Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12735.roa
File:                     AS12735.roa (raw, json)
Hash identifier:          hPYR5qOuP5PCAmZqP7P1E1xJnNcyL9LvMCRFLP6xARc=
Subject key identifier:   20:76:CE:39:3C:5A:0D:21:69:8D:87:90:57:7F:C8:71:A0:50:A0:34
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       45E3AFF85CAD8900B3A599E7017D778D5582502A
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12735.roa
Signing time:             Wed 04 May 2022 08:29:43 +0000
ROA not before:           Wed 04 May 2022 08:24:43 +0000
ROA not after:            Wed 03 May 2023 08:29:43 +0000
asID:                     12735
IP address blocks:        92.119.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e3:af:f8:5c:ad:89:00:b3:a5:99:e7:01:7d:77:8d:55:82:50:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: May  4 08:24:43 2022 GMT
            Not After : May  3 08:29:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:4a:19:23:06:c1:8a:59:05:ee:07:97:6e:
                    59:5d:71:af:45:d4:80:e7:6b:d3:3e:40:4d:75:fc:
                    6b:d6:49:34:cf:b7:60:20:ff:10:00:9a:da:c8:de:
                    d3:bd:29:e2:6e:40:05:c5:56:4e:7d:3f:88:ce:e0:
                    f0:d2:52:ea:3d:a4:31:ef:ad:02:47:71:7c:79:51:
                    dd:3d:93:c2:52:4f:eb:46:7b:ca:5b:d2:70:75:99:
                    83:89:af:2f:35:28:df:30:e2:9b:fb:f7:12:7a:ae:
                    13:fd:c8:c3:68:a8:af:5f:58:d4:a6:dc:7b:cc:0b:
                    9a:13:4d:f7:fd:09:39:79:e8:46:27:0a:81:c3:6d:
                    1e:e4:46:8e:68:17:0b:f5:76:76:62:b0:f7:67:55:
                    42:b9:b3:7a:f4:49:6a:1b:8d:9d:0a:86:d2:e0:16:
                    a6:26:d7:f9:de:c9:27:f4:13:bd:86:c7:97:35:e1:
                    b2:11:7d:ae:52:96:d2:8e:02:8e:91:a7:b8:aa:7f:
                    9c:a6:82:f7:de:65:82:89:3c:98:13:3e:0d:49:79:
                    ed:ce:30:72:0f:8c:dc:73:3e:ee:fa:19:39:84:27:
                    80:9d:ad:70:e4:d1:b6:00:b4:87:e1:ca:5a:a2:a8:
                    ab:78:36:e9:33:57:9b:f6:b7:74:b3:7a:6c:d2:1e:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:CE:39:3C:5A:0D:21:69:8D:87:90:57:7F:C8:71:A0:50:A0:34
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c7:86:2d:69:84:fb:d0:03:54:9e:93:dc:c7:c6:94:3f:30:
         a4:ec:67:86:14:2d:05:49:9b:2f:5b:94:94:77:ac:d9:f0:dc:
         48:81:39:25:94:a4:fa:99:f4:5a:a7:cc:e0:db:0e:b9:69:3b:
         00:ee:78:82:36:7c:71:1d:01:43:29:52:83:6f:56:d2:3e:0d:
         66:19:ea:63:7e:24:01:d6:cf:58:2a:c9:a9:0c:20:cb:cf:98:
         a8:16:3f:71:12:64:21:f9:d7:ac:03:25:8e:0e:eb:34:f0:b6:
         b9:2e:9b:21:8d:6b:ed:db:07:95:43:6d:85:40:4d:5c:cf:19:
         5d:ee:63:64:12:8f:b0:bb:93:d6:8c:03:9b:c0:d1:92:ce:c1:
         f0:74:d4:2d:e3:9d:3d:69:35:6e:99:7f:a0:a6:c3:21:f9:2e:
         0c:99:49:45:97:8c:e2:bc:2f:e2:d2:2f:37:b8:da:f2:13:0b:
         e9:7d:66:5f:68:91:77:13:5e:3e:3e:b5:02:8a:8e:7f:91:a1:
         3f:9e:05:46:9c:28:8b:14:5d:5c:38:26:d4:20:e4:0f:92:a0:
         64:c8:a9:c7:c3:f6:d2:a7:98:f1:87:f4:e7:be:7f:ba:04:4a:
         5c:ec:8b:bb:fb:49:d3:25:c2:82:52:bf:48:17:41:da:33:32:
         ef:ea:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----