Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS197071.roa
File:                     AS197071.roa (raw, json)
Hash identifier:          trLfhm7w8JsbPH8KQ3DtsrqTArBGilQLBSlKxQ29s0s=
Subject key identifier:   36:CA:F4:80:67:84:48:23:33:22:D5:90:93:F9:88:FA:8A:47:F2:AF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       10A19F518E0EF1F2ACC129AC4BAABEF7D0E1831E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS197071.roa
Signing time:             Tue 15 Mar 2022 14:16:36 +0000
ROA not before:           Tue 15 Mar 2022 14:11:36 +0000
ROA not after:            Tue 14 Mar 2023 14:16:36 +0000
asID:                     197071
IP address blocks:        191.101.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a1:9f:51:8e:0e:f1:f2:ac:c1:29:ac:4b:aa:be:f7:d0:e1:83:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 15 14:11:36 2022 GMT
            Not After : Mar 14 14:16:36 2023 GMT
        Subject: CN=3082010A0282010100CAD98FC9888B745967E1757A5C3D6C3F61AE4A26272EC1D343E81A93B2858B3EA2D6DD5022F5F6616FF8808245552D45531149571941063589E2A42C2C4B2C70FCD20ADBB2461EB87F95F7777BF42B785D0106691D5040BE73091540CEF7CFE65DE260C167978726A14AEB0C402F7344355D48594A81FA789D179A642E5294281C49217D5839BDBC34434765324ADD05BBDA860EF2C17A2883F35BBED826A4746899FF13A4A72ED20CB5471F07ABD94AFC2F95FF8F22682B167EB36AD2F02483DEB27CEB2E942DCBB0430E153C1253CD57BE4B344824546E1243F285E162849333E89F3A5D93D170808F4800AE1758857FBDBE200C49C050071F75F2FFC10A930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:8f:c9:88:8b:74:59:67:e1:75:7a:5c:3d:
                    6c:3f:61:ae:4a:26:27:2e:c1:d3:43:e8:1a:93:b2:
                    85:8b:3e:a2:d6:dd:50:22:f5:f6:61:6f:f8:80:82:
                    45:55:2d:45:53:11:49:57:19:41:06:35:89:e2:a4:
                    2c:2c:4b:2c:70:fc:d2:0a:db:b2:46:1e:b8:7f:95:
                    f7:77:7b:f4:2b:78:5d:01:06:69:1d:50:40:be:73:
                    09:15:40:ce:f7:cf:e6:5d:e2:60:c1:67:97:87:26:
                    a1:4a:eb:0c:40:2f:73:44:35:5d:48:59:4a:81:fa:
                    78:9d:17:9a:64:2e:52:94:28:1c:49:21:7d:58:39:
                    bd:bc:34:43:47:65:32:4a:dd:05:bb:da:86:0e:f2:
                    c1:7a:28:83:f3:5b:be:d8:26:a4:74:68:99:ff:13:
                    a4:a7:2e:d2:0c:b5:47:1f:07:ab:d9:4a:fc:2f:95:
                    ff:8f:22:68:2b:16:7e:b3:6a:d2:f0:24:83:de:b2:
                    7c:eb:2e:94:2d:cb:b0:43:0e:15:3c:12:53:cd:57:
                    be:4b:34:48:24:54:6e:12:43:f2:85:e1:62:84:93:
                    33:e8:9f:3a:5d:93:d1:70:80:8f:48:00:ae:17:58:
                    85:7f:bd:be:20:0c:49:c0:50:07:1f:75:f2:ff:c1:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CA:F4:80:67:84:48:23:33:22:D5:90:93:F9:88:FA:8A:47:F2:AF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS197071.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:20:2c:4e:8d:e7:76:5a:8b:9a:af:eb:86:c4:4c:6d:43:5b:
         fd:6b:a6:68:d6:ff:44:95:48:d6:5a:06:6f:20:b1:7e:b5:4f:
         8c:eb:31:89:15:ae:11:65:c1:4e:7c:d2:45:dd:00:63:ad:79:
         13:23:f6:1d:33:bc:f2:37:77:9c:a1:7d:8f:72:32:cb:8f:c1:
         91:c6:20:38:29:64:04:52:45:b0:f4:0e:d1:32:86:1a:f5:b7:
         26:80:64:e6:ad:81:fb:84:fc:19:d7:68:cb:0d:35:12:b7:b8:
         80:72:19:69:34:81:84:4f:a0:a3:ba:4a:4a:99:f1:8a:dc:23:
         5c:24:2a:c5:b6:7f:14:f1:c0:7e:7d:c3:1e:4c:d8:59:fd:23:
         a5:a6:19:2d:13:43:37:c6:59:39:f9:19:02:2e:d7:bf:28:5a:
         01:30:60:88:c3:d1:4b:5b:5d:30:c9:f6:87:b6:7b:c2:c2:58:
         27:e6:76:a5:90:e0:f8:18:2f:aa:c9:73:a9:47:fb:10:fb:58:
         c8:44:cc:50:df:5b:b5:ca:cf:79:fc:70:70:2f:8b:55:74:16:
         67:5d:0e:47:c5:ad:2e:7f:13:a6:17:bd:a5:9a:da:28:b0:6c:
         3a:4d:16:90:87:d0:a1:6f:50:7f:2c:b5:fa:61:cd:ef:a2:7e:
         2f:c9:68:43
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUEKGfUY4O8fKswSmsS6q+99Dhgx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMTUxNDExMzZaFw0yMzAzMTQxNDE2MzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FEOThGQzk4ODhCNzQ1OTY3
RTE3NTdBNUMzRDZDM0Y2MUFFNEEyNjI3MkVDMUQzNDNFODFBOTNCMjg1OEIzRUEy
RDZERDUwMjJGNUY2NjE2RkY4ODA4MjQ1NTUyRDQ1NTMxMTQ5NTcxOTQxMDYzNTg5
RTJBNDJDMkM0QjJDNzBGQ0QyMEFEQkIyNDYxRUI4N0Y5NUY3Nzc3QkY0MkI3ODVE
MDEwNjY5MUQ1MDQwQkU3MzA5MTU0MENFRjdDRkU2NURFMjYwQzE2Nzk3ODcyNkEx
NEFFQjBDNDAyRjczNDQzNTVENDg1OTRBODFGQTc4OUQxNzlBNjQyRTUyOTQyODFD
NDkyMTdENTgzOUJEQkMzNDQzNDc2NTMyNEFERDA1QkJEQTg2MEVGMkMxN0EyODgz
RjM1QkJFRDgyNkE0NzQ2ODk5RkYxM0E0QTcyRUQyMENCNTQ3MUYwN0FCRDk0QUZD
MkY5NUZGOEYyMjY4MkIxNjdFQjM2QUQyRjAyNDgzREVCMjdDRUIyRTk0MkRDQkIw
NDMwRTE1M0MxMjUzQ0Q1N0JFNEIzNDQ4MjQ1NDZFMTI0M0YyODVFMTYyODQ5MzMz
RTg5RjNBNUQ5M0QxNzA4MDhGNDgwMEFFMTc1ODg1N0ZCREJFMjAwQzQ5QzA1MDA3
MUY3NUYyRkZDMTBBOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAytmPyYiLdFln4XV6XD1sP2GuSiYnLsHTQ+gak7KFiz6i1t1QIvX2
YW/4gIJFVS1FUxFJVxlBBjWJ4qQsLEsscPzSCtuyRh64f5X3d3v0K3hdAQZpHVBA
vnMJFUDO98/mXeJgwWeXhyahSusMQC9zRDVdSFlKgfp4nReaZC5SlCgcSSF9WDm9
vDRDR2UySt0Fu9qGDvLBeiiD81u+2CakdGiZ/xOkpy7SDLVHHwer2Ur8L5X/jyJo
KxZ+s2rS8CSD3rJ86y6ULcuwQw4VPBJTzVe+SzRIJFRuEkPyheFihJMz6J86XZPR
cICPSACuF1iFf72+IAxJwFAHH3Xy/8EKkwIDAQABo4ICJjCCAiIwHQYDVR0OBBYE
FDbK9IBnhEgjMyLVkJP5iPqKR/KvMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxOTcwNzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC/ZTMwDQYJKoZIhvcNAQELBQADggEBAKkgLE6N53Zai5qv64bETG1DW/1r
pmjW/0SVSNZaBm8gsX61T4zrMYkVrhFlwU580kXdAGOteRMj9h0zvPI3d5yhfY9y
MsuPwZHGIDgpZARSRbD0DtEyhhr1tyaAZOatgfuE/BnXaMsNNRK3uIByGWk0gYRP
oKO6SkqZ8YrcI1wkKsW2fxTxwH59wx5M2Fn9I6WmGS0TQzfGWTn5GQIu178oWgEw
YIjD0UtbXTDJ9oe2e8LCWCfmdqWQ4PgYL6rJc6lH+xD7WMhEzFDfW7XKz3n8cHAv
i1V0FmddDkfFrS5/E6YXvaWa2iiwbDpNFpCH0KFvUH8stfphze+ifi/JaEM=
-----END CERTIFICATE-----