Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205021.roa
File:                     AS205021.roa (raw, json)
Hash identifier:          EnVu2hOoLYUpN81EdLwpFb4enxZsbE3zsVo8Gk953mM=
Subject key identifier:   16:22:3A:F9:F4:73:8E:1F:59:53:0C:77:AE:DE:F0:F9:8B:8A:22:CB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5A1D9F2F6B185C9C9EF7A5477F78BFF4893A283E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205021.roa
Signing time:             Fri 27 May 2022 09:18:07 +0000
ROA not before:           Fri 27 May 2022 09:13:07 +0000
ROA not after:            Fri 26 May 2023 09:18:07 +0000
asID:                     205021
IP address blocks:        45.133.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:9f:2f:6b:18:5c:9c:9e:f7:a5:47:7f:78:bf:f4:89:3a:28:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: May 27 09:13:07 2022 GMT
            Not After : May 26 09:18:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:45:03:53:07:06:d0:97:03:8d:7e:05:61:
                    99:38:72:74:bb:83:35:ad:5e:78:9c:ce:83:f4:b2:
                    53:2a:c4:8a:02:6a:cb:42:9a:41:08:85:a4:62:4f:
                    cf:18:6a:2b:39:b6:8f:50:f8:42:eb:26:6e:07:d6:
                    4b:7c:fc:41:4d:9a:7c:1d:89:48:25:87:d1:1f:fb:
                    88:47:80:93:ae:21:19:a9:bf:97:20:92:13:21:5c:
                    02:93:fe:8a:1b:d6:be:cb:14:f7:bd:06:1c:22:24:
                    f8:8f:78:d9:0d:63:25:6d:e6:da:a7:e2:07:20:8a:
                    e6:9c:41:e8:d2:84:40:bf:bd:f3:ec:b9:a3:72:15:
                    75:24:42:85:44:f2:1d:1b:d7:83:6c:c4:da:e9:25:
                    c3:3b:fd:2e:1b:0b:87:be:52:45:0c:99:42:9c:2f:
                    ad:9c:f4:77:f9:98:c0:a7:5a:6f:66:e3:9f:c6:dc:
                    ea:db:da:5e:4a:0d:4d:7c:fa:e7:85:87:35:04:ad:
                    2b:a7:a3:78:db:31:cc:f8:7a:1b:3d:a9:08:02:4e:
                    51:12:2a:9c:8a:53:de:87:93:c2:45:2c:ae:14:3b:
                    63:1f:89:2a:0f:22:d4:92:83:4c:6b:31:42:41:ba:
                    a2:38:ae:92:22:95:50:d4:1e:3d:c1:e3:40:0a:ad:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:3A:F9:F4:73:8E:1F:59:53:0C:77:AE:DE:F0:F9:8B:8A:22:CB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205021.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3a:aa:17:f1:72:17:5a:ea:af:f5:5f:8c:ba:13:c1:46:1b:
         72:79:22:7b:fd:cf:82:02:38:9a:fe:e6:1c:96:6d:3b:3e:bc:
         5f:17:97:ec:5c:44:c5:3d:4d:bc:b1:7e:a9:6a:ee:f6:a2:12:
         ca:28:9a:93:bb:ca:35:bc:06:4d:d3:5d:cd:b1:ee:cf:25:e3:
         4c:32:33:99:e8:da:cd:8f:8b:cf:60:84:d8:e8:55:a5:35:6f:
         9e:3e:40:5d:fb:d7:bb:db:27:c2:3d:b0:74:ed:e9:9e:85:a2:
         89:8a:75:33:d4:7a:d2:69:68:21:4d:a1:7a:62:f7:b0:29:34:
         f5:96:ff:c2:20:f4:17:51:bb:a8:58:99:c7:00:3c:ed:83:36:
         7d:54:7c:5b:f9:72:f2:a3:55:e4:ec:99:56:de:fa:de:56:9d:
         44:cb:59:b8:15:93:40:9c:c4:c1:bf:57:13:0e:58:b1:6b:9b:
         9a:5d:68:8c:c5:23:74:68:e4:98:bc:9a:a6:a9:c6:8a:5c:1e:
         6e:99:56:4c:99:02:8b:db:41:c2:68:59:fc:a3:23:ff:fa:d2:
         d4:b3:e3:70:3e:22:80:13:8a:da:c8:12:ce:47:61:a3:4d:9c:
         d1:27:3e:45:16:a8:09:60:c6:5f:77:1b:eb:63:d5:8f:a8:d0:
         4b:bd:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----