Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139648.roa
File:                     AS139648.roa (raw, json)
Hash identifier:          yTPfLfQqlGVUFqhXj35uOBWjRH/lrS9N23kZMfokSP8=
Subject key identifier:   13:E2:5B:DB:93:4C:D8:0B:43:67:00:3C:CA:E5:2F:4D:CD:8B:94:4A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       648BF1C345940DB203C0878987C82F03EB3BA037
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139648.roa
Signing time:             Wed 13 Apr 2022 11:21:57 +0000
ROA not before:           Wed 13 Apr 2022 11:16:57 +0000
ROA not after:            Wed 12 Apr 2023 11:21:57 +0000
asID:                     139648
IP address blocks:        45.89.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:f1:c3:45:94:0d:b2:03:c0:87:89:87:c8:2f:03:eb:3b:a0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 13 11:16:57 2022 GMT
            Not After : Apr 12 11:21:57 2023 GMT
        Subject: CN=3082010A02820101009A24ED77C0D0F409604038B153F0F58D0E2C3811B558FCD3D642A6E611E4FBEC401427496D049754C84C5B40EEDB11C9E93A81E479CB893AACC118E1B238500B7D1FA68C032652BF7389C82A0D3E4C7DD043659C857D58831BA2501B0C8EC6277A147E42C09F205AA46395A0329BBBD349DDBFC549EAD77864B16913ED46F2B441596E4923BCBEDD0505CD8EFBB423F073E78A27A2B922757BFBBA2F8F5C5069A71608BE7659C8D3073B201004C550734AB307DDFC7E5FC6009D8DD0F725591623D6211BAAEAFEBE48D0900C4A0D6DC397510D98DCF7BAD0759703EC1DF73B7A617AF99DE2EC41CEBAEA2FA5764B5DEC992A85E4E1CFD87514C8339D98B00D6D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:24:ed:77:c0:d0:f4:09:60:40:38:b1:53:f0:
                    f5:8d:0e:2c:38:11:b5:58:fc:d3:d6:42:a6:e6:11:
                    e4:fb:ec:40:14:27:49:6d:04:97:54:c8:4c:5b:40:
                    ee:db:11:c9:e9:3a:81:e4:79:cb:89:3a:ac:c1:18:
                    e1:b2:38:50:0b:7d:1f:a6:8c:03:26:52:bf:73:89:
                    c8:2a:0d:3e:4c:7d:d0:43:65:9c:85:7d:58:83:1b:
                    a2:50:1b:0c:8e:c6:27:7a:14:7e:42:c0:9f:20:5a:
                    a4:63:95:a0:32:9b:bb:d3:49:dd:bf:c5:49:ea:d7:
                    78:64:b1:69:13:ed:46:f2:b4:41:59:6e:49:23:bc:
                    be:dd:05:05:cd:8e:fb:b4:23:f0:73:e7:8a:27:a2:
                    b9:22:75:7b:fb:ba:2f:8f:5c:50:69:a7:16:08:be:
                    76:59:c8:d3:07:3b:20:10:04:c5:50:73:4a:b3:07:
                    dd:fc:7e:5f:c6:00:9d:8d:d0:f7:25:59:16:23:d6:
                    21:1b:aa:ea:fe:be:48:d0:90:0c:4a:0d:6d:c3:97:
                    51:0d:98:dc:f7:ba:d0:75:97:03:ec:1d:f7:3b:7a:
                    61:7a:f9:9d:e2:ec:41:ce:ba:ea:2f:a5:76:4b:5d:
                    ec:99:2a:85:e4:e1:cf:d8:75:14:c8:33:9d:98:b0:
                    0d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:5B:DB:93:4C:D8:0B:43:67:00:3C:CA:E5:2F:4D:CD:8B:94:4A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS139648.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:f5:b1:70:0b:a8:d7:6b:2e:aa:00:e6:50:32:1e:7d:67:
         5e:43:5b:8b:05:1a:47:fe:cd:4b:f9:cc:90:f3:f5:25:71:c6:
         20:18:61:d6:cd:aa:55:08:79:8e:19:75:05:13:a1:5f:0c:ad:
         9b:f7:85:97:e8:29:0f:bf:29:d5:8b:9c:0f:9c:a2:99:4d:e8:
         39:11:41:49:c0:7c:dc:0e:69:5c:e4:48:04:86:1c:43:04:d9:
         03:34:2d:fe:20:be:11:19:fd:ac:5e:dc:54:81:ac:f7:9f:1e:
         e7:18:13:db:4e:0e:d0:5a:f2:d1:3d:c5:39:50:b1:f7:40:0c:
         47:5f:ef:2f:48:e3:d3:31:c9:76:92:90:05:2d:ae:1e:76:c9:
         1e:6b:05:c0:38:c2:7b:5d:e0:c0:3a:c9:90:a8:01:8f:19:55:
         59:30:09:43:3b:62:9c:d3:5d:78:e7:96:c8:87:11:1a:bc:c5:
         c5:f8:cb:07:a8:ed:e1:09:4b:1b:08:ff:4e:63:fb:23:8f:26:
         65:dd:09:fe:7c:a0:14:24:b5:fe:00:42:40:b4:48:db:d3:54:
         44:e1:07:04:5f:58:49:10:b6:2f:77:b7:7a:30:43:cc:f8:55:
         ca:ec:f5:ac:11:05:01:ae:45:7a:f9:a4:fd:70:cb:78:3c:8f:
         93:56:89:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----