Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19844.roa
File:                     AS19844.roa (raw, json)
Hash identifier:          S3WshqJUhNPK9FEk4Hhm1yefxoMveP4n99dqYsw2QmI=
Subject key identifier:   2C:04:82:92:4B:A9:82:AC:19:57:2A:05:9F:54:D0:DD:65:BD:3A:7A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7632F9CC88127F5289FB745E3EFE9C8EEAA36E61
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19844.roa
Signing time:             Wed 09 Mar 2022 13:31:48 +0000
ROA not before:           Wed 09 Mar 2022 13:26:48 +0000
ROA not after:            Wed 08 Mar 2023 13:31:48 +0000
asID:                     19844
IP address blocks:        191.96.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:f9:cc:88:12:7f:52:89:fb:74:5e:3e:fe:9c:8e:ea:a3:6e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:26:48 2022 GMT
            Not After : Mar  8 13:31:48 2023 GMT
        Subject: CN=3082010A0282010100DD184AA7BDC0F6BCF5BE65582CB20A51D4E2D94CF7F92742EB0FE3171FF29E342CB283604CC6BF1BCA16D3F49DC53635DACBDB6E1C47E7A63D5211D91E0EB20459CF4CF92F24214A130B66E5C5B535BB359A68C1104ACDD94356B953F7DFADF9CF086FAED30985B83C304BE80F4B863C4C0E09B02F930000BA47AA807DA0AC6DF026701B2C2D4FBE84F90DEC11B82C6B02BAED98B2D84BBC360D20A984828923BB11E60067AFACC62E0441DB43592B571A4B62C310A6AFDE48BED54227DC28559F6B433CF769F1D6F73F6CB0AB9E70163BE65131F72B6714B48317BFB9FF3B31FA9D086E7F4A966507ABFF76E8AF2F9783AE866367435825861CF13835C6273D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:4a:a7:bd:c0:f6:bc:f5:be:65:58:2c:b2:
                    0a:51:d4:e2:d9:4c:f7:f9:27:42:eb:0f:e3:17:1f:
                    f2:9e:34:2c:b2:83:60:4c:c6:bf:1b:ca:16:d3:f4:
                    9d:c5:36:35:da:cb:db:6e:1c:47:e7:a6:3d:52:11:
                    d9:1e:0e:b2:04:59:cf:4c:f9:2f:24:21:4a:13:0b:
                    66:e5:c5:b5:35:bb:35:9a:68:c1:10:4a:cd:d9:43:
                    56:b9:53:f7:df:ad:f9:cf:08:6f:ae:d3:09:85:b8:
                    3c:30:4b:e8:0f:4b:86:3c:4c:0e:09:b0:2f:93:00:
                    00:ba:47:aa:80:7d:a0:ac:6d:f0:26:70:1b:2c:2d:
                    4f:be:84:f9:0d:ec:11:b8:2c:6b:02:ba:ed:98:b2:
                    d8:4b:bc:36:0d:20:a9:84:82:89:23:bb:11:e6:00:
                    67:af:ac:c6:2e:04:41:db:43:59:2b:57:1a:4b:62:
                    c3:10:a6:af:de:48:be:d5:42:27:dc:28:55:9f:6b:
                    43:3c:f7:69:f1:d6:f7:3f:6c:b0:ab:9e:70:16:3b:
                    e6:51:31:f7:2b:67:14:b4:83:17:bf:b9:ff:3b:31:
                    fa:9d:08:6e:7f:4a:96:65:07:ab:ff:76:e8:af:2f:
                    97:83:ae:86:63:67:43:58:25:86:1c:f1:38:35:c6:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:82:92:4B:A9:82:AC:19:57:2A:05:9F:54:D0:DD:65:BD:3A:7A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS19844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:1d:b1:86:62:1b:c8:17:95:99:14:7a:f7:3f:fa:8c:a7:f5:
         1d:3e:8f:40:ee:7b:53:e7:ef:bc:10:22:90:09:3f:e6:ee:c6:
         a0:00:98:12:88:bd:e2:95:0f:75:b6:74:71:a4:59:47:27:78:
         ff:76:72:4c:f9:71:04:e7:d2:e8:34:94:da:79:92:e3:fd:b9:
         71:83:8b:5e:00:9f:e3:25:3a:3c:6f:77:50:68:b9:32:4d:91:
         5c:70:98:6e:17:17:9f:8b:8a:b6:e2:6f:d7:9a:f9:21:7f:f6:
         bd:0d:f1:bd:92:0c:65:6b:92:a3:8f:ba:fb:e7:21:3c:c9:22:
         fe:65:ca:4d:1a:3a:c6:63:0d:b1:db:57:5f:7c:14:d7:19:5e:
         45:9c:07:16:63:aa:a0:2e:67:6a:da:e9:20:cb:3f:41:92:d1:
         c9:c7:6f:cb:78:e8:00:60:9b:1f:c5:e4:25:69:e3:96:a5:5c:
         40:73:a1:5f:48:8d:56:d3:de:30:27:0f:ac:04:3d:0e:41:f1:
         f8:7a:3f:02:07:d0:a2:bf:ce:17:f7:c7:ee:21:06:c1:68:d5:
         d5:80:2e:e3:c5:1b:11:79:08:91:25:8b:0d:18:d2:ae:ae:cb:
         0d:70:e8:98:f3:26:ed:ff:96:30:5e:99:49:8d:d8:61:06:51:
         96:47:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----