Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138195.roa
File:                     AS138195.roa (raw, json)
Hash identifier:          aX7Yod9qES8E9MF/mnbE0mwWJgJAtnUwjU2HjFf+cE8=
Subject key identifier:   B7:18:05:52:76:8C:8D:F5:6F:A0:C3:95:ED:CC:A8:B0:E3:E2:24:18
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4E63E7CED5A034D4D44A6AC669D768B362123217
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138195.roa
Signing time:             Tue 12 Apr 2022 17:49:52 +0000
ROA not before:           Tue 12 Apr 2022 17:44:52 +0000
ROA not after:            Tue 11 Apr 2023 17:49:52 +0000
asID:                     138195
IP address blocks:        193.58.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:63:e7:ce:d5:a0:34:d4:d4:4a:6a:c6:69:d7:68:b3:62:12:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 12 17:44:52 2022 GMT
            Not After : Apr 11 17:49:52 2023 GMT
        Subject: CN=3082010A0282010100AB6630B8650E56884D6489A9BB414D5F3B1E1FC347750DCE6AFC0ACBEFF6FDCED8AA912F162AB2CF3416773A26406151742457F6584DF3087E9A752818903F3820843C2E52050437FD09B8E66B391A7A3CDFB6FF7726150073F5F12D262DFBAC28B981B1195DAAD369BAC89365DA282FC95FA44A3A83A2BF9280D8C5B45402D08B57684C21FB3900957BEB260993EAF4607413DEE5FFF070932696BE70EA6141E634F53CF3EAE3DB36923FBED69E255642C9BC910A3898DD0141A2A04A975482FC1AEBFDC61FB240210A199A51E405C7F12C29CAAACD752FDB50CE7D8089F71AD0C614D6262FA673A466D1EEE19479378423D3C9CB2232CFC7A3BB54B1EA81E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:30:b8:65:0e:56:88:4d:64:89:a9:bb:41:
                    4d:5f:3b:1e:1f:c3:47:75:0d:ce:6a:fc:0a:cb:ef:
                    f6:fd:ce:d8:aa:91:2f:16:2a:b2:cf:34:16:77:3a:
                    26:40:61:51:74:24:57:f6:58:4d:f3:08:7e:9a:75:
                    28:18:90:3f:38:20:84:3c:2e:52:05:04:37:fd:09:
                    b8:e6:6b:39:1a:7a:3c:df:b6:ff:77:26:15:00:73:
                    f5:f1:2d:26:2d:fb:ac:28:b9:81:b1:19:5d:aa:d3:
                    69:ba:c8:93:65:da:28:2f:c9:5f:a4:4a:3a:83:a2:
                    bf:92:80:d8:c5:b4:54:02:d0:8b:57:68:4c:21:fb:
                    39:00:95:7b:eb:26:09:93:ea:f4:60:74:13:de:e5:
                    ff:f0:70:93:26:96:be:70:ea:61:41:e6:34:f5:3c:
                    f3:ea:e3:db:36:92:3f:be:d6:9e:25:56:42:c9:bc:
                    91:0a:38:98:dd:01:41:a2:a0:4a:97:54:82:fc:1a:
                    eb:fd:c6:1f:b2:40:21:0a:19:9a:51:e4:05:c7:f1:
                    2c:29:ca:aa:cd:75:2f:db:50:ce:7d:80:89:f7:1a:
                    d0:c6:14:d6:26:2f:a6:73:a4:66:d1:ee:e1:94:79:
                    37:84:23:d3:c9:cb:22:32:cf:c7:a3:bb:54:b1:ea:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:05:52:76:8C:8D:F5:6F:A0:C3:95:ED:CC:A8:B0:E3:E2:24:18
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS138195.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:a0:6c:ac:07:42:c7:e7:01:89:78:c8:14:13:6b:9c:f8:
         35:16:15:73:b9:98:e2:a2:1f:0e:30:33:6e:f8:ab:f5:d3:6d:
         2f:73:a9:72:34:69:02:4b:6c:bd:9d:d5:52:f1:37:0a:6b:9f:
         8e:ef:b7:20:f8:c7:f2:32:66:31:72:44:48:24:2b:5a:30:4f:
         9d:3d:d8:c7:53:80:37:0d:41:44:b3:d9:67:b2:a0:81:d7:1f:
         cb:9f:f4:14:c3:a5:05:56:d4:da:83:0a:0a:35:78:6a:f3:0b:
         c4:53:6c:fa:c9:a3:d0:3f:e4:7a:6a:1b:9e:5e:3b:73:0f:d7:
         aa:db:f0:fa:00:15:4a:2c:3b:89:f9:82:76:96:43:32:9b:ee:
         0b:1c:eb:f9:64:41:21:4a:9e:7f:c7:2d:03:f4:60:ee:b4:15:
         81:9c:83:02:fa:f2:00:3b:b5:2c:37:3c:d2:d7:e2:a6:ee:f4:
         b6:f6:a7:5e:ff:07:d1:8a:0a:1d:e6:b9:27:b5:b4:7d:b9:b8:
         76:f5:45:9f:8e:10:d8:fe:7c:75:3d:4f:46:0e:ba:8b:e4:c7:
         dc:1c:06:c1:08:36:cd:aa:9e:ea:a1:f2:ab:05:2a:fc:41:8e:
         a4:9f:02:ef:63:df:46:68:05:c5:76:75:03:96:0c:10:ec:9f:
         82:1f:83:1b
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUTmPnztWgNNTUSmrGaddos2ISMhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjA0MTIxNzQ0NTJaFw0yMzA0MTExNzQ5NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI2NjMwQjg2NTBFNTY4ODRE
NjQ4OUE5QkI0MTRENUYzQjFFMUZDMzQ3NzUwRENFNkFGQzBBQ0JFRkY2RkRDRUQ4
QUE5MTJGMTYyQUIyQ0YzNDE2NzczQTI2NDA2MTUxNzQyNDU3RjY1ODRERjMwODdF
OUE3NTI4MTg5MDNGMzgyMDg0M0MyRTUyMDUwNDM3RkQwOUI4RTY2QjM5MUE3QTND
REZCNkZGNzcyNjE1MDA3M0Y1RjEyRDI2MkRGQkFDMjhCOTgxQjExOTVEQUFEMzY5
QkFDODkzNjVEQTI4MkZDOTVGQTQ0QTNBODNBMkJGOTI4MEQ4QzVCNDU0MDJEMDhC
NTc2ODRDMjFGQjM5MDA5NTdCRUIyNjA5OTNFQUY0NjA3NDEzREVFNUZGRjA3MDkz
MjY5NkJFNzBFQTYxNDFFNjM0RjUzQ0YzRUFFM0RCMzY5MjNGQkVENjlFMjU1NjQy
QzlCQzkxMEEzODk4REQwMTQxQTJBMDRBOTc1NDgyRkMxQUVCRkRDNjFGQjI0MDIx
MEExOTlBNTFFNDA1QzdGMTJDMjlDQUFBQ0Q3NTJGREI1MENFN0Q4MDg5RjcxQUQw
QzYxNEQ2MjYyRkE2NzNBNDY2RDFFRUUxOTQ3OTM3ODQyM0QzQzlDQjIyMzJDRkM3
QTNCQjU0QjFFQTgxRTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq2YwuGUOVohNZImpu0FNXzseH8NHdQ3OavwKy+/2/c7YqpEvFiqy
zzQWdzomQGFRdCRX9lhN8wh+mnUoGJA/OCCEPC5SBQQ3/Qm45ms5Gno837b/dyYV
AHP18S0mLfusKLmBsRldqtNpusiTZdooL8lfpEo6g6K/koDYxbRUAtCLV2hMIfs5
AJV76yYJk+r0YHQT3uX/8HCTJpa+cOphQeY09Tzz6uPbNpI/vtaeJVZCybyRCjiY
3QFBoqBKl1SC/Brr/cYfskAhChmaUeQFx/EsKcqqzXUv21DOfYCJ9xrQxhTWJi+m
c6Rm0e7hlHk3hCPTycsiMs/Ho7tUseqB5QIDAQABo4ICJjCCAiIwHQYDVR0OBBYE
FLcYBVJ2jI31b6DDle3MqLDj4iQYMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxMzgxOTUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADBOmswDQYJKoZIhvcNAQELBQADggEBAGzOoGysB0LH5wGJeMgUE2uc+DUW
FXO5mOKiHw4wM274q/XTbS9zqXI0aQJLbL2d1VLxNwprn47vtyD4x/IyZjFyREgk
K1owT5092MdTgDcNQUSz2WeyoIHXH8uf9BTDpQVW1NqDCgo1eGrzC8RTbPrJo9A/
5HpqG55eO3MP16rb8PoAFUosO4n5gnaWQzKb7gsc6/lkQSFKnn/HLQP0YO60FYGc
gwL68gA7tSw3PNLX4qbu9Lb2p17/B9GKCh3muSe1tH25uHb1RZ+OENj+fHU9T0YO
uovkx9wcBsEINs2qnuqh8qsFKvxBjqSfAu9j30ZoBcV2dQOWDBDsn4Ifgxs=
-----END CERTIFICATE-----