Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS200651.roa
File:                     AS200651.roa (raw, json)
Hash identifier:          KtcyAfeV64/12ZP3dXfXSEdZDV+4WIh9/PQvlT2IHhw=
Subject key identifier:   94:0F:D6:41:63:0F:5A:C6:C0:9A:56:30:DB:33:D4:13:CA:BB:C8:C5
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6EE794A433B36A28DC2975E3D8B6FB041345E6B6
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS200651.roa
Signing time:             Mon 21 Mar 2022 14:15:16 +0000
ROA not before:           Mon 21 Mar 2022 14:10:16 +0000
ROA not after:            Mon 20 Mar 2023 14:15:16 +0000
asID:                     200651
IP address blocks:        45.95.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e7:94:a4:33:b3:6a:28:dc:29:75:e3:d8:b6:fb:04:13:45:e6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 21 14:10:16 2022 GMT
            Not After : Mar 20 14:15:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:19:f6:a8:3e:bf:9b:4d:2f:1c:d7:3a:81:
                    9b:d8:12:2d:68:bf:c6:55:8f:f5:bf:7f:66:2a:d0:
                    03:d7:07:47:91:e4:bc:28:53:4d:a1:6d:ea:d0:c7:
                    4c:9a:43:bf:dd:06:d2:9f:47:4a:ea:2c:0f:28:81:
                    3d:bb:b4:9e:e3:48:06:31:34:65:e4:30:55:29:94:
                    c9:4f:4d:49:70:0a:8a:a5:f6:57:cb:8f:2f:55:a2:
                    03:88:0f:a0:45:c5:78:28:e3:98:eb:bc:05:6a:5f:
                    74:9b:32:0c:f9:37:74:bc:1e:88:4b:bb:1e:05:0e:
                    29:b4:05:64:54:1b:33:ae:5d:12:d6:4f:7c:3e:4a:
                    42:29:79:6c:b7:a2:b4:01:53:da:fa:8e:8f:fc:6d:
                    f9:40:33:5c:c4:93:42:60:d9:64:80:49:79:79:93:
                    8a:64:0d:81:02:22:9e:c5:0b:b5:a1:4c:8c:e0:de:
                    ec:3d:70:25:9b:a3:44:da:b0:2f:d8:b1:93:44:86:
                    ff:e7:a0:fa:62:f4:5b:87:4e:59:61:b2:11:a3:c8:
                    c6:12:2d:69:16:52:ff:d2:96:97:b1:ed:f6:b1:7f:
                    8e:a7:c1:00:aa:9e:a4:46:8b:37:bc:a9:aa:de:d5:
                    2e:52:75:15:d3:5d:71:56:fa:0a:ae:70:d9:4e:1f:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:D6:41:63:0F:5A:C6:C0:9A:56:30:DB:33:D4:13:CA:BB:C8:C5
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS200651.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:3f:22:fb:54:6c:ad:0f:89:9d:fa:43:07:85:0c:8d:fb:
         4d:13:6c:ae:31:5b:07:29:0e:e1:95:22:d0:6c:98:e2:93:e2:
         e6:5f:e6:75:b6:f7:f3:92:8c:c0:e9:90:24:16:52:54:e4:66:
         4d:2a:bd:34:2d:77:13:24:79:66:6b:49:17:f6:b4:8f:98:b0:
         cb:fc:5e:74:b2:a2:25:53:2f:ec:d7:e2:70:8f:4e:44:87:5a:
         0e:f3:ac:bd:bb:c1:33:34:2b:6b:cd:47:e4:22:87:04:78:dc:
         ae:28:d2:2f:4c:ff:cb:42:24:c4:ea:b8:17:40:5e:e3:c6:b0:
         c6:86:a6:94:97:0a:26:f6:fb:56:d7:37:4d:29:56:14:6b:60:
         f6:f6:01:39:35:51:f3:8d:5f:c7:ed:a5:b7:bd:e0:88:77:67:
         d5:bf:dc:5c:20:67:ff:70:74:b0:6c:ee:92:2c:3a:22:c8:41:
         29:db:44:e9:16:d5:5b:02:e4:8a:22:89:e9:65:22:33:1f:e4:
         d4:7c:af:55:e6:26:d3:6e:bb:d9:8e:26:54:99:76:46:ac:b9:
         fd:5d:c1:b6:eb:48:eb:84:c0:4b:62:eb:a5:2b:e6:0b:35:bf:
         35:af:34:e4:af:38:98:52:1a:29:c2:c6:9d:32:88:82:32:4d:
         5a:df:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----