Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57935.roa
File:                     AS57935.roa (raw, json)
Hash identifier:          O2gvL5munxwDpif9i+hCDFkksapVz80r7y9Vmi/CnLs=
Subject key identifier:   C6:83:6A:BD:CE:89:A5:0E:82:9F:8C:70:55:6F:73:8B:65:52:38:6D
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7847E8A91FA1ED7F0E6785D88ECD4CDF0377A352
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57935.roa
Signing time:             Tue 25 Oct 2022 17:23:24 +0000
ROA not before:           Tue 25 Oct 2022 17:18:24 +0000
ROA not after:            Tue 24 Oct 2023 17:23:24 +0000
asID:                     57935
IP address blocks:        185.137.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:e8:a9:1f:a1:ed:7f:0e:67:85:d8:8e:cd:4c:df:03:77:a3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 25 17:18:24 2022 GMT
            Not After : Oct 24 17:23:24 2023 GMT
        Subject: CN=C6836ABDCE89A50E829F8C70556F738B6552386D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:7f:f6:c0:5c:06:d0:1a:23:a1:f7:b9:67:
                    da:dd:74:e8:4c:7c:7b:c2:37:07:ff:45:cc:9e:fb:
                    36:9d:ee:8d:72:35:de:b7:9e:8f:99:6c:8e:a9:57:
                    0d:46:9e:1f:81:65:25:2f:95:16:fa:44:42:42:2a:
                    aa:0f:96:d6:d6:c3:0e:1b:0c:4d:93:6c:3d:64:59:
                    8c:1c:8e:30:f4:7f:f8:cc:2a:56:18:6c:bd:42:8c:
                    dd:8f:b6:bf:dd:b3:12:7d:ce:8e:55:39:1a:21:2a:
                    6c:c4:ab:dd:28:51:98:b5:d1:8a:ea:ef:06:5c:dd:
                    43:ac:56:72:52:f3:a6:2c:81:d3:4b:96:c1:be:a4:
                    e0:5a:c4:a0:54:07:16:e9:be:b6:76:0c:03:d3:18:
                    e5:3b:e0:3d:2b:4d:0b:27:ae:20:87:04:3a:e3:b6:
                    4a:e1:8c:82:7c:6d:19:28:08:da:f3:41:99:21:e4:
                    84:33:58:d1:42:ca:57:70:4f:f2:d7:ba:ad:fb:9d:
                    2d:d6:09:86:95:62:44:43:a4:17:eb:46:87:d4:6c:
                    b5:1d:a2:ac:b3:31:62:74:e9:2c:e6:9c:1b:80:dd:
                    e1:a5:ea:36:35:69:18:69:55:86:53:d9:ec:2c:5a:
                    70:c7:9d:b1:dc:ed:62:d8:94:97:34:b7:cd:89:9c:
                    c5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:83:6A:BD:CE:89:A5:0E:82:9F:8C:70:55:6F:73:8B:65:52:38:6D
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS57935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:86:8a:f7:2f:99:29:05:b7:eb:a0:22:60:2f:af:ee:80:
         ab:00:54:1f:f5:bd:1d:97:7d:a7:29:48:7a:50:e4:b7:5d:7e:
         ee:a9:a9:ba:51:ba:90:6c:e7:19:65:0a:6d:cf:f7:8a:2a:ec:
         67:26:42:7d:80:2b:ff:bf:d3:e6:7f:ed:fa:14:51:e4:f3:ef:
         b5:d6:63:f4:04:2f:d2:e5:a4:19:e1:c3:98:31:0d:b5:69:50:
         58:cc:dc:db:b1:43:5d:c5:31:d6:fc:6d:de:e1:94:13:ac:1c:
         f8:7c:75:0f:60:4f:1d:92:bf:4f:37:db:69:e3:3f:49:f3:6f:
         68:1f:ee:c5:b9:9b:25:36:f5:ba:c6:50:30:62:0d:cb:b9:b3:
         34:12:88:71:8d:81:1a:93:17:84:b0:5b:34:fe:dc:b1:48:13:
         e5:5b:e0:b7:13:a5:3e:33:ed:58:0b:62:a2:a8:cd:b6:b8:8e:
         6e:16:bc:fa:00:4b:4b:5b:8f:e2:b2:48:37:4d:ef:40:0d:f2:
         44:71:32:60:53:22:c4:ca:3b:6c:e5:f9:bf:92:54:a9:75:ed:
         b3:47:ef:e0:79:a5:dd:c0:71:e0:db:72:53:34:a8:50:96:62:
         ee:18:f1:35:5b:ca:79:be:cf:21:ba:ae:e2:4d:aa:c2:f1:36:
         5e:80:1c:f6
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUeEfoqR+h7X8OZ4XYjs1M3wN3o1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMjUxNzE4MjRaFw0yMzEwMjQxNzIzMjRaMDMxMTAvBgNV
BAMTKEM2ODM2QUJEQ0U4OUE1MEU4MjlGOEM3MDU1NkY3MzhCNjU1MjM4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWX/2wFwG0Bojofe5Z9rddOhM
fHvCNwf/Rcye+zad7o1yNd63no+ZbI6pVw1Gnh+BZSUvlRb6REJCKqoPltbWww4b
DE2TbD1kWYwcjjD0f/jMKlYYbL1CjN2Ptr/dsxJ9zo5VORohKmzEq90oUZi10Yrq
7wZc3UOsVnJS86YsgdNLlsG+pOBaxKBUBxbpvrZ2DAPTGOU74D0rTQsnriCHBDrj
tkrhjIJ8bRkoCNrzQZkh5IQzWNFCyldwT/LXuq37nS3WCYaVYkRDpBfrRofUbLUd
oqyzMWJ06SzmnBuA3eGl6jY1aRhpVYZT2ewsWnDHnbHc7WLYlJc0t82JnMU7AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUxoNqvc6JpQ6Cn4xwVW9zi2VSOG0wHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM1NzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALmJDjANBgkqhkiG9w0BAQsFAAOCAQEArYOG
ivcvmSkFt+ugImAvr+6AqwBUH/W9HZd9pylIelDkt11+7qmpulG6kGznGWUKbc/3
iirsZyZCfYAr/7/T5n/t+hRR5PPvtdZj9AQv0uWkGeHDmDENtWlQWMzc27FDXcUx
1vxt3uGUE6wc+Hx1D2BPHZK/TzfbaeM/SfNvaB/uxbmbJTb1usZQMGINy7mzNBKI
cY2BGpMXhLBbNP7csUgT5VvgtxOlPjPtWAtioqjNtriObha8+gBLS1uP4rJIN03v
QA3yRHEyYFMixMo7bOX5v5JUqXXts0fv4Hml3cBx4NtyUzSoUJZi7hjxNVvKeb7P
Ibqu4k2qwvE2XoAc9g==
-----END CERTIFICATE-----