Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          lAS2Jkr0FYsC4v3a0Q+vsjl6UFDd0vwRMrI1L8GmGFg=
Subject key identifier:   50:95:2B:B9:E4:11:36:7D:A3:4D:D1:3E:53:D6:37:C1:EA:5C:BF:3D
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       65C73486BFB9A17E2B7F94F444039F1B0C7F7DE3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19437.roa
Signing time:             Wed 30 Mar 2022 06:14:37 +0000
ROA not before:           Wed 30 Mar 2022 06:09:37 +0000
ROA not after:            Wed 29 Mar 2023 06:14:37 +0000
asID:                     19437
IP address blocks:        191.96.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c7:34:86:bf:b9:a1:7e:2b:7f:94:f4:44:03:9f:1b:0c:7f:7d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 30 06:09:37 2022 GMT
            Not After : Mar 29 06:14:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:af:58:7a:d8:70:af:ad:1a:14:32:09:97:
                    b4:d5:b3:de:2c:00:86:4d:5b:8d:24:01:b3:9b:f8:
                    7c:71:37:8b:e7:4b:9d:f8:e2:e2:0f:1b:e0:18:f8:
                    4b:5e:a7:d1:2f:a3:09:e4:7b:10:30:51:57:5f:d9:
                    3d:6a:b0:db:c8:c3:77:ff:06:c5:b6:5f:51:ca:70:
                    b7:32:92:01:57:5f:b0:b7:f3:5e:88:4f:31:7a:d8:
                    ed:a2:31:44:86:f0:c6:5b:15:6f:4b:0d:14:33:76:
                    b2:04:17:43:fb:f4:8c:a4:67:fe:d0:f5:d8:47:9c:
                    52:f0:38:eb:f3:9b:a6:a2:c2:83:85:25:cc:ac:2b:
                    18:c0:d1:bf:be:bf:21:b1:01:45:16:e3:79:57:58:
                    6f:ca:c8:42:82:e4:3e:d5:43:3e:8d:76:57:12:7f:
                    4f:94:e2:65:a4:70:a4:95:9c:62:f7:4f:09:4b:26:
                    6e:60:eb:b6:84:d3:e7:51:14:1f:06:72:c3:df:be:
                    b7:9a:79:bd:21:72:58:4a:6f:b2:35:8b:ea:b6:29:
                    df:0d:9d:1e:4d:44:f8:94:19:13:5c:7c:db:8f:ed:
                    ec:a3:c3:9a:b1:f5:c1:5b:a9:d4:ea:cf:84:d5:c3:
                    5e:d5:72:a8:1a:c1:24:ac:9b:bd:33:01:5c:29:b7:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:2B:B9:E4:11:36:7D:A3:4D:D1:3E:53:D6:37:C1:EA:5C:BF:3D
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:54:e2:fb:69:3c:3f:29:e3:d1:19:e0:34:47:97:30:bd:82:
         a1:a2:0b:88:fc:23:a8:3e:39:3b:f2:11:ee:16:25:7e:8e:bb:
         3a:40:76:46:53:d6:7a:2c:f2:88:fc:2c:c2:f6:0f:70:13:72:
         11:8a:78:5c:48:46:0b:64:6a:37:bf:78:45:ef:a9:f6:e8:06:
         e6:ed:aa:a1:86:f5:93:46:e7:77:d0:88:9b:6b:ee:d0:19:9b:
         bc:13:9f:4a:0d:ab:9b:a5:5f:3c:57:e0:80:51:cc:e3:5c:5f:
         3d:3b:9c:e3:9c:a9:4b:b4:55:c8:f1:fe:b4:13:ec:62:7d:29:
         75:ce:16:da:0a:bb:f8:e1:7d:ae:4e:96:da:43:d5:ed:f7:f6:
         a4:61:da:58:d1:44:22:a7:f5:35:ef:17:07:dd:56:f2:d8:66:
         50:66:d2:e7:0a:80:6d:41:cd:e4:76:64:64:4c:0c:b7:fc:a9:
         6f:8f:f5:c3:a5:d6:9b:6b:77:41:45:b0:2c:ea:f2:1d:76:d2:
         89:20:94:3a:e7:dd:ce:0b:35:b9:b8:35:29:51:3e:a4:98:4e:
         75:d0:a6:18:08:76:76:3d:27:24:2b:19:ae:cc:20:eb:a8:d9:
         81:2c:00:8a:b9:69:89:29:be:e2:8a:65:fa:b5:24:32:6e:39:
         56:c9:c4:cb
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUZcc0hr+5oX4rf5T0RAOfGwx/feMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMzAwNjA5MzdaFw0yMzAzMjkwNjE0MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ0OUFGNTg3QUQ4NzBBRkFE
MUExNDMyMDk5N0I0RDVCM0RFMkMwMDg2NEQ1QjhEMjQwMUIzOUJGODdDNzEzNzhC
RTc0QjlERjhFMkUyMEYxQkUwMThGODRCNUVBN0QxMkZBMzA5RTQ3QjEwMzA1MTU3
NUZEOTNENkFCMERCQzhDMzc3RkYwNkM1QjY1RjUxQ0E3MEI3MzI5MjAxNTc1RkIw
QjdGMzVFODg0RjMxN0FEOEVEQTIzMTQ0ODZGMEM2NUIxNTZGNEIwRDE0MzM3NkIy
MDQxNzQzRkJGNDhDQTQ2N0ZFRDBGNUQ4NDc5QzUyRjAzOEVCRjM5QkE2QTJDMjgz
ODUyNUNDQUMyQjE4QzBEMUJGQkVCRjIxQjEwMTQ1MTZFMzc5NTc1ODZGQ0FDODQy
ODJFNDNFRDU0MzNFOEQ3NjU3MTI3RjRGOTRFMjY1QTQ3MEE0OTU5QzYyRjc0RjA5
NEIyNjZFNjBFQkI2ODREM0U3NTExNDFGMDY3MkMzREZCRUI3OUE3OUJEMjE3MjU4
NEE2RkIyMzU4QkVBQjYyOURGMEQ5RDFFNEQ0NEY4OTQxOTEzNUM3Q0RCOEZFREVD
QTNDMzlBQjFGNUMxNUJBOUQ0RUFDRjg0RDVDMzVFRDU3MkE4MUFDMTI0QUM5QkJE
MzMwMTVDMjlCNzlCQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxEmvWHrYcK+tGhQyCZe01bPeLACGTVuNJAGzm/h8cTeL50ud+OLi
DxvgGPhLXqfRL6MJ5HsQMFFXX9k9arDbyMN3/wbFtl9RynC3MpIBV1+wt/NeiE8x
etjtojFEhvDGWxVvSw0UM3ayBBdD+/SMpGf+0PXYR5xS8Djr85umosKDhSXMrCsY
wNG/vr8hsQFFFuN5V1hvyshCguQ+1UM+jXZXEn9PlOJlpHCklZxi908JSyZuYOu2
hNPnURQfBnLD3763mnm9IXJYSm+yNYvqtinfDZ0eTUT4lBkTXHzbj+3so8OasfXB
W6nU6s+E1cNe1XKoGsEkrJu9MwFcKbebwQIDAQABo4ICJTCCAiEwHQYDVR0OBBYE
FFCVK7nkETZ9o03RPlPWN8HqXL89MB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxOTQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAL9gQTANBgkqhkiG9w0BAQsFAAOCAQEAN1Ti+2k8Pynj0RngNEeXML2CoaIL
iPwjqD45O/IR7hYlfo67OkB2RlPWeizyiPwswvYPcBNyEYp4XEhGC2RqN794Re+p
9ugG5u2qoYb1k0bnd9CIm2vu0BmbvBOfSg2rm6VfPFfggFHM41xfPTuc45ypS7RV
yPH+tBPsYn0pdc4W2gq7+OF9rk6W2kPV7ff2pGHaWNFEIqf1Ne8XB91W8thmUGbS
5wqAbUHN5HZkZEwMt/ypb4/1w6XWm2t3QUWwLOryHXbSiSCUOufdzgs1ubg1KVE+
pJhOddCmGAh2dj0nJCsZrswg66jZgSwAirlpiSm+4opl+rUkMm45VsnEyw==
-----END CERTIFICATE-----