Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33362e302f32322d3232203d3e203631333137.roa
File:                     352e34352e33362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          8OkMXOHOsk1jE9tGkIIZpVKfbfsrDq9psFOgp2cWqeE=
Subject key identifier:   A9:8B:64:99:78:89:6E:3A:91:72:45:DA:0F:5A:10:DB:38:F0:DB:3C
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5F6FBBDC402A808C15B5C677BDCF8C9A1AEFD3A4
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33362e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     61317
IP address blocks:        5.45.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6f:bb:dc:40:2a:80:8c:15:b5:c6:77:bd:cf:8c:9a:1a:ef:d3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:96:9a:ee:8b:3a:38:cf:90:b1:0c:52:6d:
                    bb:75:5b:18:cf:b5:a2:56:a0:39:6d:ad:ff:b0:23:
                    0c:ad:66:42:65:cc:bb:ad:9e:fc:51:95:7e:57:c9:
                    43:7b:bb:9e:dc:5a:b6:7a:6b:5d:15:7d:02:4c:51:
                    0b:d6:95:79:af:34:7b:a2:38:d4:97:4f:31:a4:bf:
                    8d:8b:15:4a:fc:3a:6d:68:a8:8f:be:47:bb:44:74:
                    22:8d:36:6a:11:28:5b:73:b7:6b:de:ad:f4:f5:fb:
                    71:d7:e5:f7:87:7f:f6:9e:a4:b3:d7:01:ae:a1:41:
                    f7:d8:aa:d8:85:1d:4b:69:e9:67:ac:2a:09:a1:77:
                    64:15:c3:1a:ac:c0:ab:6e:c0:99:5b:af:89:cb:fe:
                    56:51:67:3e:fb:8a:90:09:89:a8:c8:29:38:ed:dc:
                    f3:2f:35:5c:8e:ba:ea:b7:0f:d3:03:f8:b4:d8:ec:
                    dc:1d:72:a4:54:df:33:c0:a7:cb:dd:23:6d:66:32:
                    87:3e:73:64:7a:42:ba:e1:5d:00:8f:f2:ad:d1:c2:
                    b6:0e:83:6e:b8:41:d2:c6:23:69:75:f2:8e:18:90:
                    ba:4c:dd:82:21:e1:25:49:59:ce:1d:65:ae:0a:b1:
                    41:f1:9b:7c:6a:a0:b4:85:62:c4:71:46:5f:4c:6a:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:64:99:78:89:6E:3A:91:72:45:DA:0F:5A:10:DB:38:F0:DB:3C
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:8d:da:ea:16:dc:35:ae:3a:eb:28:ec:9f:83:2a:b5:e5:0a:
         b2:a2:d4:7f:89:1b:76:44:c0:d1:cd:08:11:f5:40:10:52:c5:
         9d:8f:c7:04:ad:a5:69:0c:e2:4e:7c:8f:2b:53:af:87:ea:c9:
         6d:9a:a8:96:14:7e:95:7c:db:bb:09:06:ad:48:e7:46:0b:a2:
         5d:4d:f5:9d:88:d0:90:05:9d:f4:52:56:32:3c:fe:14:2b:1c:
         83:b8:48:5d:47:de:88:e1:51:fd:76:40:af:de:d5:2a:c0:9f:
         1c:91:d1:20:4c:cf:2f:a1:4a:d3:9d:81:24:84:fe:90:75:b2:
         1a:04:e7:2e:2d:e2:85:06:dd:d2:24:05:c7:22:1c:4e:75:ea:
         31:19:54:57:e6:45:dd:f0:fc:82:f7:3b:d6:c3:e3:73:12:d3:
         f5:95:1f:46:3c:d0:d5:ea:1c:08:77:17:2e:76:c4:67:5e:e2:
         af:a2:5b:7e:d3:26:74:89:84:e3:68:58:dc:77:bd:fc:e0:cc:
         c0:f4:ae:2c:bb:65:b8:a8:5d:cc:34:61:83:81:ed:80:04:04:
         0f:56:1f:a1:0c:2a:01:c6:67:51:61:f6:3f:af:0e:25:78:9d:
         6d:6c:f3:a8:dc:43:42:50:7d:1b:95:33:9f:79:1d:a0:4f:37:
         55:5b:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----