Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS17819.roa
File:                     AS17819.roa (raw, json)
Hash identifier:          MJJI6nBOK43gmjlfUlNuI+oBBu50uVikUNwGpzqyjz0=
Subject key identifier:   10:32:A4:74:C9:83:7D:B0:2E:37:04:63:50:EB:11:56:7F:1D:80:21
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       09321DDE7472CE1B389F8C3A77EE1021A5A057DC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS17819.roa
Signing time:             Wed 09 Mar 2022 13:31:28 +0000
ROA not before:           Wed 09 Mar 2022 13:26:28 +0000
ROA not after:            Wed 08 Mar 2023 13:31:28 +0000
asID:                     17819
IP address blocks:        45.95.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:32:1d:de:74:72:ce:1b:38:9f:8c:3a:77:ee:10:21:a5:a0:57:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:26:28 2022 GMT
            Not After : Mar  8 13:31:28 2023 GMT
        Subject: CN=3082010A0282010100CB5DA547428404EF4F6D65EC5094E7AB3F2C55BDE0057C7A0B688995584E037A4CF5F2CA0851604DA83A96D68FB4139C738E981F2958C8709452D663151A7BB487A76103A3498AAF663BBEE8465EE465F5F3D6BF33F7992F294430A0F0104BB6F09046E9EC390ECCA47CAB7B8025744EB6D341BF2D64ADA9E2477712CDF352551FE5AE6F1AE4D2624413AE5AF0544F01D33D4C46D2DF6FEB4A2A008909E1469B9EE13039203403B2788027C5DA5347B9E4B9DAEF3E1E6B2AB265A6E1265C8F9C9B710AF4BEA3D7D68A9C92B16C5FE9A3682A793B7BA784D20898984A0115075BFD8E9810F105A6B66FD05873BCA877FD21353CF8F59A6152D87B05B64576B2670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:a5:47:42:84:04:ef:4f:6d:65:ec:50:94:
                    e7:ab:3f:2c:55:bd:e0:05:7c:7a:0b:68:89:95:58:
                    4e:03:7a:4c:f5:f2:ca:08:51:60:4d:a8:3a:96:d6:
                    8f:b4:13:9c:73:8e:98:1f:29:58:c8:70:94:52:d6:
                    63:15:1a:7b:b4:87:a7:61:03:a3:49:8a:af:66:3b:
                    be:e8:46:5e:e4:65:f5:f3:d6:bf:33:f7:99:2f:29:
                    44:30:a0:f0:10:4b:b6:f0:90:46:e9:ec:39:0e:cc:
                    a4:7c:ab:7b:80:25:74:4e:b6:d3:41:bf:2d:64:ad:
                    a9:e2:47:77:12:cd:f3:52:55:1f:e5:ae:6f:1a:e4:
                    d2:62:44:13:ae:5a:f0:54:4f:01:d3:3d:4c:46:d2:
                    df:6f:eb:4a:2a:00:89:09:e1:46:9b:9e:e1:30:39:
                    20:34:03:b2:78:80:27:c5:da:53:47:b9:e4:b9:da:
                    ef:3e:1e:6b:2a:b2:65:a6:e1:26:5c:8f:9c:9b:71:
                    0a:f4:be:a3:d7:d6:8a:9c:92:b1:6c:5f:e9:a3:68:
                    2a:79:3b:7b:a7:84:d2:08:98:98:4a:01:15:07:5b:
                    fd:8e:98:10:f1:05:a6:b6:6f:d0:58:73:bc:a8:77:
                    fd:21:35:3c:f8:f5:9a:61:52:d8:7b:05:b6:45:76:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:32:A4:74:C9:83:7D:B0:2E:37:04:63:50:EB:11:56:7F:1D:80:21
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS17819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:31:dd:32:3f:3e:b3:4f:0a:e2:90:88:70:4e:55:01:f9:26:
         9e:81:07:c0:41:10:3d:a0:aa:72:7e:c9:48:17:6c:bc:58:78:
         56:7c:75:1c:65:b6:00:74:37:1e:9a:dc:1a:b9:22:ef:48:59:
         55:0a:a5:aa:47:b2:13:02:bf:84:ec:9a:e9:99:7d:c6:29:5e:
         ea:1b:79:e4:c8:80:ce:73:1c:70:db:84:e5:be:78:5b:df:94:
         2b:fa:40:c7:a3:b0:c0:96:89:f7:a6:ae:74:bf:22:67:fe:5e:
         db:29:95:52:81:fe:58:12:4d:95:44:2c:4a:40:30:12:12:af:
         49:16:10:9b:80:95:96:c5:8b:44:17:e6:9a:f0:6a:c2:9f:94:
         73:3a:87:2a:bf:64:a1:75:4f:91:e8:68:80:e0:e1:12:8b:86:
         2f:3a:f2:0e:e6:45:a7:30:c4:04:c7:57:88:7a:28:f7:2d:09:
         af:85:dc:b4:5e:85:40:54:c0:ff:63:e6:dd:52:d4:04:67:17:
         cd:17:25:2e:5f:9a:5f:7d:f6:dd:80:c4:bc:8d:32:a0:09:95:
         d4:86:ad:75:1e:a2:fd:d3:70:ea:e8:13:6f:71:61:42:64:85:
         71:97:94:d0:91:e7:2b:15:2e:a9:b2:ec:0c:5a:42:9a:d4:fc:
         8b:39:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----