Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13627.roa
File:                     AS13627.roa (raw, json)
Hash identifier:          jBdXTqCKcOFWFI4ueCk5XHLMQ+jwW+CMY4QB78mIM9M=
Subject key identifier:   E9:87:AC:5F:62:97:31:45:59:DD:40:68:50:4E:A6:0F:07:6D:E5:6F
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       1CD549C0EA94725D07D283549231BC431F91A438
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13627.roa
Signing time:             Sat 27 Aug 2022 09:42:21 +0000
ROA not before:           Sat 27 Aug 2022 09:37:21 +0000
ROA not after:            Sat 26 Aug 2023 09:42:21 +0000
asID:                     13627
IP address blocks:        185.137.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d5:49:c0:ea:94:72:5d:07:d2:83:54:92:31:bc:43:1f:91:a4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:21 2022 GMT
            Not After : Aug 26 09:42:21 2023 GMT
        Subject: CN=E987AC5F6297314559DD4068504EA60F076DE56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:10:8c:4f:d3:d3:fb:7b:21:52:f7:fe:57:
                    b0:1b:1b:ef:ac:51:a6:34:48:4e:b4:ee:03:68:7a:
                    ed:79:d8:a9:0d:22:f6:bf:c8:d1:69:55:2a:ca:e8:
                    26:44:ea:3c:72:6b:b8:b0:17:ca:de:2a:f4:d0:d9:
                    aa:ae:c5:44:ff:0d:63:88:0f:62:87:8d:dc:01:71:
                    c7:1b:11:ea:28:d0:e7:75:db:70:4d:b7:cf:b8:29:
                    b6:3e:6b:f4:c0:92:e8:da:87:7f:e5:4a:9f:5e:1e:
                    4f:2b:a2:7b:81:39:7b:30:f3:4b:16:d8:f6:9f:a3:
                    db:56:55:f4:43:2a:87:98:ae:74:bc:18:f1:8a:1c:
                    83:ae:4c:48:f6:bb:c1:65:e4:a3:88:a0:eb:d7:e4:
                    1b:8a:11:e7:00:4b:c1:f5:02:be:26:ff:69:6d:f4:
                    8c:3c:96:fd:5f:6c:f9:fd:64:fb:2c:91:e4:7d:bf:
                    cc:db:d0:72:ba:55:88:97:30:de:cf:a0:af:2f:96:
                    bc:d8:7f:ce:37:49:82:7c:c9:58:84:fe:21:59:6b:
                    36:90:2d:e2:67:e2:5b:01:03:76:78:a2:7a:2e:cd:
                    b1:96:c4:0f:f0:f7:7c:e4:03:4e:8a:bf:57:65:ce:
                    65:38:17:05:2b:f1:e1:d7:aa:fb:d7:d6:c3:af:2a:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:AC:5F:62:97:31:45:59:DD:40:68:50:4E:A6:0F:07:6D:E5:6F
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS13627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b3:5b:25:8e:f5:ee:61:38:14:ac:3d:f8:d0:f2:1a:ac:75:
         90:be:25:cb:ec:49:61:ac:58:84:48:2f:29:c9:18:26:ed:e5:
         8a:a3:c4:f9:00:fa:c5:98:6d:28:4c:9b:33:06:5f:e6:0c:8d:
         b6:f6:2a:8e:89:a1:d8:e8:86:a3:4a:bb:c0:b8:62:7e:af:7d:
         15:d8:d9:4b:34:93:7f:7a:c7:fc:73:16:59:d0:b4:fd:39:8a:
         87:e8:f0:68:8e:7c:0b:8d:ea:64:ce:1c:13:d7:f1:1b:47:a3:
         26:40:55:4f:77:a2:fd:61:45:8f:7d:7f:ef:a6:ca:c0:c9:7b:
         a4:e4:9c:57:e2:0e:ba:0f:fb:cb:07:24:41:af:ca:25:10:aa:
         20:8e:21:fa:41:9b:42:ad:4f:30:3d:fa:c7:a0:98:6c:d7:ce:
         62:0b:33:95:6d:bd:eb:64:29:c8:23:c8:13:f9:2c:82:c3:8e:
         09:16:5f:38:e8:f8:88:53:91:f9:c1:29:4d:c8:85:fd:0d:23:
         59:40:6b:15:24:bc:df:11:87:de:38:15:1c:52:15:e5:b3:aa:
         2f:dc:8c:06:3b:f9:80:06:8f:78:29:97:b8:40:30:1a:7d:6b:
         c9:2e:63:33:30:84:2a:d2:62:97:0c:ec:90:be:06:f6:d1:11:
         d4:00:f7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----