Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13768.roa
File:                     AS13768.roa (raw, json)
Hash identifier:          WQx7B/E0i1ZU5RssxGs6U0xq1oX1tG8J67J4SAXWqh8=
Subject key identifier:   67:9E:DC:14:AB:2F:36:B9:0D:8D:C6:64:13:99:11:9A:F8:E2:43:E2
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6C8A06AE5712076B4BFB8F646D7590718668D504
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13768.roa
Signing time:             Sun 12 Jun 2022 12:17:56 +0000
ROA not before:           Sun 12 Jun 2022 12:12:56 +0000
ROA not after:            Sun 11 Jun 2023 12:17:56 +0000
asID:                     13768
IP address blocks:        181.215.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8a:06:ae:57:12:07:6b:4b:fb:8f:64:6d:75:90:71:86:68:d5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 12 12:12:56 2022 GMT
            Not After : Jun 11 12:17:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:9f:a2:21:0b:75:24:91:04:e6:60:67:3c:
                    14:aa:38:40:37:f0:37:f0:fc:49:1d:06:22:8e:30:
                    a3:20:bd:9b:5c:d1:13:d3:00:e0:ed:5c:ac:f0:0a:
                    72:4f:cf:2a:4f:7e:72:fb:de:2a:fe:bc:c8:33:11:
                    1f:0a:19:b2:50:b6:5e:e0:fb:d1:c1:4d:40:a6:8d:
                    cf:c7:f2:41:16:5a:de:f2:6e:c9:aa:2a:18:11:24:
                    6c:70:65:a3:85:1a:f7:9c:7b:69:07:d8:a3:c2:7c:
                    d2:46:f3:0b:48:11:d5:3a:65:b3:75:4a:10:0c:d8:
                    8c:20:2d:38:81:e8:d9:d2:7e:58:35:9e:66:72:d9:
                    1b:ae:bb:e5:05:ad:84:df:7b:4d:e9:07:20:b2:c8:
                    77:dc:44:2c:60:c5:76:c8:a2:13:96:9d:a9:1f:99:
                    c7:f5:fb:b5:83:04:2a:23:54:37:14:d2:60:1f:59:
                    66:c8:a7:33:91:c5:43:c6:ad:e8:57:07:43:c2:c4:
                    bd:d1:5f:c8:24:14:45:c3:0b:ab:67:e6:49:d2:7d:
                    2f:19:10:45:38:ad:69:06:a4:84:e6:d3:3f:14:e2:
                    d2:55:21:99:32:67:01:6f:42:09:1f:c0:e0:a1:dd:
                    b8:63:a0:77:5d:37:ff:b3:8e:b6:90:00:96:66:4e:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:DC:14:AB:2F:36:B9:0D:8D:C6:64:13:99:11:9A:F8:E2:43:E2
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS13768.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:70:12:75:27:db:8c:38:6d:98:5c:d4:0c:48:c2:4a:e1:bf:
         5e:a5:40:63:82:0c:f7:6a:94:87:8d:2d:38:40:0b:17:7a:d2:
         b7:c0:29:80:33:c6:75:14:7e:00:4b:83:11:78:f1:1d:b4:3f:
         d7:21:bf:31:13:3f:a6:5e:98:55:3e:7d:e3:0c:39:e7:2c:14:
         8a:62:9c:d1:c4:9d:74:4a:c3:60:93:f9:3f:c3:d6:d1:a5:62:
         0f:34:14:d7:5c:10:c6:d7:9b:a8:a3:5d:1a:cf:34:50:01:72:
         29:6f:10:4c:ec:6f:2a:20:39:5a:7e:f2:f7:08:17:2e:67:78:
         92:e8:82:2b:a5:4f:05:a4:6e:d0:71:78:1a:a1:9c:f5:80:d2:
         5c:b1:49:95:7f:24:5c:ea:9e:b2:94:83:44:36:89:6f:09:61:
         fe:cc:c3:83:14:62:7e:40:5c:79:84:62:59:d4:7d:83:dc:37:
         fa:75:00:fe:05:db:d9:f1:9f:50:c7:7b:e3:45:04:2b:f9:b4:
         da:89:69:c5:bd:97:da:98:e2:04:47:0e:33:3d:87:a9:db:82:
         e3:c2:a4:a6:17:a1:c3:2a:09:15:0c:e9:2b:17:28:3c:49:4a:
         bf:00:72:f5:a8:36:9c:6b:e7:0e:ec:f2:a8:0e:c8:0c:e2:f5:
         81:31:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----