Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272045.roa
File:                     AS272045.roa (raw, json)
Hash identifier:          AQO0VRXy8ZcKaUIppXCkTnLodPifoTQa+aFbw/eff7Q=
Subject key identifier:   22:43:B9:AC:76:32:75:4A:8E:FD:5E:E9:D6:B6:BC:A4:B7:8D:36:39
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3A5FF078EFC9BCA859F7554F5B5D2FC0A25A027A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272045.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     272045
IP address blocks:        191.96.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5f:f0:78:ef:c9:bc:a8:59:f7:55:4f:5b:5d:2f:c0:a2:5a:02:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=2243B9AC7632754A8EFD5EE9D6B6BCA4B78D3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:9f:fb:7c:f9:99:9f:e1:26:b0:a4:9d:32:
                    fe:0f:4d:13:de:08:e3:84:0e:b1:98:c0:cd:41:87:
                    4a:e9:5f:86:1e:50:a4:43:aa:0b:fe:e8:b5:d7:95:
                    a2:75:62:14:bb:a9:0a:71:5f:eb:dc:71:d3:31:2b:
                    e2:ef:4c:e2:fd:15:4d:d0:3a:a7:9e:8e:f8:cb:33:
                    95:5f:db:7d:a9:aa:34:3f:da:f5:ba:62:70:16:7f:
                    81:62:6a:e2:00:18:7d:7c:02:2d:51:67:93:2b:26:
                    1b:bd:0c:12:58:27:61:1f:ea:9b:6a:a6:40:21:9b:
                    33:73:3f:1f:4e:da:93:59:bc:64:b2:c1:16:ac:04:
                    ba:d8:f7:dd:ec:4c:03:55:eb:29:10:c6:e9:78:18:
                    2b:a1:79:dc:5a:79:86:1c:14:a9:1e:a1:e8:2d:f7:
                    2e:1e:2d:d2:aa:9d:3e:8d:45:f9:96:d2:4e:27:5d:
                    49:99:1e:4d:6f:b0:bc:77:6b:25:55:03:10:53:ba:
                    bf:20:01:67:dd:78:f5:81:a8:a8:50:2b:1b:e8:22:
                    8c:78:ee:e9:ad:8a:29:ec:58:58:12:79:8c:53:8e:
                    fa:92:dd:98:3e:1f:2a:e1:91:ea:ca:fa:e0:72:04:
                    82:27:13:84:2c:d8:3a:77:28:0f:89:29:a1:d7:9c:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:B9:AC:76:32:75:4A:8E:FD:5E:E9:D6:B6:BC:A4:B7:8D:36:39
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS272045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:11:41:c8:12:32:39:60:b4:3d:d6:a5:55:6f:70:4d:47:11:
         68:0b:19:3d:e1:a9:c3:10:86:48:f7:39:8e:0c:1e:a8:3f:70:
         59:bc:6c:c2:d9:c6:cb:de:02:0e:51:ab:9a:d2:d6:9d:3c:11:
         de:4a:e0:5c:78:aa:26:36:88:25:c9:52:b0:5f:88:e0:42:00:
         ad:69:46:0e:8f:2b:b8:05:f0:21:42:9d:34:c5:99:e4:69:a9:
         46:b5:61:87:12:0d:f1:7c:77:46:68:95:6d:b1:eb:a3:8b:c1:
         18:c9:44:37:59:1d:de:8b:06:e0:2d:c1:fb:29:8f:97:07:7e:
         f4:87:d1:64:c5:23:b5:fa:7f:4b:06:2e:09:fc:2c:3a:40:87:
         a2:f0:2b:2a:b8:b2:28:43:e6:0e:1a:d5:db:4d:b3:ed:d3:68:
         cd:02:5d:35:bd:98:91:9b:b9:ce:ce:2c:4d:79:8a:0d:55:39:
         98:1e:09:b1:08:68:a2:7f:6a:6b:5b:0e:09:13:79:a5:c1:54:
         76:84:60:e3:6f:42:a6:01:70:20:e9:83:3c:10:34:42:17:a4:
         77:f0:4b:4b:ef:c7:53:53:30:da:40:cf:99:41:fe:db:0f:33:
         75:d4:73:b3:44:5b:47:8e:24:1a:b4:92:73:92:c6:97:8d:f8:
         f0:33:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----