Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
File:                     323630323a666636323a3a2f33362d3438203d3e203631333137.roa (raw, json)
Hash identifier:          wWbb6ZWWMNM+lqTNBYDNMl3x1D/QpHin/xAO6T4u2Uw=
Subject key identifier:   89:AD:19:71:8A:A0:9C:77:AC:FD:E0:69:D6:E6:70:A5:11:DD:2E:80
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       60C5649DFD84E8F3FC1995D8DABA16ED643E3D6B
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     61317
IP address blocks:        2602:ff62::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:64:9d:fd:84:e8:f3:fc:19:95:d8:da:ba:16:ed:64:3e:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:78:aa:3d:72:fd:75:18:f6:d2:ae:ce:34:
                    46:e9:a7:4f:41:1d:25:fa:ce:c8:a7:02:69:45:e0:
                    80:d8:57:2a:44:5c:fb:3a:7f:5a:7a:a7:44:1a:d9:
                    c8:fa:73:b3:fb:6b:4f:83:29:0f:8a:50:6b:17:19:
                    23:62:82:a8:d5:2b:7b:b7:a8:a1:c2:61:7f:13:69:
                    c9:3b:04:95:18:b0:3d:6b:41:70:25:09:ba:54:20:
                    f9:46:15:47:2e:45:67:9e:0d:da:77:8f:55:dc:d9:
                    0d:31:62:80:3d:16:9e:8a:15:24:2f:3e:a8:05:6c:
                    48:d8:1e:90:fa:00:44:72:14:93:4f:8c:92:0a:9d:
                    24:b6:34:de:42:1a:d9:9f:f3:d5:23:92:f6:6b:26:
                    9b:3d:8d:5b:bc:a5:99:7c:d8:aa:bc:9c:30:f0:34:
                    6f:9c:16:ff:e2:68:37:9b:01:34:b2:b3:a6:a3:d5:
                    81:a8:22:2c:b6:8a:85:46:db:dc:20:4e:34:5f:84:
                    00:68:c9:e0:3a:b4:c3:dc:21:05:d1:82:ed:3a:9a:
                    42:18:5d:53:60:04:ba:e5:75:e8:52:e6:2e:18:2f:
                    3a:07:f8:67:85:41:ad:4f:27:6a:50:17:20:bd:21:
                    c8:e0:66:4c:f8:a8:50:94:4a:e5:22:a2:5d:9c:70:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:19:71:8A:A0:9C:77:AC:FD:E0:69:D6:E6:70:A5:11:DD:2E:80
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:44:ef:25:43:30:5b:9e:88:f7:52:93:53:75:1d:9e:ba:
         f6:d7:dd:57:30:e7:51:d2:80:da:59:36:0f:8f:4d:31:bc:ec:
         52:f5:94:49:4c:e3:45:ec:6c:be:0a:23:e9:78:12:fd:6d:4b:
         25:cb:d6:c0:5c:b6:ed:61:bd:ee:c6:33:df:72:59:08:14:5f:
         ba:47:7a:24:b9:e1:13:61:37:22:4c:bd:17:d2:f2:de:e5:7a:
         ec:8e:a0:e2:04:b6:e6:d2:29:c4:e6:b2:90:f2:eb:3b:3c:56:
         16:27:73:f3:9e:65:f9:3a:fb:ff:14:33:02:8c:35:7b:07:7a:
         8a:ac:58:a9:2f:7d:82:5d:b3:b3:0d:9b:c3:20:a7:80:f7:d7:
         88:17:4b:2a:af:eb:44:2b:80:ee:b8:87:a9:a3:f8:e1:de:ae:
         20:7c:f8:5e:50:11:b0:91:e2:2d:cc:9f:62:cf:be:53:06:85:
         f9:c5:a0:52:d8:48:17:cf:81:18:bd:e0:9b:08:03:d9:10:8c:
         eb:40:15:01:1f:f6:d1:27:45:fa:57:48:51:60:3a:d6:2b:73:
         57:99:d9:09:2a:1d:7c:78:f7:ca:e4:c2:f6:56:f1:79:99:1e:
         15:84:e0:84:8a:24:84:a1:6f:14:fc:0a:f4:11:03:99:35:29:
         6c:0d:f1:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----