Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211375.roa
File:                     AS211375.roa (raw, json)
Hash identifier:          5zyBlLbpJzEhZDBmtLW3MfxZ1loSMwr0YAf4n9nz9yg=
Subject key identifier:   17:C2:20:67:3E:18:09:97:2D:4A:0A:32:DF:D2:8D:0B:62:AD:03:D0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0DC77E4ECBCB38D341DEBA6CF6C480275D4B62DA
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211375.roa
Signing time:             Sat 27 Aug 2022 09:39:45 +0000
ROA not before:           Sat 27 Aug 2022 09:34:45 +0000
ROA not after:            Sat 26 Aug 2023 09:39:45 +0000
asID:                     211375
IP address blocks:        2a0a:9204:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c7:7e:4e:cb:cb:38:d3:41:de:ba:6c:f6:c4:80:27:5d:4b:62:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:34:45 2022 GMT
            Not After : Aug 26 09:39:45 2023 GMT
        Subject: CN=17C220673E1809972D4A0A32DFD28D0B62AD03D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:66:47:45:e0:b6:8f:cc:4e:33:0f:ac:3b:
                    c3:8c:7d:cd:8c:86:81:11:a0:e9:41:30:a8:c8:3f:
                    79:bf:a5:60:3e:f3:e5:89:6a:c0:3b:99:8a:93:47:
                    89:89:af:21:3b:94:ca:96:5e:02:1a:25:2b:53:a3:
                    c2:44:3e:bc:99:de:d6:1b:4f:44:5f:a0:bd:ce:34:
                    81:8a:cd:5b:87:95:1c:ba:24:71:02:4f:7c:ee:3b:
                    bd:b5:07:37:25:ef:cb:93:55:90:75:70:17:0f:be:
                    4e:3d:b8:30:1b:f7:09:f6:95:df:d7:82:e4:99:30:
                    b5:53:79:80:cc:34:d0:67:38:f2:9d:82:bd:e8:82:
                    1b:6b:49:f0:93:6b:56:31:a2:1b:3c:38:9f:6b:91:
                    6e:1e:bc:5f:df:43:40:6a:45:db:94:eb:2c:11:d6:
                    bf:76:b7:21:e1:fb:ba:13:1d:06:2d:7e:18:ef:3e:
                    76:87:9a:c5:b6:ae:b1:f9:e1:75:7c:79:ee:2e:1b:
                    ac:1f:63:5d:c3:a9:cb:29:61:59:9b:29:ad:3b:52:
                    dc:69:3d:f9:36:32:f0:8b:9e:84:34:36:0e:e4:24:
                    c0:7f:07:ff:48:59:c4:ba:7d:b4:ab:b8:81:3c:8c:
                    df:e7:8e:1d:6b:79:9f:5d:32:37:7f:b1:b9:26:f5:
                    93:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C2:20:67:3E:18:09:97:2D:4A:0A:32:DF:D2:8D:0B:62:AD:03:D0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:9204:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:af:48:47:8b:fa:d3:f5:d2:d2:16:a9:da:ad:91:59:c9:
         31:f5:31:fd:9b:52:2e:7f:d6:78:45:53:5f:f0:f1:b2:74:03:
         b8:30:6d:e9:50:43:cb:9c:00:e2:6b:fa:2a:c5:bd:18:ba:6e:
         1a:39:32:65:f3:84:fb:d9:f5:59:d0:c1:f3:1b:73:4e:75:3c:
         71:49:bf:e8:3c:7f:f4:8c:d5:42:b7:6f:c6:5f:ca:4d:de:bc:
         60:5a:46:7b:0c:66:83:9f:2e:ab:90:75:c6:a2:64:f6:53:b6:
         53:8a:57:62:1f:a4:85:ec:0c:e7:5f:c1:85:58:65:60:70:9e:
         7a:64:fe:76:1f:84:0f:eb:dd:52:8c:54:89:ee:eb:8c:d4:21:
         3e:92:28:68:1d:15:7b:49:38:16:50:75:b6:30:1d:ae:48:dc:
         b5:3c:b6:8f:b2:6c:51:9a:65:e9:93:2f:e0:f6:e4:6b:e1:e8:
         10:d7:23:36:44:06:f2:46:7f:e0:bb:39:88:19:b1:4a:68:8c:
         18:6a:42:13:af:53:b0:47:7d:76:10:24:db:9a:d3:03:44:9c:
         f5:4b:5d:97:f8:ba:74:65:ee:f0:a0:da:fd:4d:cb:5e:c5:48:
         df:8c:fd:9a:dc:f8:e9:c8:20:9a:7e:e8:2e:ef:b9:33:14:ec:
         ff:2f:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----