Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211375.roa
File:                     AS211375.roa (raw, json)
Hash identifier:          BF2PrpVS+TTqvHupF5sG1/eZjH35d0opqlzG//3kBHY=
Subject key identifier:   DF:D8:06:19:84:EA:CA:1F:07:74:B4:AE:39:58:23:18:4C:B6:2E:40
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4FA43EF262C8935584A5B657AB294AA53CCA24DB
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211375.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     211375
IP address blocks:        2a0a:9204:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a4:3e:f2:62:c8:93:55:84:a5:b6:57:ab:29:4a:a5:3c:ca:24:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=DFD8061984EACA1F0774B4AE395823184CB62E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:5d:59:89:55:60:71:33:d2:bb:49:cf:d3:
                    e0:10:d7:22:47:58:cc:fc:4d:b8:a0:b4:b1:1c:62:
                    68:26:09:7c:0e:dc:5b:0b:57:11:33:61:a6:ca:0a:
                    57:af:03:b5:ed:be:64:fa:fe:73:63:65:ce:1c:13:
                    21:51:06:03:58:fb:3a:9a:8d:e1:1d:94:ba:87:e3:
                    a6:f1:3d:2a:4a:d9:35:01:6b:f5:42:f0:25:c8:41:
                    60:01:cb:c9:a6:30:25:c9:23:be:c2:a9:48:c7:b3:
                    85:f0:09:ca:a7:d1:fa:43:84:dc:d5:08:4f:d1:7f:
                    c5:c2:1f:b1:c0:a3:23:a7:13:0a:6e:8e:f8:41:4a:
                    4e:14:2c:e1:d0:a3:96:a6:b2:f0:62:81:e8:d8:a9:
                    92:06:cc:be:8b:5e:f6:26:23:f5:9e:f7:bc:43:aa:
                    77:4f:63:9d:9a:10:d7:c4:db:04:fa:c0:a8:c5:cc:
                    14:bc:c3:2f:87:bc:1b:c4:33:36:ed:9a:5c:4f:28:
                    fe:f2:69:61:e0:1e:00:a0:ef:b2:82:ab:f9:98:46:
                    bf:45:65:53:bb:80:41:8d:2b:98:30:69:5d:f7:8d:
                    ea:42:61:af:f6:35:2e:c4:09:e3:99:90:4c:bb:ff:
                    47:c2:5c:0a:f7:5b:a9:45:41:3b:fd:28:a5:dc:96:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:06:19:84:EA:CA:1F:07:74:B4:AE:39:58:23:18:4C:B6:2E:40
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:9204:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:c6:e5:e5:e4:e8:a2:72:50:b6:e2:39:20:2b:9e:9c:fe:c6:
         95:6d:9b:88:b3:a1:fb:5c:f2:fe:d2:98:6c:7b:a1:ab:e6:f5:
         7d:8f:80:4a:bb:bd:db:ed:2c:a5:31:26:40:6d:d8:a3:ea:a2:
         a4:2c:5b:79:76:8f:41:4f:e3:75:02:bb:cd:e7:a9:bd:88:da:
         82:20:a2:0b:55:af:25:a8:79:2e:b4:d8:d8:88:dd:fa:dc:67:
         42:d6:48:82:5a:ea:04:c2:c2:14:fb:4b:4f:55:45:bc:63:bd:
         d7:99:df:b0:31:46:11:69:93:e9:19:32:b7:a3:04:a5:23:6c:
         bf:76:6f:10:3f:a8:0f:59:bf:d0:16:7a:48:63:8c:7e:eb:e8:
         08:34:32:54:de:b1:89:85:aa:66:0a:1b:81:d2:bc:5f:48:72:
         7c:2b:ae:de:20:47:90:44:60:10:9b:f5:03:ab:00:26:9c:4f:
         dd:36:0b:49:8a:4a:83:c4:09:45:56:38:21:73:7f:9d:d0:d5:
         28:dc:27:50:61:69:45:26:9a:12:fd:e8:2b:9d:06:dc:85:69:
         1c:89:86:58:2a:61:9b:71:1f:79:2a:8c:c1:e5:18:56:3a:67:
         dd:29:03:f8:f2:f7:87:d0:67:f7:5f:16:6e:76:e7:3c:69:39:
         48:26:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----