Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS0.roa
File:                     AS0.roa (raw, json)
Hash identifier:          8kevNRgppzr8AvQFKtuZag8uwg699LM22eTf9bfNKFc=
Subject key identifier:   73:E4:E1:5B:4E:01:56:8E:FE:1E:AA:C9:2A:09:DA:A2:50:3C:55:F2
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       26119397472DE8F1F6326C569C371E9B078D0870
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS0.roa
Signing time:             Mon 28 Mar 2022 12:51:29 +0000
ROA not before:           Mon 28 Mar 2022 12:46:29 +0000
ROA not after:            Mon 27 Mar 2023 12:51:29 +0000
asID:                     0
IP address blocks:        191.96.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:11:93:97:47:2d:e8:f1:f6:32:6c:56:9c:37:1e:9b:07:8d:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 28 12:46:29 2022 GMT
            Not After : Mar 27 12:51:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e5:8b:bb:5b:14:10:de:5c:84:85:26:4b:7b:
                    e6:30:a8:e2:ec:db:6e:68:21:a0:69:68:55:b2:1c:
                    11:96:62:52:40:11:cc:e4:f3:7c:ff:0a:d9:38:d0:
                    1b:f0:36:df:d9:c3:bc:f3:c9:cd:fb:29:73:7e:ec:
                    2c:c2:99:d6:34:23:1e:2b:b3:4e:3a:0e:ba:35:15:
                    85:38:0a:89:a9:14:1b:63:6c:92:51:ef:84:84:e3:
                    18:0c:91:54:26:a4:a8:dd:e3:0a:79:95:12:6f:24:
                    22:e9:8f:76:7c:f8:ad:dc:0c:59:6a:8e:73:3c:ca:
                    3a:0f:3c:91:5a:bb:04:6a:5a:5e:c0:03:6e:b7:1c:
                    c4:d3:c4:7a:c9:11:86:29:67:f1:48:8a:4e:fe:b8:
                    b4:fe:e5:af:30:02:2b:1c:34:21:da:be:6c:81:c3:
                    96:bb:ee:ab:cb:90:68:e4:4c:f1:46:fb:0b:35:04:
                    b1:2b:df:88:20:df:c3:28:c5:d7:b9:b4:89:e4:ca:
                    27:3e:50:a1:9f:c3:57:0e:3a:86:45:fc:6b:0c:0a:
                    ba:72:f9:d2:a4:bf:11:17:92:18:cd:cb:c9:65:1e:
                    6a:24:e4:e2:38:16:c6:f4:8f:d6:41:be:4d:16:c6:
                    21:c2:44:de:25:c9:84:4c:d1:fc:20:58:39:de:8c:
                    4b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:E1:5B:4E:01:56:8E:FE:1E:AA:C9:2A:09:DA:A2:50:3C:55:F2
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS0.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:62:24:b7:64:27:05:9b:92:52:2a:f4:37:1c:1d:57:e2:81:
         58:6f:8c:57:d3:e3:13:a8:14:f5:e2:bb:05:65:8c:20:ea:ef:
         14:70:c6:ed:79:ce:e9:7a:f9:2a:c9:e2:a7:b0:22:00:02:6a:
         b7:31:f1:08:97:98:cb:1b:94:69:e9:47:82:fd:5b:54:c0:22:
         26:2b:24:7c:85:f3:f5:c5:41:c3:54:7f:e9:f8:a8:2a:c8:59:
         27:8d:f7:a7:dc:6b:fa:49:e7:ce:32:56:64:3e:74:38:01:23:
         4a:81:1f:a8:da:c0:c1:a7:32:77:7e:b1:e5:0f:f6:99:ab:82:
         59:2a:f6:42:31:92:56:43:6c:23:30:20:03:8a:80:4c:55:ed:
         ff:cb:7a:a4:de:02:ef:cc:a7:2d:93:bb:18:e0:68:7e:ab:fc:
         16:f7:7c:c4:dd:fa:f1:c2:01:8d:6b:a0:4d:32:4f:a7:55:32:
         bb:24:4a:57:5e:8e:2c:b6:db:32:f6:83:9f:b2:66:42:ab:8f:
         18:ae:05:cf:17:a1:0a:04:88:e3:89:de:ae:1b:f4:a2:3c:d8:
         16:40:81:34:04:2a:a5:64:e2:cb:8a:d0:6e:6c:12:6d:aa:78:
         b8:ae:c8:1d:02:39:a5:8a:72:64:bd:d8:0b:4a:31:90:b9:89:
         62:3e:11:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----