6b:78:c5:4a:af:ea:1f:
                    d7:22:00:45:e5:c4:be:c2:45:e2:71:b7:02:f5:50:
                    e7:88:13:65:1d:47:c8:c0:63:f4:f5:b8:1f:09:dc:
                    13:7c:22:f0:99:01:1e:e0:47:12:14:46:1d:5b:21:
                    ce:fb:7a:5e:b8:61:81:8c:53:94:6b:ee:24:d7:66:
                    b5:3c:0f:c1:eb:0a:2a:c5:b6:6d:9c:b9:f0:4a:73:
                    3a:e3:ab:67:b2:25:3e:cd:ba:0b:20:e5:d1:89:0d:
                    56:c0:9a:af:8f:3f:76:48:88:1f:27:75:07:ee:d0:
                    8f:5e:d2:61:38:3b:f7:76:35:ba:8f:80:49:3e:24:
                    66:2c:11:ea:6c:46:1d:db:5c:e7:7e:14:5b:ec:fb:
                    72:6a:5e:b8:dd:8e:05:2f:d8:8d:34:08:ee:6c:82:
                    44:16:28:dc:a3:65:9a:f3:91:e9:30:77:bf:53:86:
                    54:12:bf:d8:6b:72:6f:ab:c8:f0:63:51:38:18:36:
                    b7:ed:68:2e:78:95:19:ed:da:6f:96:43:28:89:9f:
                    14:83:f4:7f:24:68:50:c3:77:d2:f5:16:49:6f:d5:
                    80:55:ac:3b:a7:97:6a:86:a2:cf:43:56:ca:e1:6a:
                    6c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:07:30:45:5D:56:D8:8E:EE:7A:03:5B:3A:6A:E4:43:C5:AD:9C:8E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0a:ee:2c:3c:c7:02:c8:1b:53:70:6d:21:85:d3:16:97:ed:
         40:2b:06:91:87:a7:9b:c2:dd:da:05:ee:b0:39:47:24:fc:05:
         7f:77:55:b0:9c:e3:43:df:52:f1:ce:2f:35:41:2c:70:a4:e0:
         7c:4c:a4:3a:cc:14:b3:a6:67:8e:e3:44:92:b9:1b:9c:7c:58:
         a3:90:39:99:a4:2d:70:f9:b2:3d:af:29:4e:de:45:06:cf:6a:
         b3:d2:62:a3:d8:fa:ac:18:64:ae:da:f4:d7:e4:d7:e7:01:d9:
         de:dc:35:d9:9e:d7:fb:75:a1:1e:d3:27:8a:b5:cc:ec:36:c3:
         a4:0f:95:e7:ef:d8:ce:12:93:0a:db:95:ee:cd:bf:a6:0e:70:
         61:89:a1:98:44:fc:6b:9a:48:89:5a:21:65:4a:4f:5b:e6:6f:
         bf:3e:fb:ea:9a:62:e9:fb:47:80:22:fd:4f:de:0a:26:ee:3a:
         5e:e9:76:51:a6:c5:65:b9:0d:09:35:b5:5e:53:28:ce:db:4e:
         c1:8a:34:49:e7:b1:c2:bb:00:85:0d:ed:f1:bf:93:4f:6b:ad:
         f5:31:73:5b:d1:61:05:8e:b5:a0:e7:01:46:eb:14:e8:67:32:
         b7:b9:42:a2:5b:ea:68:23:4a:32:70:fc:de:9e:c1:4b:d2:e7:
         59:fb:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----