Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139311.roa
File:                     AS139311.roa (raw, json)
Hash identifier:          rfwl7E9i+nm49OnZ1ypUqflFidlI/ykNS/gv8b6JSVs=
Subject key identifier:   A0:95:5F:A9:1B:C3:6F:FE:79:E6:C5:85:87:C0:31:3D:C0:0A:43:BB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7A0CF62F43398E59A139EA04C88EBE8D98EF4D51
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139311.roa
Signing time:             Thu 07 Apr 2022 21:14:06 +0000
ROA not before:           Thu 07 Apr 2022 21:09:06 +0000
ROA not after:            Thu 06 Apr 2023 21:14:06 +0000
asID:                     139311
IP address blocks:        45.89.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0c:f6:2f:43:39:8e:59:a1:39:ea:04:c8:8e:be:8d:98:ef:4d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr  7 21:09:06 2022 GMT
            Not After : Apr  6 21:14:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7f:68:c4:ff:73:1b:d8:de:48:a0:36:f9:0f:
                    12:6b:6d:94:f2:c0:1c:db:9e:d5:7a:29:1c:da:4e:
                    b1:6f:14:74:fa:be:fa:68:99:80:64:90:66:74:4c:
                    31:df:b3:b0:28:e6:e2:d5:da:b4:f7:3b:59:ab:a0:
                    58:35:36:8b:a1:21:ad:95:3c:27:bd:08:1f:95:c2:
                    17:c3:30:e0:c9:ae:17:fa:cb:79:ec:3b:69:2a:b6:
                    13:a4:f4:d7:c6:d9:5b:66:2d:0c:12:5c:d6:20:f4:
                    fa:32:9f:83:64:77:56:25:da:27:18:ce:35:c7:00:
                    38:f5:8f:df:8b:bd:02:81:cf:88:4f:6a:88:cd:7f:
                    58:45:32:b9:c3:74:f7:6f:41:10:75:e7:35:db:1b:
                    96:d5:50:2d:ee:1b:f5:be:54:b2:8b:a7:61:23:3f:
                    a9:12:43:5b:d6:14:4a:1c:5d:a1:f9:81:a5:26:67:
                    4f:4d:05:47:d5:1b:c7:75:33:10:ce:53:c1:58:cd:
                    b2:03:aa:2a:cb:ec:6a:4d:43:ba:90:7b:a3:39:4d:
                    94:da:6e:63:d6:f3:b5:36:33:a0:da:cc:98:0d:e6:
                    98:aa:da:4b:36:ac:aa:cf:0c:a1:a6:7b:8a:16:74:
                    46:cf:da:cc:51:b3:56:ff:a5:e9:b6:0b:88:1f:8a:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:5F:A9:1B:C3:6F:FE:79:E6:C5:85:87:C0:31:3D:C0:0A:43:BB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:6e:14:72:e8:4b:fa:e7:ef:95:cc:fe:eb:8b:79:24:f1:
         2f:ea:4d:55:2b:c4:6d:b4:b8:46:5f:9e:55:77:ca:26:46:9f:
         9f:40:56:3d:7a:a3:11:bc:75:2d:08:1f:a4:75:28:51:c0:b9:
         bc:7a:d0:02:96:ab:ee:91:fd:fb:b1:c0:84:94:a5:b9:f2:89:
         a4:80:00:c4:ff:7c:81:8f:82:ba:34:44:ae:c7:8d:cf:c3:c7:
         e3:91:3b:2d:08:9f:c4:af:56:fa:a0:31:48:de:20:9b:22:e2:
         c8:ea:52:17:5c:e7:2e:cb:ea:89:96:87:d5:fd:83:60:80:f4:
         be:7d:ee:97:5f:75:e1:16:37:1a:d5:01:c4:96:da:3f:ae:ba:
         77:ef:7b:36:1a:18:95:9c:6d:4f:79:d2:54:a1:6f:43:c8:94:
         82:90:4f:6e:d6:3f:cd:5d:53:d2:34:dc:af:e7:0c:03:de:ac:
         c2:66:81:cd:4d:06:a3:06:eb:fa:68:0e:6c:7f:92:2b:55:7a:
         ac:ed:b4:f2:65:89:fd:16:2e:fa:a1:0c:0a:89:67:30:98:71:
         28:12:6e:09:b9:bb:fc:91:80:f8:01:8e:09:19:0c:46:da:59:
         52:35:b6:24:54:a3:80:ae:21:63:f1:da:ba:70:ee:fb:7c:f4:
         50:eb:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----