Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa
File:                     3138312e34312e3232322e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier:          TCN6rtlXPIHFlab6q5tw3qb2ljHtz9JHAC++IehBA9Y=
Subject key identifier:   EF:AF:0A:1B:C8:2E:73:DA:F4:2F:C5:27:C5:9D:D0:DD:28:13:69:F8
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       5F7685F78D4BB62FC63689B0C1C3B02B6E122749
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     61317
IP address blocks:        181.41.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:85:f7:8d:4b:b6:2f:c6:36:89:b0:c1:c3:b0:2b:6e:12:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:bd:0d:c2:34:b5:2c:2a:6f:1d:2c:9d:bb:
                    08:70:86:d7:5d:88:62:92:9b:02:05:06:52:0e:df:
                    09:d3:2c:df:70:33:c2:92:4b:33:87:62:11:a8:27:
                    c4:65:58:fc:ce:4a:47:43:9a:a6:a5:46:0d:fa:a0:
                    d3:97:0c:cc:63:72:58:3f:11:6f:60:e2:33:f2:90:
                    1e:e9:e7:43:e6:cc:ee:d3:92:5d:12:d5:bc:d2:bb:
                    c9:af:05:d8:45:2a:85:7e:8e:b0:07:7e:2e:ef:26:
                    ab:8c:27:94:af:28:08:31:06:61:e0:39:fe:a8:9c:
                    56:ec:5d:97:6d:19:7e:00:8c:a2:7d:83:e1:37:ef:
                    84:86:79:ef:30:5a:36:7f:ca:3b:54:d8:2a:b6:3c:
                    92:41:cf:bd:e9:bb:54:b8:8f:67:a6:0a:44:d1:b5:
                    af:72:e1:da:b4:ef:bf:fd:ce:7d:8a:69:ec:b4:c1:
                    6d:a1:b5:09:e7:90:5c:63:7a:74:80:fd:47:b2:4d:
                    93:9f:1a:7a:aa:79:54:ee:e4:fe:2b:ed:8e:ad:6c:
                    0d:b5:69:47:7c:e2:43:06:a2:58:77:1d:fa:8b:eb:
                    39:81:70:c8:3f:11:66:80:20:c0:8c:67:bf:eb:89:
                    e8:8b:4c:95:61:ab:be:20:ef:8d:33:9c:81:1a:71:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:0A:1B:C8:2E:73:DA:F4:2F:C5:27:C5:9D:D0:DD:28:13:69:F8
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3232322e302f32332d3233203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:3b:90:09:0d:fc:42:7d:6d:6d:ac:df:46:8c:ed:6d:14:
         f5:10:58:ae:27:bc:56:bc:d8:4b:35:ae:8c:f6:5f:79:76:d4:
         bb:61:c3:23:c0:0c:bd:67:dd:32:75:fb:54:fa:08:ef:0c:34:
         01:2c:56:2c:5d:2f:51:b8:fd:75:82:ca:66:62:2f:2d:b5:9d:
         3f:62:64:ab:39:89:ed:42:3e:85:05:d8:1b:7b:cd:f3:f7:c5:
         af:3c:d3:b1:66:97:b8:28:4a:9a:f1:b5:ae:4f:5e:f1:b9:5b:
         b7:3e:b8:b9:f9:6e:ba:33:17:50:30:09:0d:92:b8:f4:c0:7b:
         35:d8:88:77:cd:d0:34:c5:94:9b:ae:1a:ee:83:c3:54:92:44:
         a3:cd:10:0f:89:ae:0a:a9:a5:ab:b5:0d:d2:a3:9e:4f:87:c8:
         01:4c:e4:1d:7e:79:89:c0:93:fd:48:0d:8f:f8:c6:bc:2a:94:
         b5:aa:c3:ac:df:e7:b4:03:29:ba:68:c5:68:88:28:61:e9:46:
         d1:e9:16:34:ae:69:8c:f1:db:ef:fc:ae:83:d5:e1:71:8a:96:
         9e:24:08:3c:2b:ba:4c:b7:b9:36:b6:d9:c9:99:ab:a3:bf:45:
         05:a8:53:62:5e:99:41:7d:c8:54:10:75:ce:44:76:c7:3f:5b:
         db:60:dd:6b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUX3aF941Lti/GNomwwcOwK24SJ0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjVaFw0yMzA1MTgxMjM1MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTgyRUJEMERDMjM0QjUyQzJB
NkYxRDJDOURCQjA4NzA4NkQ3NUQ4ODYyOTI5QjAyMDUwNjUyMEVERjA5RDMyQ0RG
NzAzM0MyOTI0QjMzODc2MjExQTgyN0M0NjU1OEZDQ0U0QTQ3NDM5QUE2QTU0NjBE
RkFBMEQzOTcwQ0NDNjM3MjU4M0YxMTZGNjBFMjMzRjI5MDFFRTlFNzQzRTZDQ0VF
RDM5MjVEMTJENUJDRDJCQkM5QUYwNUQ4NDUyQTg1N0U4RUIwMDc3RTJFRUYyNkFC
OEMyNzk0QUYyODA4MzEwNjYxRTAzOUZFQTg5QzU2RUM1RDk3NkQxOTdFMDA4Q0Ey
N0Q4M0UxMzdFRjg0ODY3OUVGMzA1QTM2N0ZDQTNCNTREODJBQjYzQzkyNDFDRkJE
RTlCQjU0Qjg4RjY3QTYwQTQ0RDFCNUFGNzJFMURBQjRFRkJGRkRDRTdEOEE2OUVD
QjRDMTZEQTFCNTA5RTc5MDVDNjM3QTc0ODBGRDQ3QjI0RDkzOUYxQTdBQUE3OTU0
RUVFNEZFMkJFRDhFQUQ2QzBEQjU2OTQ3N0NFMjQzMDZBMjU4NzcxREZBOEJFQjM5
ODE3MEM4M0YxMTY2ODAyMEMwOEM2N0JGRUI4OUU4OEI0Qzk1NjFBQkJFMjBFRjhE
MzM5QzgxMUE3MThGNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqC69DcI0tSwqbx0snbsIcIbXXYhikpsCBQZSDt8J0yzfcDPCkksz
h2IRqCfEZVj8zkpHQ5qmpUYN+qDTlwzMY3JYPxFvYOIz8pAe6edD5szu05JdEtW8
0rvJrwXYRSqFfo6wB34u7yarjCeUrygIMQZh4Dn+qJxW7F2XbRl+AIyifYPhN++E
hnnvMFo2f8o7VNgqtjySQc+96btUuI9npgpE0bWvcuHatO+//c59imnstMFtobUJ
55BcY3p0gP1Hsk2Tnxp6qnlU7uT+K+2OrWwNtWlHfOJDBqJYdx36i+s5gXDIPxFm
gCDAjGe/64noi0yVYau+IO+NM5yBGnGPYQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FO+vChvILnPa9C/FJ8Wd0N0oE2n4MB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzEyZTM0
MzEyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAG1Kd4wDQYJKoZIhvcNAQELBQADggEBAG9TO5AJDfxCfW1trN9GjO1t
FPUQWK4nvFa82Es1roz2X3l21LthwyPADL1n3TJ1+1T6CO8MNAEsVixdL1G4/XWC
ymZiLy21nT9iZKs5ie1CPoUF2Bt7zfP3xa8807Fml7goSprxta5PXvG5W7c+uLn5
brozF1AwCQ2SuPTAezXYiHfN0DTFlJuuGu6Dw1SSRKPNEA+Jrgqppau1DdKjnk+H
yAFM5B1+eYnAk/1IDY/4xrwqlLWqw6zf57QDKbpoxWiIKGHpRtHpFjSuaYzx2+/8
roPV4XGKlp4kCDwruky3uTa22cmZq6O/RQWoU2JemUF9yFQQdc5Edsc/W9tg3Ws=
-----END CERTIFICATE-----