Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a3a2f34382d3438203d3e2039303039.roa
File:                     326130613a636530343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          c8MeOIbrvtv8thtZZ/9HOeMrJvuI1hJM7PXVWoH/HA4=
Subject key identifier:   9F:D6:0F:95:DE:EF:5D:46:46:AF:4D:C9:B5:A0:B9:24:AA:F1:98:5F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4D50ACD49C3045934293A4AC6252A8A5B9D66FEC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Mon 29 Nov 2021 08:24:26 +0000
ROA not before:           Mon 29 Nov 2021 08:19:26 +0000
ROA not after:            Mon 28 Nov 2022 08:24:26 +0000
asID:                     9009
IP address blocks:        2a0a:ce04::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:50:ac:d4:9c:30:45:93:42:93:a4:ac:62:52:a8:a5:b9:d6:6f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:19:26 2021 GMT
            Not After : Nov 28 08:24:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:a6:2d:f4:af:7a:9f:25:1f:49:c9:74:99:
                    55:6a:0c:56:53:4d:d6:09:e7:bf:a3:49:dd:3c:d6:
                    68:42:4b:9e:29:ea:72:9b:cb:0a:41:a4:4a:e0:09:
                    01:35:e5:6f:0f:18:df:20:0a:85:73:c7:52:63:ea:
                    0e:a2:0d:78:61:58:f2:9e:5d:62:2e:f2:23:23:52:
                    e3:28:b1:76:6e:76:28:c8:41:c9:61:9d:ba:78:00:
                    6c:48:1e:8a:43:1a:e8:f9:fe:3e:a4:95:74:ee:0f:
                    12:16:56:53:bc:e9:d7:36:42:8b:81:a7:ec:0b:43:
                    40:64:b9:f8:a8:3b:9c:8a:e6:e8:9f:fb:56:5b:8e:
                    f1:4b:dd:84:84:6c:5e:75:2c:9c:b0:31:c0:98:fc:
                    cf:12:d4:c0:8e:33:90:6b:b6:80:bc:74:2f:2b:0d:
                    f4:37:04:04:46:a9:a2:77:18:cd:a9:3b:4b:20:db:
                    99:43:9b:52:c0:a0:3b:78:b5:bc:65:aa:29:aa:8a:
                    47:a4:11:c2:47:39:90:25:84:8d:f9:52:a5:58:84:
                    bd:49:f4:44:ef:e9:60:f5:af:ca:81:dd:ef:bf:0a:
                    a0:39:73:11:d1:ac:47:75:c0:6e:48:6e:d5:11:23:
                    36:e5:dc:c8:19:74:9e:36:2d:ea:cf:28:6c:18:8f:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D6:0F:95:DE:EF:5D:46:46:AF:4D:C9:B5:A0:B9:24:AA:F1:98:5F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130613a636530343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:ce04::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:85:eb:7d:c4:3e:0a:cb:2e:31:84:62:b6:15:52:96:65:a7:
         59:02:9a:9b:2a:29:a6:24:4f:cf:0e:57:ff:a6:58:04:c6:20:
         64:e3:c0:90:7f:56:c6:7c:fb:60:83:bc:2e:d1:35:84:ce:b0:
         42:d8:22:bc:ee:a0:80:c2:94:3c:c6:26:8b:64:38:e5:63:2a:
         a7:b8:e3:a1:e2:18:53:60:3b:11:c7:2f:28:8a:68:a0:5d:aa:
         11:75:d7:bc:1d:80:3a:66:a5:41:ca:e4:ba:04:1b:5d:2a:36:
         2f:3a:64:48:dc:82:9e:6a:d4:ee:1d:df:82:85:d2:7e:5d:44:
         5f:dd:78:47:9e:c1:e6:f1:d5:55:31:2c:31:fc:9e:8e:36:cb:
         40:ce:75:1d:b5:a3:4e:4f:b6:74:99:a8:03:aa:af:7d:98:c9:
         5a:e5:cc:2e:ff:c3:9c:4b:89:4a:66:09:68:0e:21:af:a0:5f:
         11:0c:74:0c:cd:26:f1:7d:5d:9c:84:60:32:a3:bb:db:aa:4f:
         63:73:55:dc:58:c4:45:11:f7:39:98:78:d6:be:d4:3b:b7:16:
         40:c5:7f:85:9e:09:0f:76:ff:d5:f5:37:a7:6c:c5:a9:c2:31:
         a3:fc:ef:8b:1d:88:64:b1:af:c4:bf:21:60:35:da:41:95:5f:
         77:52:49:5f
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUTVCs1JwwRZNCk6SsYlKopbnWb+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwODE5MjZaFw0yMjExMjgwODI0MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQwN0E2MkRGNEFGN0E5RjI1
MUY0OUM5NzQ5OTU1NkEwQzU2NTM0REQ2MDlFN0JGQTM0OUREM0NENjY4NDI0QjlF
MjlFQTcyOUJDQjBBNDFBNDRBRTAwOTAxMzVFNTZGMEYxOERGMjAwQTg1NzNDNzUy
NjNFQTBFQTIwRDc4NjE1OEYyOUU1RDYyMkVGMjIzMjM1MkUzMjhCMTc2NkU3NjI4
Qzg0MUM5NjE5REJBNzgwMDZDNDgxRThBNDMxQUU4RjlGRTNFQTQ5NTc0RUUwRjEy
MTY1NjUzQkNFOUQ3MzY0MjhCODFBN0VDMEI0MzQwNjRCOUY4QTgzQjlDOEFFNkU4
OUZGQjU2NUI4RUYxNEJERDg0ODQ2QzVFNzUyQzlDQjAzMUMwOThGQ0NGMTJENEMw
OEUzMzkwNkJCNjgwQkM3NDJGMkIwREY0MzcwNDA0NDZBOUEyNzcxOENEQTkzQjRC
MjBEQjk5NDM5QjUyQzBBMDNCNzhCNUJDNjVBQTI5QUE4QTQ3QTQxMUMyNDczOTkw
MjU4NDhERjk1MkE1NTg4NEJENDlGNDQ0RUZFOTYwRjVBRkNBODFEREVGQkYwQUEw
Mzk3MzExRDFBQzQ3NzVDMDZFNDg2RUQ1MTEyMzM2RTVEQ0M4MTk3NDlFMzYyREVB
Q0YyODZDMTg4RjU4NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvQemLfSvep8lH0nJdJlVagxWU03WCee/o0ndPNZoQkueKepym8sK
QaRK4AkBNeVvDxjfIAqFc8dSY+oOog14YVjynl1iLvIjI1LjKLF2bnYoyEHJYZ26
eABsSB6KQxro+f4+pJV07g8SFlZTvOnXNkKLgafsC0NAZLn4qDuciubon/tWW47x
S92EhGxedSycsDHAmPzPEtTAjjOQa7aAvHQvKw30NwQERqmidxjNqTtLINuZQ5tS
wKA7eLW8ZaopqopHpBHCRzmQJYSN+VKlWIS9SfRE7+lg9a/Kgd3vvwqgOXMR0axH
dcBuSG7VESM25dzIGXSeNi3qzyhsGI9YQwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FJ/WD5Xe711GRq9NybWguSSq8ZhfMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zMjYxMzA2MTNh
NjM2NTMwMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoKzgQAADANBgkqhkiG9w0BAQsFAAOCAQEAYYXrfcQ+CssuMYRithVSlmWn
WQKamyoppiRPzw5X/6ZYBMYgZOPAkH9Wxnz7YIO8LtE1hM6wQtgivO6ggMKUPMYm
i2Q45WMqp7jjoeIYU2A7EccvKIpooF2qEXXXvB2AOmalQcrkugQbXSo2LzpkSNyC
nmrU7h3fgoXSfl1EX914R57B5vHVVTEsMfyejjbLQM51HbWjTk+2dJmoA6qvfZjJ
WuXMLv/DnEuJSmYJaA4hr6BfEQx0DM0m8X1dnIRgMqO726pPY3NV3FjERRH3OZh4
1r7UO7cWQMV/hZ4JD3b/1fU3p2zFqcIxo/zvix2IZLGvxL8hYDXaQZVfd1JJXw==
-----END CERTIFICATE-----