Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48678.roa
File:                     AS48678.roa (raw, json)
Hash identifier:          LCuzdoZR9w8ZxWe76f8OUgyOVgtyyvLSaPO+F4Fcarg=
Subject key identifier:   41:A5:C5:1A:16:C0:22:6A:E5:7C:16:75:5F:9C:50:A4:10:A5:53:98
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       72DB803DD4DB9BB0BF86B28D83681D2183A67425
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48678.roa
Signing time:             Sat 27 Aug 2022 09:51:06 +0000
ROA not before:           Sat 27 Aug 2022 09:46:06 +0000
ROA not after:            Sat 26 Aug 2023 09:51:06 +0000
asID:                     48678
IP address blocks:        181.214.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:80:3d:d4:db:9b:b0:bf:86:b2:8d:83:68:1d:21:83:a6:74:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:06 2022 GMT
            Not After : Aug 26 09:51:06 2023 GMT
        Subject: CN=41A5C51A16C0226AE57C16755F9C50A410A55398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:75:a7:8a:12:32:90:79:0e:65:b0:a9:20:
                    eb:ff:66:1b:bf:7d:a5:c8:bb:67:68:c4:52:82:69:
                    81:e2:14:ba:c3:2f:f1:6c:8a:22:e6:ab:63:99:ee:
                    0b:c1:59:31:28:6e:22:d2:10:01:78:0f:83:44:f0:
                    6a:4f:07:13:94:a1:c3:b3:ff:7b:fb:22:d6:2a:92:
                    8c:c3:14:15:d3:8b:47:d3:32:67:6b:39:4a:83:4f:
                    77:51:b3:d0:fe:39:8d:fe:1d:07:3f:98:e5:6f:3d:
                    11:9d:fc:ae:80:7b:68:b2:75:65:5d:c7:b2:48:01:
                    f4:7e:f8:66:ae:1f:13:0d:1c:71:77:b9:c0:b9:32:
                    2f:fb:53:af:a5:f0:09:2b:b1:b8:14:2d:e8:4f:b9:
                    52:e0:cc:0a:c5:23:b1:b6:5d:dc:b0:9d:bc:73:be:
                    4e:bd:ec:d5:b4:d0:6f:e0:1e:25:1a:12:b3:6d:81:
                    a6:ef:69:77:19:51:ac:b0:e7:c8:39:5e:76:7d:24:
                    ba:f4:c7:4d:ff:70:26:4a:af:f2:e3:83:b2:4e:eb:
                    c4:fa:67:d6:ef:65:4b:0b:69:a3:5e:7a:9f:c3:4f:
                    c7:75:9a:06:1f:b1:94:f8:d6:fe:03:be:7d:e8:c4:
                    75:c4:1a:de:42:2a:93:82:74:a0:d0:5f:69:1b:c5:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:C5:1A:16:C0:22:6A:E5:7C:16:75:5F:9C:50:A4:10:A5:53:98
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fc:81:a0:2e:f5:91:40:a4:a2:33:67:41:fe:c0:aa:4c:fd:
         fe:9e:e7:a8:ae:29:7b:4b:69:6f:fb:2d:6e:ae:3e:ac:84:4b:
         59:4c:fa:55:ca:34:f6:e3:af:8f:ff:37:df:1a:cc:51:3e:25:
         aa:4b:f0:9c:e9:46:01:ba:84:5e:4d:a7:d0:45:3b:75:a9:c4:
         12:8d:ba:dc:f0:38:98:63:57:99:0d:f2:26:48:3d:c6:68:f3:
         a0:d3:42:e9:1b:30:14:10:f9:e1:f9:d8:34:38:aa:0a:7b:e2:
         08:b0:7d:a1:30:18:9c:20:d0:52:a3:3f:1a:83:a8:ff:9c:0c:
         63:2f:68:36:15:85:13:a1:73:e6:50:7f:8b:22:33:b2:7e:28:
         52:b8:95:8c:22:2f:c1:b3:3a:7c:f5:6d:8a:56:a2:1f:64:62:
         f5:50:9d:5b:d4:e5:6d:c6:2e:49:a8:a4:45:bd:15:a0:17:14:
         6a:fd:c6:aa:fe:af:32:6c:f3:57:91:bf:94:0d:d9:82:62:4a:
         4b:66:ce:c7:a2:09:24:83:9b:68:90:76:3f:43:0c:d4:81:a3:
         ad:dd:6f:9e:21:12:7a:5b:2c:7d:0e:22:89:30:bc:59:b1:39:
         66:cb:87:ac:b2:ad:cb:4d:91:c6:79:e6:b1:1c:68:90:ea:e5:
         8d:c6:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----