Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a376130303a3a2f32392d3438203d3e203631333137.roa
File:                     326130613a376130303a3a2f32392d3438203d3e203631333137.roa (raw, json)
Hash identifier:          RXxICvRlqe2qvgLvJkceyLApQstRH33pJAdskjNrn4M=
Subject key identifier:   E3:41:4D:DE:8A:45:73:1B:94:F0:21:77:13:AA:A1:23:AE:29:C6:21
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       210EF42B8D452958F2ED2852865BBDEFD2F8F350
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a376130303a3a2f32392d3438203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:17:41 +0000
ROA not before:           Mon 29 Nov 2021 08:12:41 +0000
ROA not after:            Mon 28 Nov 2022 08:17:41 +0000
asID:                     61317
IP address blocks:        2a0a:7a00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:f4:2b:8d:45:29:58:f2:ed:28:52:86:5b:bd:ef:d2:f8:f3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:12:41 2021 GMT
            Not After : Nov 28 08:17:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:ee:80:3f:72:77:be:c0:3b:36:2a:99:65:
                    5a:95:f9:0f:46:ff:41:fc:4b:01:2a:89:80:fc:96:
                    ef:57:57:bf:69:e8:7e:5a:22:bc:22:a5:33:ea:bc:
                    f0:54:37:14:a4:4a:4d:b8:b4:fc:19:89:0d:aa:42:
                    53:e5:0c:41:07:15:8a:b1:4a:2e:b0:62:1b:2b:85:
                    b6:67:df:46:72:41:d9:51:70:14:91:a0:ac:07:01:
                    42:e1:1c:86:bb:a2:4d:bf:d2:36:f9:b3:88:12:5b:
                    50:38:32:bd:9d:a5:3e:62:48:57:ce:e3:64:dd:72:
                    d5:bc:cb:21:23:5f:bf:17:09:26:60:f1:36:af:af:
                    8c:5f:f6:cb:5c:26:8d:31:09:cc:5c:c8:4d:9a:c8:
                    fa:86:ba:92:65:8d:32:0d:b5:53:ed:83:59:ef:10:
                    fd:ae:43:db:41:7a:9d:a6:5f:9e:f9:ac:1c:50:cd:
                    45:e4:2f:4a:d9:27:57:ec:b2:04:c3:57:05:d5:2c:
                    19:fb:4e:95:85:c0:3a:2f:ca:a8:0d:04:76:01:3c:
                    e7:2d:c8:67:85:47:1b:e8:4a:0c:56:de:6d:0c:02:
                    a8:22:5f:f0:16:90:59:69:67:3b:22:f9:37:64:6d:
                    07:14:77:d5:55:6d:4f:fe:0c:7c:43:c6:b1:46:b5:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:4D:DE:8A:45:73:1B:94:F0:21:77:13:AA:A1:23:AE:29:C6:21
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a376130303a3a2f32392d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:7a00::/29

    Signature Algorithm: sha256WithRSAEncryption
         3e:1c:9c:7e:ab:2d:4a:df:57:f1:f6:9d:50:c4:4d:4b:46:20:
         ee:89:74:61:bc:4a:33:51:36:dc:9f:26:1b:e4:8f:e1:48:d5:
         59:5d:07:b7:a0:0e:6c:3d:ae:b7:38:d0:22:2a:35:27:a1:cc:
         5b:2f:41:74:1d:2f:42:d4:20:2b:82:f9:8e:99:60:3b:1a:9a:
         8d:68:ef:e8:dd:b1:f7:fb:06:6e:32:c5:5e:d5:96:f2:78:1c:
         12:b3:1a:ba:1e:dd:30:95:1e:77:14:01:b5:41:3f:d8:37:d0:
         1e:80:5e:b9:4f:06:3d:35:08:af:9d:43:ed:2e:5a:1f:6f:30:
         6f:57:8d:49:a5:6a:f2:cc:f0:d0:60:28:cc:50:9e:91:17:65:
         9b:07:7a:68:1e:6c:d0:4d:cd:3b:a2:c8:8c:4b:09:79:8d:1c:
         60:81:f0:ee:8c:fb:e8:9e:0c:9a:7b:50:d6:ad:d0:49:fd:4b:
         6f:d8:0e:34:3f:ce:18:a2:64:34:4c:2e:a4:fd:9b:30:c4:cc:
         9f:f3:99:59:a1:b8:21:55:b8:ae:bb:88:a9:5a:f7:a2:92:f2:
         22:be:13:02:f2:73:dc:bd:68:7e:76:84:ce:a7:9b:16:75:79:
         2e:7e:1b:d3:ef:7f:5e:19:e0:b7:43:ed:6d:4d:17:f3:dd:2b:
         b7:19:d5:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----