Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS203726.roa
File:                     AS203726.roa (raw, json)
Hash identifier:          TrZlVrbrQHZt5fqEmRFv6bbnieedXqnL74688PGMCl4=
Subject key identifier:   E4:A0:B5:A0:DE:03:F2:54:C2:18:8A:49:F1:55:FD:9C:C0:83:28:1B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5C70ED3DF2258E89BF1DC1A2B92E18FC4D52B091
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS203726.roa
Signing time:             Tue 08 Mar 2022 07:51:10 +0000
ROA not before:           Tue 08 Mar 2022 07:46:10 +0000
ROA not after:            Tue 07 Mar 2023 07:51:10 +0000
asID:                     203726
IP address blocks:        45.89.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:70:ed:3d:f2:25:8e:89:bf:1d:c1:a2:b9:2e:18:fc:4d:52:b0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:10 2022 GMT
            Not After : Mar  7 07:51:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:6d:d3:5c:e8:1a:0b:61:44:5b:ba:31:52:
                    2e:7b:e4:f8:ec:ab:48:7f:8e:2d:61:85:e5:b9:ab:
                    4b:d8:9b:a5:ee:18:f6:50:e6:26:33:0f:5c:20:5a:
                    b4:c9:44:fd:29:4d:66:f0:21:d5:67:d0:21:1c:f9:
                    ff:3c:ee:79:50:4e:ae:95:7a:93:fa:bd:60:d4:9c:
                    18:f6:df:1d:6b:61:33:52:12:f5:61:f9:41:5a:e4:
                    b4:9f:d2:11:ef:97:a4:1c:ae:c3:a7:94:2c:0f:42:
                    7e:7c:c2:76:aa:ae:ab:45:5b:ec:e4:9f:5a:5c:ac:
                    65:6d:80:3f:47:fc:f6:8f:88:66:76:2b:87:c7:de:
                    ae:c9:05:3f:26:f2:a9:04:29:bb:fd:1b:a9:49:ba:
                    17:c7:fc:1e:48:02:13:16:0f:96:c4:5d:bb:ee:f2:
                    e8:e0:33:d6:9e:09:42:b9:50:a9:58:cd:92:e7:0b:
                    cc:39:1c:c8:bd:b1:aa:43:09:14:68:55:c1:f0:59:
                    b3:1d:43:6c:b5:0c:c1:66:29:ee:f2:70:16:ca:cd:
                    19:45:2a:99:c2:07:bf:35:ab:39:3c:e3:90:a6:a6:
                    4a:41:57:39:3d:b3:87:ba:1c:a1:73:5f:01:1a:f1:
                    37:af:ce:b7:ac:51:98:bf:ed:8f:37:9e:81:6f:93:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A0:B5:A0:DE:03:F2:54:C2:18:8A:49:F1:55:FD:9C:C0:83:28:1B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS203726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:ca:83:49:66:a6:25:3e:cb:4f:28:9c:73:27:8c:3c:c7:
         6d:51:8c:34:1e:49:ca:64:a3:38:e7:33:40:5e:48:75:3b:38:
         e7:c8:5e:63:68:33:a3:69:17:8a:4c:36:8e:ec:47:3f:9b:fb:
         c9:ac:f6:db:9d:1b:71:90:8c:18:d6:ff:62:1d:99:eb:78:64:
         2e:18:b7:1f:23:5b:46:f5:93:48:92:c2:74:40:a6:04:50:78:
         ba:0e:a3:cf:19:d0:ed:86:c1:5b:3d:76:95:96:ca:83:a6:07:
         a7:90:08:f4:eb:ce:86:96:ca:d4:ef:7c:4e:4f:21:ab:a6:5b:
         42:51:3c:3d:1c:28:bc:77:43:67:4c:98:b6:d6:8f:a6:44:ab:
         e8:7c:9c:8a:95:87:2e:3f:17:3a:84:de:40:83:da:82:4b:ba:
         81:5a:00:fe:6a:a3:e8:a3:88:7b:e3:af:11:0e:78:47:2a:a9:
         c3:18:c6:64:af:28:c7:53:ae:03:3d:1e:48:6e:62:66:40:0b:
         01:35:f8:59:98:95:57:8a:70:d9:f5:c2:9e:89:62:87:f1:a9:
         90:d7:86:40:4b:cf:2a:45:93:f4:1a:78:b4:4f:df:20:21:d7:
         0d:9b:d3:63:4f:c1:46:19:41:fb:c2:92:55:80:11:71:b4:14:
         24:67:fc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----