Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35133.roa
File:                     AS35133.roa (raw, json)
Hash identifier:          ECWVxK52KgdNeh4eMMTwoLIDK44oztxf/ptcFsIKHAk=
Subject key identifier:   C3:86:26:30:F4:2B:B2:D3:93:91:98:C1:1A:2D:58:2A:D5:C8:B5:A0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6C706F6DB67FA64A6A13DC12B9EA55A275E7733E
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35133.roa
Signing time:             Sat 27 Aug 2022 09:42:32 +0000
ROA not before:           Sat 27 Aug 2022 09:37:32 +0000
ROA not after:            Sat 26 Aug 2023 09:42:32 +0000
asID:                     35133
IP address blocks:        181.215.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:70:6f:6d:b6:7f:a6:4a:6a:13:dc:12:b9:ea:55:a2:75:e7:73:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:32 2022 GMT
            Not After : Aug 26 09:42:32 2023 GMT
        Subject: CN=C3862630F42BB2D3939198C11A2D582AD5C8B5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:7c:3e:8a:c1:9a:7f:73:09:c8:f3:67:41:
                    95:f5:b8:ce:09:61:fc:2b:5c:77:5b:9c:b7:c7:5b:
                    dc:3f:96:b5:cd:c4:8e:86:5f:55:31:fd:01:c4:7b:
                    6b:33:d3:ea:f2:9d:5a:f5:70:f7:7a:b6:98:b3:e8:
                    a5:d5:a3:92:84:32:fb:ad:f2:61:52:df:a0:5c:da:
                    92:3c:6b:ae:9c:71:78:5a:ff:e9:a5:b4:47:03:76:
                    2a:7f:9f:8c:f5:02:1c:72:87:9a:c7:0c:66:cd:45:
                    0b:0a:ae:3d:f2:01:3b:a7:97:a1:7d:cf:fb:60:d6:
                    e5:6a:5f:1b:db:3d:51:04:22:54:c3:45:f2:dd:5b:
                    ba:75:eb:f7:0f:64:bc:1e:fb:84:bd:4f:35:6d:7b:
                    8e:20:4f:99:97:fc:b8:37:5c:2b:c6:c8:ee:b2:d2:
                    89:17:18:98:91:c3:16:b2:df:c4:87:7a:a4:8d:ec:
                    65:7b:ef:a0:5b:32:b8:d4:77:cb:30:64:58:98:87:
                    36:a5:df:06:ba:d7:35:74:b7:95:57:bc:e3:87:c3:
                    eb:66:05:e2:05:4d:b2:64:8f:23:5a:17:88:20:f6:
                    18:45:49:2a:50:da:e3:02:03:43:0b:ab:8d:21:06:
                    48:10:30:92:be:40:40:42:2f:f1:cb:12:f3:e7:15:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:86:26:30:F4:2B:B2:D3:93:91:98:C1:1A:2D:58:2A:D5:C8:B5:A0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:c8:cc:cb:eb:ba:3c:6c:1f:e6:b1:e8:4f:03:16:07:09:
         e7:27:db:e0:f5:0f:68:98:1d:c2:8c:75:cd:d3:61:9b:07:e1:
         8b:97:3e:03:83:f5:6e:47:8b:40:99:83:96:3c:f1:23:a5:e7:
         ad:86:d1:97:a0:29:5f:50:58:21:b1:bb:7c:4e:18:e9:84:4c:
         4a:0f:fa:d4:e4:01:5e:d1:ff:7f:52:d3:48:57:ba:89:04:f0:
         c0:b1:b1:ab:ea:8c:f5:fa:69:25:9c:d9:e9:66:90:9b:01:fa:
         bc:bb:ba:65:6c:b1:82:cf:da:3f:a3:59:30:af:e4:89:c3:a8:
         ac:71:34:29:23:66:37:25:93:94:e1:44:f3:4f:ed:a9:a6:d2:
         b8:a6:ee:f6:dd:e3:c7:91:9f:6d:78:08:eb:6b:12:55:d1:ce:
         e0:41:58:8f:69:af:eb:dc:8f:01:01:75:d2:57:83:c1:d1:33:
         c6:c2:1c:40:6f:e0:76:1f:eb:f1:d6:b4:99:71:34:89:9c:0f:
         97:18:e0:ae:5a:de:0b:57:30:f3:17:2d:9a:83:98:0a:8d:da:
         61:fc:0b:55:ae:39:a9:5b:86:f3:82:9f:08:be:96:5b:06:90:
         c4:fb:59:73:75:9e:d5:12:e7:0e:32:0c:12:59:32:f7:e9:82:
         94:61:59:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----