Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60781.roa
File:                     AS60781.roa (raw, json)
Hash identifier:          L4hYUJx81+t0shOcXWPMbq2b54LFzmwpV1TLG+AXLI8=
Subject key identifier:   76:72:CA:1F:C1:A6:D3:EC:3E:7F:E4:81:E9:EF:9B:00:4A:C6:9E:1E
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3CCD573F86C8318C84D4013A037A4C37EA2FB95B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60781.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     60781
IP address blocks:        191.101.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:57:3f:86:c8:31:8c:84:d4:01:3a:03:7a:4c:37:ea:2f:b9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=7672CA1FC1A6D3EC3E7FE481E9EF9B004AC69E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:cf:cc:c8:c0:99:75:5b:2a:30:e1:22:8c:
                    d4:24:b3:b1:c5:f2:ee:30:ed:b6:dc:d6:86:b0:ee:
                    8d:76:5e:37:9e:97:95:b6:b3:4d:10:fb:9f:6e:03:
                    23:24:50:42:df:15:f0:bb:f4:25:5d:b2:9f:00:24:
                    3a:c5:11:58:2f:30:8d:a1:77:63:1e:69:7a:5d:37:
                    31:63:bb:d7:b1:3d:f0:8e:36:a1:78:78:22:b6:73:
                    d7:52:2d:9f:b0:97:34:b2:9c:d9:69:96:fb:35:27:
                    94:e6:5a:8f:dd:c2:8e:6b:c2:1a:2f:64:35:6e:95:
                    e5:05:b6:d1:a1:a8:d7:db:ed:b9:8b:36:4c:42:fd:
                    49:70:34:20:eb:9c:62:b6:20:4b:c1:2d:95:0e:fe:
                    c4:c8:1e:64:f2:fd:f6:c2:5c:14:38:77:d2:5a:d3:
                    35:6f:e7:84:74:57:c8:c2:dc:5b:1d:59:92:ad:01:
                    97:83:bc:f1:5d:70:ee:34:c0:04:94:8d:db:e5:bc:
                    20:83:e1:80:b7:90:b3:85:8f:d9:6e:72:d7:dd:f5:
                    e0:8b:0e:5c:2f:db:e9:97:a5:6d:b9:e1:1f:10:70:
                    76:2c:47:7b:2e:dd:d1:72:a9:9c:d0:ba:bb:94:5d:
                    33:cc:09:0f:3a:8e:43:33:c5:fe:81:b2:5e:23:67:
                    32:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:72:CA:1F:C1:A6:D3:EC:3E:7F:E4:81:E9:EF:9B:00:4A:C6:9E:1E
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:d2:1e:cb:d9:e2:b1:46:4a:18:6e:8c:f8:43:b5:00:9b:
         92:e6:b1:7d:51:65:72:07:c4:ef:56:b8:4d:26:f0:03:d6:23:
         d5:a5:b7:45:6b:83:66:27:0a:77:e2:8b:94:7d:c4:7c:55:2b:
         ad:f7:77:65:b9:d3:fc:78:e9:15:88:21:73:6d:36:53:df:c0:
         84:a6:bd:fa:ef:df:16:a4:77:0d:d1:99:24:96:69:50:59:4a:
         21:2a:11:71:0b:f5:b8:a8:4e:9b:53:aa:22:0c:2e:f3:cb:92:
         8f:e5:3c:64:ef:45:45:34:6d:bd:f3:e2:9d:e9:8f:3b:81:ff:
         0c:16:e5:ac:c8:57:97:ff:e7:e4:4a:b3:bb:94:e8:99:a0:28:
         80:19:21:75:e3:71:87:d3:9e:ff:70:2c:a2:7c:fc:ba:ce:67:
         fd:1d:d1:e3:bb:c4:15:80:29:34:35:f9:03:a5:33:5b:bd:4b:
         d5:d0:34:1c:20:aa:47:82:50:f1:c6:36:f0:ad:96:65:d8:8d:
         66:40:ab:8a:13:76:59:24:71:b7:7e:88:d7:af:3c:ff:b4:f9:
         fe:52:0c:d7:3f:65:10:3e:cd:10:64:fa:84:9f:d5:5a:97:09:
         23:29:6f:d6:cd:d6:36:82:e0:5c:09:cc:3f:6d:80:4e:6c:b4:
         c5:61:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----