Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS198651.roa
File:                     AS198651.roa (raw, json)
Hash identifier:          RC66+F4vMt2sQxu93Up/rklVCFLjUMGgK5z55BK9ODk=
Subject key identifier:   48:03:A3:10:14:3E:3E:CD:4E:45:85:C6:D3:B8:C9:23:42:AE:1C:61
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       2F1C83BA32C15E7334865B4AB066F1959D377F1C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS198651.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     198651
IP address blocks:        185.172.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1c:83:ba:32:c1:5e:73:34:86:5b:4a:b0:66:f1:95:9d:37:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=4803A310143E3ECD4E4585C6D3B8C92342AE1C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:26:07:d5:87:81:1a:2d:4f:1f:e3:cb:4a:
                    88:8b:d1:69:f7:b8:eb:0f:b9:58:97:a5:4f:76:3f:
                    2e:5e:36:54:c8:03:0f:2f:d6:9e:92:7a:d7:22:0d:
                    80:fe:ac:75:b2:2c:76:36:ae:90:1c:7f:94:c8:5c:
                    4d:fa:8e:96:d1:99:47:eb:db:7e:42:4f:dd:43:d5:
                    d4:51:5f:9d:81:60:dc:13:4b:71:51:40:6c:28:bf:
                    b9:fc:87:45:f1:88:b1:70:22:2e:64:0b:4d:67:7d:
                    4c:35:b1:df:36:57:27:98:f2:bf:dc:c9:df:b5:ed:
                    87:8f:1d:1c:87:c8:39:43:d6:37:20:9e:f4:7b:ac:
                    9e:e4:62:a4:38:07:8d:4d:41:59:f5:93:72:73:5d:
                    1f:48:79:8e:05:f2:22:51:77:ab:21:69:f3:bc:f8:
                    2a:4c:e2:bb:3e:f1:1e:71:2d:f4:ce:db:6e:cd:88:
                    ba:bb:0d:50:f3:4c:04:c1:cf:3c:a4:f8:7a:3f:ed:
                    69:e4:ab:73:14:d9:8b:2e:cd:15:a8:e7:41:ee:76:
                    c8:76:24:6e:96:eb:19:38:67:dd:d4:e8:f0:16:6f:
                    5b:57:07:85:f0:a9:6f:e3:46:71:79:8c:e9:9f:72:
                    e6:c9:16:b9:27:85:3d:3c:6b:72:b7:f5:48:a5:35:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:03:A3:10:14:3E:3E:CD:4E:45:85:C6:D3:B8:C9:23:42:AE:1C:61
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS198651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:50:aa:ff:d3:15:98:b6:d5:46:dd:ad:18:8c:ce:f8:ef:e6:
         c4:2d:0b:01:70:c1:69:40:e0:58:80:c0:5d:f2:19:4f:44:32:
         60:b3:3e:58:09:89:02:45:ae:bb:ef:a4:25:17:5c:4a:f4:7a:
         f3:07:78:21:64:ca:7d:32:0a:6d:b6:f0:50:b9:97:4f:67:50:
         db:73:e0:6a:a6:08:3c:ae:66:18:65:2e:97:7a:e7:a2:6a:e3:
         77:57:8d:2f:61:c9:09:ff:00:cc:b2:67:51:b3:c1:7b:d9:fe:
         2f:3d:6a:32:4b:86:eb:3d:96:2d:4b:1d:e9:11:ab:7c:5f:9c:
         04:bb:a6:b3:04:69:83:16:2e:28:ea:83:20:d9:d4:5a:98:1f:
         6c:3b:48:6b:67:52:23:9a:76:c6:6e:cf:6c:fa:1e:1d:20:bf:
         4d:7c:60:2c:6d:49:0b:04:0f:c4:51:4d:de:5d:66:13:6b:d6:
         0b:31:fc:73:d0:65:f1:c3:ef:96:01:ea:1c:e5:76:d8:6e:79:
         fb:93:82:1a:42:a3:68:2f:1b:36:b1:01:82:34:2d:a9:87:6a:
         f3:bb:fc:39:42:72:57:f4:a5:7c:a2:37:ec:b8:6e:65:70:3d:
         aa:e2:d7:8b:77:22:49:95:cf:cf:93:18:4d:c4:d7:e1:41:9e:
         b4:5e:b2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----