Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          KQTsBxUG9F/HdIQ9s5hXtbDuQmWU2xB17RnY/4KYgm8=
Subject key identifier:   6C:A3:74:FC:E9:5B:DC:48:8E:A8:B3:27:5B:E9:F2:09:CD:66:7A:47
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       2865071032E5829731A712A8D4EF46CDD0D43553
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa
Signing time:             Fri 23 Dec 2022 14:11:27 +0000
ROA not before:           Fri 23 Dec 2022 14:06:27 +0000
ROA not after:            Fri 22 Dec 2023 14:11:27 +0000
asID:                     29802
IP address blocks:        179.61.170.0/24 maxlen: 24
                          181.214.72.0/24 maxlen: 24
                          181.215.228.0/24 maxlen: 24
                          181.215.235.0/24 maxlen: 24
                          181.215.251.0/24 maxlen: 24
                          191.96.170.0/24 maxlen: 24
                          191.101.200.0/24 maxlen: 24
                          191.101.208.0/24 maxlen: 24
                          191.101.226.0/24 maxlen: 24
                          191.101.248.0/24 maxlen: 24
                          2a0a:9a04:3::/48 maxlen: 48
                          2a0a:9a04:4::/48 maxlen: 48
                          2a0a:9a04:5::/48 maxlen: 48
                          2a0a:9a04:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:65:07:10:32:e5:82:97:31:a7:12:a8:d4:ef:46:cd:d0:d4:35:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 23 14:06:27 2022 GMT
            Not After : Dec 22 14:11:27 2023 GMT
        Subject: CN=6CA374FCE95BDC488EA8B3275BE9F209CD667A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:39:92:1f:6d:68:bc:e7:b5:ee:ae:e7:cd:
                    19:7f:db:81:4f:cc:2b:3d:92:f8:34:03:5d:f8:1a:
                    5c:da:14:b4:76:cd:dc:3b:26:45:e4:b9:ff:86:09:
                    94:f4:93:b4:9d:c8:74:4a:5f:6e:79:72:38:f8:cb:
                    a5:f7:5d:d5:70:18:60:b9:fc:9d:07:8b:5f:1c:3f:
                    83:4e:cb:17:16:2c:24:74:32:1b:e8:2f:56:ec:b6:
                    85:74:62:18:39:48:da:6b:a3:80:fc:c9:ee:00:97:
                    6c:7d:31:ee:5a:49:0b:25:f8:1e:14:0f:00:23:9c:
                    51:e4:45:8c:53:36:41:97:0c:b2:39:69:5b:85:97:
                    32:32:b5:94:6f:a2:b9:04:69:8a:23:f2:8e:79:27:
                    fe:13:28:92:ba:e8:c8:a3:e5:89:67:20:0b:d6:f9:
                    0c:06:c0:0f:d9:88:64:d5:08:ae:43:42:51:1b:70:
                    fa:e8:ef:91:95:1e:f3:aa:05:26:39:ca:06:83:fd:
                    19:3c:bb:0e:92:9a:c2:a9:75:70:03:f4:8f:2b:a2:
                    ed:1f:98:4c:b9:48:64:c0:49:07:85:e0:08:7b:e4:
                    b9:65:a2:67:1b:c7:e4:a6:b2:a5:3c:95:6e:da:f8:
                    62:fc:9d:83:a8:9d:75:f8:51:aa:c1:bb:a8:ef:8a:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A3:74:FC:E9:5B:DC:48:8E:A8:B3:27:5B:E9:F2:09:CD:66:7A:47
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.170.0/24
                  181.214.72.0/24
                  181.215.228.0/24
                  181.215.235.0/24
                  181.215.251.0/24
                  191.96.170.0/24
                  191.101.200.0/24
                  191.101.208.0/24
                  191.101.226.0/24
                  191.101.248.0/24
                IPv6:
                  2a0a:9a04:3::-2a0a:9a04:6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         53:de:96:c5:f4:58:51:46:44:5d:22:67:47:ed:3f:59:88:9d:
         d2:67:45:92:56:82:96:c0:c9:b4:1e:35:e5:ad:90:95:dc:2d:
         ad:72:f6:04:f9:df:d6:bd:da:26:f4:1f:bf:98:6f:bc:20:cd:
         91:f9:22:8d:95:67:94:5a:16:06:7a:d4:5d:a0:53:34:74:69:
         4d:7d:d0:19:49:b4:e8:7f:d3:bf:0a:b9:20:67:aa:f4:4f:09:
         8b:c1:b5:c5:68:58:84:0a:f4:1e:66:31:d0:1b:2d:94:7e:9c:
         d5:40:9c:90:50:92:ae:98:04:53:6e:00:b2:e9:bf:f2:11:64:
         55:4c:67:5e:a3:31:e9:5e:c3:f0:57:f9:39:6c:9c:5a:d4:cd:
         62:fe:78:a3:09:56:b7:05:15:1f:33:e0:0b:3a:8a:8f:9d:88:
         e3:0d:2c:b4:ef:d1:e9:4b:5a:e5:45:fe:d4:ca:49:30:41:d3:
         50:db:b4:35:04:ba:30:a4:3e:b0:e1:99:ed:e5:55:5c:1e:a5:
         ba:5a:73:79:f3:ce:c3:19:09:b8:b1:db:22:e4:2e:83:92:ce:
         67:9d:3d:22:f9:17:e5:a8:75:72:ea:48:6a:06:4b:0f:3a:fc:
         cb:54:c3:b4:88:e1:37:2c:ec:4b:e8:71:40:2c:94:34:88:b5:
         31:d9:f8:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----