Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205361.roa
File:                     AS205361.roa (raw, json)
Hash identifier:          W63j3N5fH/BvoXddxDG3KnGr5yhcnJH3RSn9I//WkEI=
Subject key identifier:   E1:BF:9E:88:E1:69:96:78:D8:27:10:01:0E:54:B0:C3:34:19:13:9E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2BB5450A681C55BC2DB7CAEFCAE93CE17FE39586
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205361.roa
Signing time:             Mon 13 Jun 2022 12:19:14 +0000
ROA not before:           Mon 13 Jun 2022 12:14:14 +0000
ROA not after:            Mon 12 Jun 2023 12:19:14 +0000
asID:                     205361
IP address blocks:        185.135.157.0/24 maxlen: 24
                          185.170.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b5:45:0a:68:1c:55:bc:2d:b7:ca:ef:ca:e9:3c:e1:7f:e3:95:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 13 12:14:14 2022 GMT
            Not After : Jun 12 12:19:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:32:2f:5e:e0:10:5e:dc:fc:e5:d9:81:fe:
                    21:e3:35:d7:78:2f:65:83:8c:45:e1:ff:49:71:0c:
                    f1:d5:79:2e:1e:9c:e5:b1:9d:63:a2:55:1a:8d:d2:
                    68:02:aa:0d:1a:a7:82:ee:75:ea:07:d6:d2:ce:b5:
                    19:bc:3c:9d:a9:66:6c:a4:a3:db:66:a5:02:de:90:
                    58:b5:3e:65:b4:23:d9:76:ad:6d:13:05:87:59:e8:
                    89:30:bd:b9:91:4e:58:7d:48:09:1a:df:3b:8a:79:
                    8c:11:52:9a:2c:4c:e4:17:93:2a:f1:31:97:97:44:
                    c7:30:03:a6:ff:f9:90:30:61:95:41:39:a7:3f:e4:
                    59:71:50:3e:d7:cd:11:93:22:d5:68:eb:fe:70:7d:
                    30:9e:31:78:e2:32:b0:c0:8c:d9:c7:b0:e7:fe:40:
                    dc:dd:06:a9:0e:39:be:0b:38:1d:9d:85:ad:d6:ca:
                    ee:a8:3e:b8:14:61:a7:75:0a:0d:25:1d:bb:9d:95:
                    b7:ef:b4:80:88:a7:69:03:c6:b7:d3:f3:d5:b3:d5:
                    94:00:b7:22:b3:e4:9f:c6:dc:19:4b:9d:f5:49:d0:
                    5b:36:11:ee:91:0d:08:f7:6c:34:93:1d:2a:e1:7b:
                    f1:cb:6b:e1:60:de:da:4d:17:91:43:aa:5d:f8:ec:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:9E:88:E1:69:96:78:D8:27:10:01:0E:54:B0:C3:34:19:13:9E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205361.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.157.0/24
                  185.170.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:81:c3:89:9e:f5:ae:63:7f:0a:52:cb:f1:3c:df:1c:1c:64:
         13:de:31:cf:57:2f:58:1e:de:48:cf:46:4f:4c:f8:88:16:52:
         58:3a:1d:93:02:ac:ca:a7:6f:6f:b0:f7:47:2a:52:03:d8:82:
         ec:1d:3c:bc:da:0e:b2:72:75:21:a0:b8:ea:be:94:42:8c:e2:
         7c:fb:05:70:ef:89:6b:99:fc:38:76:cd:fd:41:d1:ea:a7:0b:
         19:ae:97:c5:88:b3:c2:9d:7d:05:0b:9e:ec:88:5b:80:49:a2:
         9e:66:9f:1e:5b:86:08:2b:4d:94:24:58:12:70:54:e0:0d:29:
         35:85:86:fd:b2:99:34:10:89:2b:cf:c9:45:c2:07:b4:d9:a7:
         5d:c7:2b:77:12:b3:13:a1:8d:db:92:16:e3:a6:54:45:b4:69:
         a8:a5:92:a2:38:31:97:07:4f:fc:78:1e:00:c5:7f:d0:0e:7b:
         3c:42:44:2d:b8:a3:e5:77:bb:cc:a7:a8:c8:0e:c7:fc:05:ac:
         d2:5c:5f:58:0c:3d:88:4f:b8:e4:54:7c:dc:8e:4e:23:64:78:
         11:05:01:34:43:c7:19:8d:19:77:5c:5b:29:f3:0d:50:b2:54:
         a4:3a:be:e8:63:4c:a6:06:bc:41:4a:30:5c:fb:8e:7e:d2:87:
         d3:9f:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----