Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3170.roa
File:                     AS3170.roa (raw, json)
Hash identifier:          ai5t3+epbqGeTas9HR4pFeCbk1YJFpQ3xv7U623+G9o=
Subject key identifier:   B7:94:E9:F3:F3:E1:32:8A:3E:E3:83:23:9F:1B:95:BC:ED:45:01:08
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       1A02F5A249661034E27D24C82209C8F4F26E45A3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3170.roa
Signing time:             Sat 27 Aug 2022 09:44:58 +0000
ROA not before:           Sat 27 Aug 2022 09:39:58 +0000
ROA not after:            Sat 26 Aug 2023 09:44:58 +0000
asID:                     3170
IP address blocks:        2.58.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:02:f5:a2:49:66:10:34:e2:7d:24:c8:22:09:c8:f4:f2:6e:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:39:58 2022 GMT
            Not After : Aug 26 09:44:58 2023 GMT
        Subject: CN=B794E9F3F3E1328A3EE383239F1B95BCED450108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:c8:74:eb:11:d3:0c:92:7e:bf:16:31:d4:
                    aa:f5:74:29:61:2d:11:46:a3:64:66:70:a0:c8:2c:
                    da:fc:29:23:d8:6a:f8:24:0b:ae:f8:64:98:ff:ca:
                    7b:29:78:74:d7:6c:8b:88:8b:09:e4:66:7b:4f:49:
                    de:54:29:3a:c9:db:49:af:33:d6:a1:b5:78:f6:33:
                    f3:ae:23:b8:d5:f9:e3:35:52:f5:e4:7f:68:a6:ee:
                    d1:80:05:c5:27:b0:09:02:1b:ba:fd:0d:74:65:a4:
                    c2:19:00:33:2c:db:63:3a:f3:76:b0:e2:f2:91:98:
                    b8:75:59:b5:32:23:50:d7:2c:a8:57:31:fc:c3:47:
                    67:f7:bd:78:7d:ab:c5:67:36:6f:0e:7f:1c:96:44:
                    3a:4d:64:da:0e:a4:8d:1b:29:d1:93:5b:83:2d:d8:
                    e5:83:06:8a:ef:12:ee:fa:a2:77:f3:4e:c4:1a:03:
                    33:07:3e:01:da:1d:14:2a:82:5a:44:d0:0d:47:15:
                    a4:03:f7:e3:29:45:6b:91:ce:55:f9:5a:bd:4e:d7:
                    f9:4d:e9:fa:41:2e:8a:05:4c:52:fa:f6:71:9b:06:
                    73:f8:42:9c:79:24:5f:89:52:68:1f:e2:75:a6:12:
                    7b:8a:20:04:2a:b4:4c:30:fb:82:e4:9e:f1:8e:2b:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:E9:F3:F3:E1:32:8A:3E:E3:83:23:9F:1B:95:BC:ED:45:01:08
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS3170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:d4:b7:e7:a9:b1:f1:1e:43:b1:10:b9:51:41:29:a8:22:
         a2:79:dc:36:a5:07:63:f3:80:26:af:73:b3:3c:6d:6c:6d:2e:
         48:45:aa:42:d2:1c:9b:d5:4c:a3:70:10:23:d3:32:b7:0a:75:
         5b:8c:c6:b1:39:12:92:28:69:b2:59:70:e0:88:68:2a:d8:0f:
         15:ea:28:a8:44:64:96:6d:ee:f8:e5:4d:4d:20:41:95:37:90:
         86:88:89:02:a5:46:06:fe:5e:e3:2c:1c:a6:c1:e7:9a:dd:09:
         2e:d4:17:19:07:95:41:34:31:cd:e0:73:9e:47:e4:2f:a8:a4:
         5c:9a:fb:37:fa:c4:12:4b:0e:50:11:04:d7:ea:d0:c3:c4:5e:
         8c:d3:f6:5f:a1:27:12:2f:61:d7:14:08:9a:09:5f:c4:7b:f4:
         99:42:72:e2:e8:75:e7:54:6a:20:8e:33:7a:0e:4a:ba:c1:34:
         a0:0c:41:fb:9a:2d:4d:80:9c:96:6c:8e:f6:d7:d1:5c:27:6f:
         e1:60:19:e2:5c:6e:fc:da:7e:33:f2:58:9a:99:01:29:9d:3e:
         fc:8e:f0:4c:31:eb:a8:b6:f3:9b:73:ac:20:0d:69:67:37:4f:
         35:50:06:36:56:70:9f:ee:c7:54:df:51:94:72:41:3c:76:cc:
         93:ac:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----