Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270764.roa
File:                     AS270764.roa (raw, json)
Hash identifier:          Pg+UyXniR5W7VfkQW6EyrlSa+1I8VTxPWk8Ij0iOgkI=
Subject key identifier:   57:3A:A5:B8:1C:54:40:0C:A4:0B:E5:83:27:F6:19:3B:9C:43:45:5C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       41C8A27428B441E8C1F1D2B025301494EF39D45B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270764.roa
Signing time:             Thu 26 Jan 2023 14:54:48 +0000
ROA not before:           Thu 26 Jan 2023 14:49:48 +0000
ROA not after:            Thu 25 Jan 2024 14:54:48 +0000
asID:                     270764
IP address blocks:        181.215.253.0/24 maxlen: 24
                          181.215.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c8:a2:74:28:b4:41:e8:c1:f1:d2:b0:25:30:14:94:ef:39:d4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 26 14:49:48 2023 GMT
            Not After : Jan 25 14:54:48 2024 GMT
        Subject: CN=573AA5B81C54400CA40BE58327F6193B9C43455C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:f1:6f:1b:60:bf:03:20:35:fb:1e:8b:19:
                    26:09:07:4e:45:86:22:b8:bd:41:dc:ee:8f:37:2c:
                    bb:72:92:2b:78:56:7c:c2:47:37:64:6e:fa:98:ab:
                    3e:a3:f2:d5:a0:d7:f3:fd:87:ae:a4:75:a0:87:69:
                    1e:14:1c:9b:ca:2f:d8:96:29:89:36:62:38:e2:40:
                    42:bb:b8:10:79:0e:33:7d:39:98:7c:4a:eb:d6:fc:
                    69:29:5a:0a:8e:d1:37:7d:1c:86:ca:d5:3d:bc:5b:
                    1c:32:42:c8:22:de:4c:b3:80:ff:07:66:3f:17:b1:
                    32:57:4f:3b:3a:3f:53:bc:96:9b:19:a7:6e:e0:99:
                    6b:6f:66:cd:80:19:99:1a:a1:54:64:82:6c:64:d7:
                    45:e9:e1:92:70:df:b0:15:52:e8:66:4d:2f:f6:ec:
                    eb:44:5d:69:a5:61:d2:41:f1:af:51:a0:a3:7f:dd:
                    fc:0e:cd:9d:39:9f:49:5c:1c:f4:60:37:ad:71:b0:
                    12:b9:aa:eb:b4:13:3c:fa:ab:55:66:01:7f:27:95:
                    ef:7b:0d:7e:18:c1:56:11:43:ef:ca:bc:2d:37:d6:
                    3e:14:0b:2e:48:24:f6:c9:bb:ab:25:b5:51:49:02:
                    d0:ba:0d:9f:53:ca:66:71:de:9a:de:92:f8:60:4d:
                    77:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3A:A5:B8:1C:54:40:0C:A4:0B:E5:83:27:F6:19:3B:9C:43:45:5C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS270764.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.253.0-181.215.254.255

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:d3:e6:61:72:43:c6:a0:5f:aa:bc:0b:4a:0c:25:52:e6:
         83:9f:da:c6:1c:b5:ac:f2:0c:af:55:84:2d:39:dc:07:80:1f:
         71:90:9d:19:ab:82:9c:af:ff:89:49:39:59:0c:94:10:15:32:
         9d:71:b6:21:de:b2:af:c2:9c:a1:e7:d0:a6:8c:ad:4c:35:54:
         80:de:0b:bd:dd:e7:ce:f3:81:d5:f8:1f:b3:20:51:f0:f5:d0:
         11:15:61:93:7e:cd:12:df:55:97:cf:29:a2:5f:c7:52:da:ec:
         ac:2e:0d:8b:59:d5:49:5b:69:d7:ca:6e:71:1c:bb:65:5a:96:
         e1:8e:72:38:b2:f1:79:c7:24:87:b9:98:ee:76:d9:55:41:85:
         62:0c:ae:90:0d:ec:a0:35:d8:32:18:82:bb:00:44:a8:15:b3:
         44:7b:df:fb:00:1c:3e:8b:07:ba:29:f1:80:7f:36:92:ba:e5:
         97:e9:7f:ae:41:0c:c8:4d:db:e7:8e:35:d7:4d:10:b1:47:13:
         7a:19:09:2f:55:60:08:38:32:b7:c5:8e:7c:4b:8c:31:db:64:
         1b:72:bd:35:65:b5:22:da:ef:05:6b:06:fe:0a:96:f0:28:9e:
         44:2a:03:9a:ea:ea:75:eb:1b:b7:00:eb:57:f1:7f:ea:d4:fa:
         a4:63:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----