Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33372e302f32342d3234203d3e203631333137.roa
File:                     352e34352e33372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          5UkbTrEyz7Kt8Jemua8GByLsd/eXqO5PbqMsMpvG5I4=
Subject key identifier:   95:85:00:C3:16:B4:81:AB:E8:A0:39:6E:F7:33:89:08:E1:74:42:61
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       128644498B7B4B177C1BD00A4D9A4B147333BB9D
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 26 May 2022 14:40:51 +0000
ROA not before:           Thu 26 May 2022 14:35:51 +0000
ROA not after:            Thu 25 May 2023 14:40:51 +0000
asID:                     61317
IP address blocks:        5.45.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:86:44:49:8b:7b:4b:17:7c:1b:d0:0a:4d:9a:4b:14:73:33:bb:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 26 14:35:51 2022 GMT
            Not After : May 25 14:40:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:e7:0e:78:b4:55:da:0e:37:ee:b5:77:b2:
                    c4:ea:ba:69:04:96:68:ec:91:a6:e9:51:17:fa:84:
                    c0:fa:02:d3:2a:1e:62:a3:5c:57:e0:fa:a9:a1:aa:
                    64:d3:1e:04:03:e1:0b:0f:60:80:e2:18:d7:0d:89:
                    60:5d:af:26:be:63:fa:b1:ff:f1:8f:82:91:7f:ef:
                    48:65:ef:95:57:4e:71:19:8d:f9:2f:00:44:fa:52:
                    55:d7:30:a3:61:82:04:67:87:da:ce:74:a1:3d:b9:
                    7d:6e:7f:01:74:9a:da:9d:5f:b5:f3:b9:d9:a3:0a:
                    b3:3a:d1:86:db:f2:fa:75:50:77:b9:16:e2:fc:5c:
                    0a:53:99:9d:05:b5:d5:e7:8b:72:70:20:21:c8:fb:
                    4b:e6:58:09:31:1f:8f:f8:13:b7:0d:5d:60:e4:50:
                    0c:c1:61:d9:0b:b7:11:b2:80:20:07:00:0b:e3:7b:
                    4e:ac:08:19:64:5a:1b:f1:03:76:25:f7:6d:51:9e:
                    07:59:13:3d:9d:9e:32:4f:a1:b1:59:ce:09:b1:76:
                    2b:38:94:e5:d3:34:fe:e0:78:b7:28:52:6b:9a:93:
                    91:92:80:81:4d:2d:5a:48:e4:ea:07:ba:9f:d1:32:
                    5b:43:54:05:ba:d2:fa:96:20:a2:84:18:1b:18:35:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:00:C3:16:B4:81:AB:E8:A0:39:6E:F7:33:89:08:E1:74:42:61
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:12:95:e0:80:b8:5e:c0:58:b8:d1:59:68:d8:3d:3a:ee:
         b7:9a:e9:80:e8:07:6b:6b:40:23:dc:7c:9d:16:f8:f5:5a:d7:
         4e:a8:ab:24:f9:71:e3:17:f3:59:32:62:0c:cb:6a:ed:7b:8c:
         af:72:26:1b:1e:c0:fa:14:a5:25:b5:2e:93:f4:90:aa:fb:c0:
         a5:16:5f:b6:f5:bf:d8:59:bf:28:20:5d:09:39:59:73:ea:27:
         c6:27:1f:00:9d:de:d1:bf:24:9c:ad:96:05:31:6c:e3:38:0b:
         b5:4b:84:87:70:79:67:c6:d2:9f:f3:fd:ec:67:12:20:36:b8:
         7f:4d:6d:99:7b:c6:f5:69:f0:60:55:9f:30:54:5f:62:56:fd:
         36:63:d0:a3:e1:f1:a2:85:0c:58:fc:fd:45:de:43:5a:7d:d7:
         01:f6:6e:b1:09:36:bf:a2:53:6e:5f:d4:88:ff:95:2b:6d:31:
         a0:a0:64:2c:a2:42:57:15:22:68:ce:ef:45:d8:35:e5:2c:14:
         ac:ab:fa:f6:bd:26:f4:df:7e:e2:56:5c:38:a8:07:ee:ef:da:
         47:bd:3d:36:ce:9b:54:45:85:4e:5f:db:72:9d:f2:4b:5b:a7:
         d9:b6:2d:48:cb:cc:82:ec:b8:bb:f1:ec:0b:df:aa:32:5b:ac:
         6e:98:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----