Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44486.roa
File:                     AS44486.roa (raw, json)
Hash identifier:          z58tSAw21ThWno9vo8pxB+GGTbSdwyAqym9vTLyB6f8=
Subject key identifier:   CB:FF:4C:84:88:91:F3:E6:AE:32:0D:E3:39:B3:F4:B3:FE:C9:A4:0A
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7F1352D0AE951F47C5599B7D74E516CFC8B902D7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44486.roa
Signing time:             Thu 20 Oct 2022 21:07:33 +0000
ROA not before:           Thu 20 Oct 2022 21:02:33 +0000
ROA not after:            Thu 19 Oct 2023 21:07:33 +0000
asID:                     44486
IP address blocks:        45.137.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:13:52:d0:ae:95:1f:47:c5:59:9b:7d:74:e5:16:cf:c8:b9:02:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 20 21:02:33 2022 GMT
            Not After : Oct 19 21:07:33 2023 GMT
        Subject: CN=CBFF4C848891F3E6AE320DE339B3F4B3FEC9A40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:91:04:3d:da:3b:14:d8:0a:b6:2b:ef:46:
                    49:c9:1a:82:c9:d3:5b:0c:84:2b:d2:1a:04:a6:6a:
                    40:fe:86:bc:15:35:19:4a:bc:96:ba:c8:8e:92:0b:
                    89:a2:79:48:96:a1:84:86:11:d0:0d:ff:7e:3a:7e:
                    71:04:07:50:c2:9a:10:02:8b:7d:e3:20:4c:73:8a:
                    4c:07:f3:26:a6:15:d9:9a:bd:23:13:d5:48:5c:5d:
                    39:66:19:fd:64:7e:29:ed:ac:c9:c1:3b:01:66:e3:
                    a7:e0:fe:09:ea:05:2b:9c:02:c2:91:af:77:df:ed:
                    d7:2e:41:ad:51:b6:50:7e:07:ec:0c:0f:a3:77:0e:
                    1b:65:1b:33:46:6a:6b:94:df:88:38:59:16:f5:d5:
                    8d:be:7c:5b:7c:2b:9d:16:ca:ea:37:a6:f9:74:d5:
                    47:b2:ce:0c:bf:48:32:3e:db:f8:a0:71:80:2c:a9:
                    7b:1d:88:83:69:26:05:74:97:0d:ac:fe:b2:bf:9e:
                    87:c7:14:57:d0:9e:60:29:ae:81:3e:9a:77:e4:3f:
                    b0:07:06:b3:06:7b:01:12:99:36:00:25:22:d3:e1:
                    03:40:68:d0:af:f8:d7:44:84:01:7e:d4:8b:01:28:
                    ce:f3:df:88:45:16:13:91:83:67:89:e9:70:95:10:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:4C:84:88:91:F3:E6:AE:32:0D:E3:39:B3:F4:B3:FE:C9:A4:0A
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44486.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2d:67:95:12:d1:26:28:94:1b:d7:7d:cd:97:2e:f2:b9:8c:
         c9:fe:5d:10:cd:4b:10:a6:a0:57:17:da:5a:ab:b9:01:94:fd:
         dd:5c:a9:1d:2f:3e:78:4a:58:ad:33:f1:35:62:c5:24:de:68:
         27:d7:a9:18:bf:63:e4:ba:e4:7d:09:b8:88:a4:52:b8:6a:fc:
         88:d8:5b:78:a8:72:f9:d1:b0:3e:4f:a0:f0:de:f8:cd:39:89:
         5e:d4:b8:36:7e:03:1e:1f:15:3b:19:08:b2:b2:f9:9b:61:80:
         fd:a2:bd:2f:1c:d9:76:a4:c5:f6:50:30:81:7c:bb:13:c5:ec:
         a7:72:97:fa:40:eb:2a:06:56:02:e2:a7:0c:7b:2e:2b:9d:83:
         56:fa:fa:c9:34:40:24:40:ff:59:d6:a0:40:a8:cd:eb:bb:27:
         9f:67:59:e7:fb:2f:20:1f:d6:04:78:ef:2f:51:16:4f:48:dc:
         41:a7:d2:aa:ab:e0:02:64:bc:e8:69:68:b5:65:41:8b:f6:19:
         ff:89:f7:d8:e6:5b:3d:dd:f5:fc:ab:df:0e:3d:aa:15:9c:47:
         25:3a:6a:85:40:c3:d7:0f:69:65:f1:14:9c:e3:d9:21:07:47:
         f0:b2:6d:ee:cf:48:2b:5b:4c:01:92:05:aa:09:8e:97:37:62:
         c3:8d:2b:c5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUfxNS0K6VH0fFWZt9dOUWz8i5AtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMjAyMTAyMzNaFw0yMzEwMTkyMTA3MzNaMDMxMTAvBgNV
BAMTKENCRkY0Qzg0ODg5MUYzRTZBRTMyMERFMzM5QjNGNEIzRkVDOUE0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6ZEEPdo7FNgKtivvRknJGoLJ
01sMhCvSGgSmakD+hrwVNRlKvJa6yI6SC4mieUiWoYSGEdAN/346fnEEB1DCmhAC
i33jIExzikwH8yamFdmavSMT1UhcXTlmGf1kfintrMnBOwFm46fg/gnqBSucAsKR
r3ff7dcuQa1RtlB+B+wMD6N3DhtlGzNGamuU34g4WRb11Y2+fFt8K50Wyuo3pvl0
1Ueyzgy/SDI+2/igcYAsqXsdiINpJgV0lw2s/rK/nofHFFfQnmAproE+mnfkP7AH
BrMGewESmTYAJSLT4QNAaNCv+NdEhAF+1IsBKM7z34hFFhORg2eJ6XCVEFAdAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUy/9MhIiR8+auMg3jObP0s/7JpAowHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM0NDQ4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2JnzANBgkqhkiG9w0BAQsFAAOCAQEAGC1n
lRLRJiiUG9d9zZcu8rmMyf5dEM1LEKagVxfaWqu5AZT93VypHS8+eEpYrTPxNWLF
JN5oJ9epGL9j5LrkfQm4iKRSuGr8iNhbeKhy+dGwPk+g8N74zTmJXtS4Nn4DHh8V
OxkIsrL5m2GA/aK9LxzZdqTF9lAwgXy7E8Xsp3KX+kDrKgZWAuKnDHsuK52DVvr6
yTRAJED/WdagQKjN67snn2dZ5/svIB/WBHjvL1EWT0jcQafSqqvgAmS86GlotWVB
i/YZ/4n32OZbPd31/KvfDj2qFZxHJTpqhUDD1w9pZfEUnOPZIQdH8LJt7s9IK1tM
AZIFqgmOlzdiw40rxQ==
-----END CERTIFICATE-----