Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131382e302f32342d3234203d3e203631333137.roa
File:                     34352e3135362e3131382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ha/GKqVNy/FGb8GFncyzn62Q7lzq/g6OR/v7tW4M9B4=
Subject key identifier:   4B:A8:20:7E:89:97:70:CF:4C:FC:9C:2D:FF:3A:CF:17:F9:B2:44:98
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       284990629AD09E606A2E91A0997E710DF0A044DB
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131382e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Oct 2022 06:35:20 +0000
ROA not before:           Fri 21 Oct 2022 06:30:20 +0000
ROA not after:            Fri 20 Oct 2023 06:35:20 +0000
asID:                     61317
IP address blocks:        45.156.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:49:90:62:9a:d0:9e:60:6a:2e:91:a0:99:7e:71:0d:f0:a0:44:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Oct 21 06:30:20 2022 GMT
            Not After : Oct 20 06:35:20 2023 GMT
        Subject: CN=4BA8207E899770CF4CFC9C2DFF3ACF17F9B24498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:d4:1e:2f:28:10:65:2f:c9:d6:bd:c8:87:
                    c5:42:d0:2b:6b:be:5c:ea:bc:ee:06:48:cc:54:0e:
                    3f:31:ee:49:03:4d:07:18:02:fc:1a:38:47:01:9c:
                    b8:61:a9:ae:dd:06:bb:e4:0a:00:02:ff:92:6f:ba:
                    a3:e7:96:55:fa:53:12:90:69:ba:40:5f:b4:39:9b:
                    5d:10:58:64:70:95:d7:97:54:41:8d:a4:a7:d4:6c:
                    08:87:b8:81:de:dd:d5:93:b2:58:9c:81:4d:a9:fc:
                    81:b9:b7:c3:5f:94:8c:ee:5d:2e:fe:ab:16:73:9f:
                    99:52:55:df:95:7a:b5:ea:59:45:7d:90:5b:f3:17:
                    be:53:4f:8d:64:3c:eb:45:f5:1b:db:2f:fe:42:b2:
                    da:ca:c3:20:5b:af:01:40:ad:36:48:81:a3:55:42:
                    00:5f:e9:7b:c4:df:2e:33:fa:f2:31:fd:83:79:d9:
                    ec:48:1e:3a:83:67:8f:6f:13:f0:2c:c7:43:96:f1:
                    69:1c:77:a3:d1:9c:78:35:23:4a:6d:c3:3d:67:fb:
                    3c:94:48:1f:f0:20:7d:be:3d:70:71:fd:a1:97:1a:
                    93:b2:1b:5c:b4:ba:f7:c5:ad:b1:aa:28:59:21:f0:
                    8d:ac:b8:8a:db:fc:2d:0e:06:76:c7:d0:32:c1:6f:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A8:20:7E:89:97:70:CF:4C:FC:9C:2D:FF:3A:CF:17:F9:B2:44:98
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ee:61:fc:60:ed:80:5b:f1:ec:ae:41:6b:71:51:a9:9a:b7:
         80:91:22:ff:52:9e:4a:69:55:7c:2c:29:79:64:69:de:86:ad:
         a8:61:e4:3d:0e:66:10:f1:45:cc:28:21:66:c7:1a:b7:34:8e:
         a9:99:ff:d5:bf:93:8b:75:19:08:11:5a:e8:a6:4a:7d:0a:9c:
         cd:d0:0c:02:a9:6a:7c:11:6e:1c:85:e9:67:e5:b3:8b:b7:3d:
         4a:29:58:1c:7d:08:0d:e2:36:b3:3e:4e:5e:99:9b:73:fd:8e:
         32:fc:82:37:2a:8a:a4:ef:d5:5f:a8:cb:91:a4:ff:83:cf:bc:
         2e:98:8b:fb:6d:f5:e6:53:43:06:4c:4b:85:35:54:e3:67:56:
         a8:2a:a0:03:c9:14:be:db:01:d0:0c:b7:11:ab:2d:dd:a9:aa:
         60:4d:d3:3a:44:75:8e:83:e2:57:e8:fe:de:8d:81:ab:b7:09:
         9a:93:a5:31:4e:38:74:2b:c0:66:03:2e:a4:b4:50:55:e4:af:
         8c:73:5c:19:31:22:73:dd:34:02:c1:88:6d:e1:da:a0:b2:c4:
         69:e4:a8:a8:94:49:65:a9:ac:d4:36:0e:53:13:c6:20:c6:50:
         f8:b0:b6:05:b7:ec:6d:3e:4e:75:6d:7f:cb:79:99:11:2b:7b:
         ce:c0:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----