Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272110.roa
File:                     AS272110.roa (raw, json)
Hash identifier:          eQn131tXQjikniwD63EVEKF4E5oulw7/opCzrxAwUTQ=
Subject key identifier:   11:BE:2A:84:11:90:BD:F3:B6:FF:28:CA:7D:24:75:98:DD:06:52:CB
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6BFF96465BB794831523B76412EA902AB149A0C9
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272110.roa
Signing time:             Sat 27 Aug 2022 09:45:39 +0000
ROA not before:           Sat 27 Aug 2022 09:40:39 +0000
ROA not after:            Sat 26 Aug 2023 09:45:39 +0000
asID:                     272110
IP address blocks:        191.96.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ff:96:46:5b:b7:94:83:15:23:b7:64:12:ea:90:2a:b1:49:a0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:40:39 2022 GMT
            Not After : Aug 26 09:45:39 2023 GMT
        Subject: CN=11BE2A841190BDF3B6FF28CA7D247598DD0652CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:0b:97:4f:7b:af:b0:1d:02:40:14:ea:6c:
                    e8:43:99:c1:e7:2c:3d:b8:18:3c:cc:89:ee:07:3f:
                    44:ec:5e:c0:f0:bb:41:63:d1:8d:0c:70:2a:7c:7c:
                    10:be:ed:c4:76:7d:de:c8:d1:55:4b:db:10:18:f5:
                    45:24:90:e8:37:74:37:2e:4b:88:a9:3b:0e:65:83:
                    8f:92:65:81:c7:a6:3c:9b:43:4d:f2:d4:e0:d3:a5:
                    48:ac:21:d8:27:3c:54:7d:c5:22:f7:44:56:bb:ef:
                    2d:db:0e:16:68:1a:52:51:fd:8b:09:29:e9:2b:ef:
                    78:fb:98:5c:7c:60:36:9e:5e:6c:3d:88:c7:a4:e6:
                    89:74:51:1f:68:5f:f2:6d:76:a3:47:b3:c7:a8:52:
                    42:da:ab:a4:3f:fd:9f:f3:8b:36:12:af:35:46:b2:
                    ed:86:4e:bb:20:d4:2e:6b:b1:b0:70:a5:79:59:e3:
                    c3:75:40:e3:ac:eb:15:38:c2:bc:b7:d0:e4:20:2f:
                    7a:2a:0b:6d:c0:0a:b5:9a:18:5d:23:99:5f:62:cb:
                    bc:09:51:99:4b:d3:38:1c:e6:30:73:97:c2:85:45:
                    1b:a0:89:dd:af:c6:3a:ef:70:d6:b4:55:b5:fe:b3:
                    da:69:83:2d:8c:40:c5:c8:b3:ce:1b:b2:94:d9:8e:
                    ed:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BE:2A:84:11:90:BD:F3:B6:FF:28:CA:7D:24:75:98:DD:06:52:CB
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS272110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:4b:cb:96:29:50:37:cf:ff:7c:a8:9a:3d:0a:ac:bf:eb:
         cd:35:07:9a:99:af:28:4c:03:dd:2a:73:9a:42:1d:76:c7:df:
         4f:e5:c1:b6:f2:2d:97:be:c2:b1:97:8f:ec:19:6e:1f:af:05:
         79:b5:85:77:ff:3d:0c:35:4f:91:d2:1f:89:ac:57:59:42:e6:
         80:4d:f3:7c:fb:aa:b1:7d:b9:19:15:91:b4:ae:bf:1f:58:dc:
         ea:0b:a6:da:f8:fd:31:d9:9d:b8:d4:63:30:5b:14:51:27:9d:
         a3:f7:f8:c0:85:79:2f:c7:29:af:46:ea:d8:e7:03:99:c7:2c:
         6e:61:1f:c6:57:98:9b:c6:06:e9:0e:55:a2:9d:49:da:d4:6d:
         79:eb:15:25:05:32:a6:1d:d5:64:8e:46:b5:fa:7f:12:f7:62:
         bf:a6:2e:3b:c3:38:92:1f:5c:2f:43:13:49:8b:9c:06:6f:8e:
         8c:51:dd:10:c1:66:66:41:69:17:26:e9:f7:da:b6:25:0e:b0:
         5a:51:77:16:02:5e:6c:e1:15:a9:06:fc:4e:c7:42:08:e3:b3:
         d0:b1:39:1e:01:79:a1:aa:23:ce:be:40:1b:b7:0f:69:ba:3f:
         56:5b:42:ae:2c:94:92:fd:90:c2:f4:e9:e3:83:37:4a:11:ac:
         06:b7:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----