Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13627.roa
File:                     AS13627.roa (raw, json)
Hash identifier:          N3JNgMgT0qDGkM43p0x03JrbuslN+2nd+mPxmiDc4ss=
Subject key identifier:   41:F3:41:EB:1A:6E:47:D4:BF:7C:72:66:52:5B:7A:43:1B:FA:B3:B8
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       616DB7959093C675F2146F588D321B5EF2EE2A7B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13627.roa
Signing time:             Tue 07 Jun 2022 14:03:58 +0000
ROA not before:           Tue 07 Jun 2022 13:58:58 +0000
ROA not after:            Tue 06 Jun 2023 14:03:58 +0000
asID:                     13627
IP address blocks:        185.137.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6d:b7:95:90:93:c6:75:f2:14:6f:58:8d:32:1b:5e:f2:ee:2a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  7 13:58:58 2022 GMT
            Not After : Jun  6 14:03:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:34:e5:66:ff:47:b7:c9:ce:5b:6c:85:85:
                    f5:e4:05:6c:8b:34:38:d4:1c:b0:4c:1a:c3:62:14:
                    a0:eb:60:e8:8b:e6:54:37:d4:95:8a:a5:9f:fc:3a:
                    9a:b1:57:5e:0b:3a:3b:25:e1:1e:6c:1b:96:58:9f:
                    49:5d:6e:b1:c5:cf:5c:c2:93:cf:19:31:8d:80:7d:
                    76:ed:6f:71:c5:af:f1:7b:43:7d:3a:e3:18:ff:be:
                    a1:77:53:d9:a3:96:84:a3:10:36:a3:3f:78:87:57:
                    8c:b4:85:ae:9b:9b:f3:b9:e8:5f:1d:0d:49:7c:f1:
                    71:da:67:e8:7d:cf:e5:f7:4f:cc:34:b3:e8:4d:bb:
                    57:d3:31:ac:31:e6:bc:27:79:7f:d3:0b:4a:c7:d0:
                    2b:98:3e:06:06:a5:c6:2c:98:c1:77:25:2e:35:ce:
                    46:c2:e1:72:21:86:a8:00:fd:c4:72:9f:0e:96:b0:
                    59:df:3a:8a:ad:87:62:26:d4:ef:8a:60:0d:3c:fc:
                    5c:bd:31:41:01:61:35:af:1a:31:44:db:97:68:bc:
                    8e:4b:05:6e:68:0d:3e:4d:03:92:2b:75:c2:47:65:
                    99:52:54:d2:09:dc:62:41:61:2d:e2:9c:0c:6c:f6:
                    30:55:c1:cc:43:0a:36:82:af:9e:56:36:79:80:b3:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:41:EB:1A:6E:47:D4:BF:7C:72:66:52:5B:7A:43:1B:FA:B3:B8
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:0e:cd:0f:da:b5:74:73:0f:f1:2e:78:5b:d4:54:c0:a5:
         9e:f9:86:44:4e:81:d1:23:f6:11:e9:50:b2:5d:fe:18:d5:a6:
         b7:14:df:65:cb:c1:e9:ab:19:d1:9e:21:d2:54:f6:c8:07:86:
         f7:e3:0e:e8:2d:98:cd:07:63:fc:d0:05:9a:5d:39:ae:3f:69:
         29:90:0f:cf:1a:af:9e:3a:e1:3d:33:02:7a:3b:7b:21:89:ee:
         02:bb:41:b8:73:6c:5d:73:a7:eb:ed:ca:90:f7:93:99:20:27:
         32:3b:4a:09:7e:c9:ab:00:2b:65:3b:3a:6c:37:ae:01:21:e4:
         83:ee:6a:59:46:be:16:6a:a0:9f:a3:73:86:05:34:d8:67:2c:
         a3:2d:ec:3f:d3:1b:bf:79:db:a5:ba:da:cb:8d:3b:dc:f2:28:
         59:2a:14:af:f4:d3:76:65:c5:cc:e3:f6:4d:54:68:0a:28:4a:
         e3:c7:88:d6:b3:7a:d8:0f:ce:e4:55:26:23:eb:15:ad:af:0f:
         76:3e:58:b9:16:bc:23:cd:f9:3a:c7:73:e4:26:ec:ef:56:b9:
         1c:47:d0:69:47:1e:57:22:1f:1d:b0:34:df:e4:26:a4:0b:21:
         c6:11:7c:d8:4a:7f:1d:17:cc:a5:10:3c:94:2d:5b:11:52:63:
         38:b7:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----