Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa
File:                     3138312e34312e3232302e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          U9/u8S4FjE2phtnYhsmdQLBYXy10B9Prz9Oz8Nq0q0Q=
Subject key identifier:   B7:39:42:04:AD:43:E5:1B:48:E9:FE:23:16:34:AD:0D:11:D2:B0:4B
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       50DFDD08805A1AEEE9943032D126291EB3F238AA
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:26 +0000
ROA not before:           Thu 19 May 2022 12:30:26 +0000
ROA not after:            Thu 18 May 2023 12:35:26 +0000
asID:                     61317
IP address blocks:        181.41.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:df:dd:08:80:5a:1a:ee:e9:94:30:32:d1:26:29:1e:b3:f2:38:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:26 2022 GMT
            Not After : May 18 12:35:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:ca:65:63:8e:04:d1:01:5a:e1:d8:b8:67:
                    69:db:64:7f:a3:ae:44:a2:d7:60:35:ce:67:1f:ee:
                    b2:d8:de:58:15:6e:5e:49:6f:57:9d:16:3e:00:2c:
                    bc:af:04:20:f6:d1:92:2a:e6:55:4a:91:49:69:9f:
                    f7:77:1f:1f:03:05:99:58:7a:38:91:82:eb:0e:7c:
                    8b:54:4c:2e:24:1b:40:bf:be:0e:93:5a:6f:16:3e:
                    61:c5:8f:f0:c5:e3:a3:b8:7e:d6:0b:5e:b8:7b:70:
                    e8:1f:49:89:28:03:55:2a:a0:48:a8:23:fd:9f:6a:
                    55:f1:a0:41:f5:7a:e4:cb:cf:7d:09:1d:a2:89:67:
                    eb:bc:89:f5:5a:6c:6c:90:13:10:8c:ce:f0:b7:5b:
                    a6:1d:41:85:e2:1a:59:2e:23:8a:47:20:7e:ae:a3:
                    14:8b:21:2f:14:ba:47:69:26:64:ec:d7:4d:ba:18:
                    ea:a8:76:41:47:a4:95:87:6a:ff:93:ea:2d:4f:69:
                    36:08:4a:be:cd:66:23:b7:26:56:94:00:80:c2:3c:
                    4c:bd:68:80:c2:34:58:7b:a9:c6:87:6a:98:b0:f7:
                    46:03:02:ad:23:46:6f:c2:84:16:56:eb:01:37:7f:
                    e5:83:1f:25:9f:6a:67:7f:f7:cc:e5:83:95:1f:b1:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:42:04:AD:43:E5:1B:48:E9:FE:23:16:34:AD:0D:11:D2:B0:4B
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232302e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:4a:89:22:a8:42:e4:6e:f7:da:0e:e5:4f:ca:50:45:db:
         73:fc:61:d0:1a:5a:39:f1:0d:2e:74:fa:83:fb:09:c5:ee:ba:
         31:2e:f3:8d:27:8a:7c:0e:e0:64:3d:0a:76:30:2f:2d:7f:b5:
         57:0a:1d:13:c0:b1:e0:46:20:87:56:e3:45:75:9a:b1:13:ab:
         c7:21:13:00:3d:65:b6:6a:a3:b5:27:28:58:6c:a5:6d:2b:de:
         8c:5d:60:6e:91:85:34:e4:2a:b9:46:5e:00:87:ec:72:32:86:
         2f:54:9c:cc:b5:ad:4b:fa:2f:c0:d9:3a:3b:6f:42:aa:11:52:
         b5:e1:c9:a6:fe:2f:31:63:f5:28:e9:8f:99:03:df:f5:90:ff:
         e7:37:84:ce:65:c7:68:5e:de:38:fd:a0:1a:2b:98:75:7f:39:
         ef:9a:81:10:cf:a8:56:dd:db:7b:7b:37:e1:b7:3b:70:12:e1:
         d1:46:21:cb:c6:dc:e7:cf:89:0d:48:9c:28:f0:7e:a3:da:5d:
         cd:35:0d:4e:31:a8:f7:48:2f:a2:d8:bb:1c:10:13:f7:bb:2e:
         dd:96:92:31:87:9e:01:f3:06:7c:1b:e7:29:da:52:d4:9c:a9:
         21:e8:14:c0:fe:5c:a3:dc:61:06:91:35:ce:ba:87:24:3a:e7:
         68:61:0b:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----