Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS21859.roa
File:                     AS21859.roa (raw, json)
Hash identifier:          RzF9Gj0Rhz6E7BH9TMLv2nbsjFgGjNEyZCoeW9M7Rlw=
Subject key identifier:   E0:06:7F:EF:A4:00:A1:5D:F8:36:DD:16:DA:2F:3C:4D:F8:40:36:20
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       72C449188B7EFD1D4E9F016EBCFA679F90AE5DD8
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS21859.roa
Signing time:             Sat 27 Aug 2022 11:25:43 +0000
ROA not before:           Sat 27 Aug 2022 11:20:43 +0000
ROA not after:            Sat 26 Aug 2023 11:25:43 +0000
asID:                     21859
IP address blocks:        181.215.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c4:49:18:8b:7e:fd:1d:4e:9f:01:6e:bc:fa:67:9f:90:ae:5d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 11:20:43 2022 GMT
            Not After : Aug 26 11:25:43 2023 GMT
        Subject: CN=E0067FEFA400A15DF836DD16DA2F3C4DF8403620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:6b:d3:6a:33:b4:e7:44:d2:b6:26:42:81:
                    d8:c7:3d:ff:a9:ab:e7:48:75:04:4c:28:aa:65:16:
                    ea:f7:25:1b:dc:bc:46:6c:a9:ec:01:3c:0b:d1:d6:
                    a1:91:fe:47:3c:c2:2d:73:69:6a:b9:6b:f4:4d:3c:
                    e8:ca:86:fa:1b:1d:2f:b1:16:ed:97:0a:fe:6b:fc:
                    4e:c5:86:73:d3:f4:40:62:86:4e:ba:ac:7f:1c:45:
                    28:aa:46:04:44:05:8b:52:e1:d3:30:2d:11:e3:f5:
                    74:31:97:05:bd:37:29:0c:52:fe:a7:e8:52:a5:34:
                    3a:c5:c0:e1:68:a6:fc:03:79:8c:80:7a:e3:8a:27:
                    7e:20:8a:98:39:a3:8c:7e:4a:20:0b:a3:a5:7a:7c:
                    bd:4d:ec:eb:d5:8a:32:f4:da:07:f0:30:f0:df:1e:
                    75:87:44:30:8f:f2:1a:a8:84:c8:30:ab:ed:d0:ce:
                    b9:0c:4c:d7:80:5f:11:a9:94:92:76:5f:d4:ef:94:
                    03:c8:9d:77:26:fd:0c:0b:1b:e6:bf:12:01:77:18:
                    19:2a:12:57:e7:da:93:55:62:54:14:fc:b3:12:27:
                    ee:57:23:78:3c:f9:44:ab:8b:f9:65:c0:fd:8b:b9:
                    84:c4:82:38:74:a9:c0:a6:04:2c:6e:21:c4:69:9a:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:06:7F:EF:A4:00:A1:5D:F8:36:DD:16:DA:2F:3C:4D:F8:40:36:20
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS21859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:40:fd:7b:1a:ef:3c:7a:08:d5:12:93:28:42:75:ff:4f:
         d4:ee:94:c3:45:cb:e0:ca:37:07:de:15:c7:8c:90:79:85:a7:
         bd:b4:b1:6e:6c:78:1d:34:01:4f:6a:c9:83:c1:da:c3:a1:e6:
         38:a6:24:80:a4:0b:38:ee:fc:5f:76:67:79:2e:b9:8d:ca:09:
         ca:41:1d:05:d6:09:9e:d9:e5:f3:48:0c:84:9c:d3:b2:a7:d5:
         f8:29:d6:f7:5f:0c:1b:7e:e7:e7:61:f1:e0:f9:6b:12:5f:23:
         c0:96:48:19:66:71:92:cf:5e:50:fc:8b:3c:5c:89:3c:d4:9e:
         8b:99:f9:ba:0f:6c:15:4d:d0:a5:66:d3:51:f7:2c:c9:9d:e1:
         86:78:a0:27:37:fe:04:14:43:db:26:0f:16:d2:ba:3a:26:a5:
         e1:21:be:28:f2:b2:16:da:c4:77:3c:86:32:ec:74:60:05:d3:
         69:d0:7d:4f:d2:68:97:31:05:cb:03:ac:e3:a6:12:3d:1e:ca:
         d2:90:7a:cc:4b:60:8b:08:93:06:3a:b9:54:84:f3:81:2b:c4:
         9f:8f:c2:49:a8:d4:77:f7:2a:91:01:9b:4c:f8:06:c0:31:9f:
         ad:92:42:a7:d3:32:1d:c5:f1:d2:12:03:c2:6b:3f:d0:79:cf:
         c5:4a:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----