Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205397.roa
File:                     AS205397.roa (raw, json)
Hash identifier:          j7AzuDm0NpMinbKMRAdAYoMJdzJZ1DcUbUMxEMdng8M=
Subject key identifier:   ED:65:77:AE:0E:21:47:9E:BB:15:05:BE:BF:4B:B2:7A:51:6E:33:88
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       01B003824220245DD6CDF4CDDA1DFD7C36D9C50B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205397.roa
Signing time:             Tue 26 Apr 2022 13:49:55 +0000
ROA not before:           Tue 26 Apr 2022 13:44:55 +0000
ROA not after:            Tue 25 Apr 2023 13:49:55 +0000
asID:                     205397
IP address blocks:        181.214.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:03:82:42:20:24:5d:d6:cd:f4:cd:da:1d:fd:7c:36:d9:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 26 13:44:55 2022 GMT
            Not After : Apr 25 13:49:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:30:75:1c:f3:8e:b1:34:ea:d1:9d:8c:65:
                    47:2d:b9:ea:b7:e8:3c:02:06:54:32:25:61:47:fb:
                    d6:56:7a:33:9b:69:8e:6f:cc:3d:10:75:41:7d:4c:
                    13:6b:80:45:ef:4d:f7:7d:5e:d0:fb:44:cd:29:dc:
                    5f:bc:f3:00:9b:86:ff:a3:db:62:b0:ae:da:3a:d0:
                    29:69:fc:ec:a0:8b:23:0d:aa:65:8f:06:3f:3a:2c:
                    63:16:5b:92:54:2e:e6:c9:12:68:e6:fa:c1:73:76:
                    7b:d3:a9:3c:08:1f:0f:3b:64:9a:04:28:c6:54:b7:
                    66:52:79:df:93:b2:6f:50:cb:fd:07:2a:ad:24:1b:
                    7d:04:c9:6a:50:49:21:78:81:d1:dc:b0:6a:4d:82:
                    39:d1:7b:cf:47:70:e7:3e:54:6b:2b:e6:18:fd:c4:
                    9f:c8:8b:b7:01:5d:a1:15:49:16:b1:e1:5e:ab:34:
                    ae:25:96:2b:b5:a6:9b:fc:ec:8e:31:cf:3e:15:04:
                    50:ff:b7:7a:0a:d6:5b:32:cb:ec:a7:c8:96:61:90:
                    f0:27:2a:14:23:f1:80:d8:a9:75:50:f0:f1:7e:80:
                    a1:ba:b0:35:df:39:8f:71:db:86:79:a6:b9:ff:df:
                    63:82:e1:76:b0:d8:f8:b5:b7:a0:00:d2:2f:c7:29:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:65:77:AE:0E:21:47:9E:BB:15:05:BE:BF:4B:B2:7A:51:6E:33:88
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205397.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:f5:3a:96:39:43:20:8a:8f:4d:e3:ed:b8:03:07:51:d9:
         99:6b:3f:e8:14:80:e2:e6:38:2f:3f:e7:a2:64:32:a8:0d:d3:
         60:a1:86:b5:72:25:54:66:a8:90:60:8e:20:d9:1d:9c:df:e2:
         fd:cb:42:00:c7:22:3a:64:d9:56:98:d6:17:0f:4b:73:ac:7a:
         73:12:18:61:3b:f7:7a:3a:a3:41:ff:bf:ef:9e:9c:e2:a7:18:
         1e:51:0a:18:2d:7d:2e:5c:f2:04:e0:85:07:1e:83:b2:04:96:
         2c:a6:68:f7:23:1a:0c:44:b0:8f:46:c4:9c:f6:56:41:31:fd:
         f4:c7:40:04:67:b0:1d:a3:61:a1:74:56:7e:f8:46:df:4f:6d:
         8c:e8:2b:8d:a8:a3:bf:ca:de:db:bd:b9:0f:a2:63:a0:9a:7f:
         e1:0e:c5:47:c2:77:54:22:60:3a:e8:40:d3:82:ae:5c:1d:d0:
         2c:af:cb:eb:30:59:15:3d:59:45:0d:55:0c:8b:6a:3b:f6:a7:
         d4:89:ca:f7:01:43:1f:9d:55:e5:3e:24:3e:79:82:1b:2e:0f:
         2a:43:dc:7e:d8:6f:c7:8e:c1:6f:f2:1f:83:7e:56:fc:23:2f:
         3b:1b:41:9f:96:f8:26:88:91:7c:bd:3e:3a:12:77:c5:ee:52:
         d0:a8:b6:67
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAbADgkIgJF3WzfTN2h39fDbZxQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjA0MjYxMzQ0NTVaFw0yMzA0MjUxMzQ5NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA0RDMwNzUxQ0YzOEVCMTM0
RUFEMTlEOEM2NTQ3MkRCOUVBQjdFODNDMDIwNjU0MzIyNTYxNDdGQkQ2NTY3QTMz
OUI2OThFNkZDQzNEMTA3NTQxN0Q0QzEzNkI4MDQ1RUY0REY3N0Q1RUQwRkI0NENE
MjlEQzVGQkNGMzAwOUI4NkZGQTNEQjYyQjBBRURBM0FEMDI5NjlGQ0VDQTA4QjIz
MERBQTY1OEYwNjNGM0EyQzYzMTY1QjkyNTQyRUU2QzkxMjY4RTZGQUMxNzM3NjdC
RDNBOTNDMDgxRjBGM0I2NDlBMDQyOEM2NTRCNzY2NTI3OURGOTNCMjZGNTBDQkZE
MDcyQUFEMjQxQjdEMDRDOTZBNTA0OTIxNzg4MUQxRENCMDZBNEQ4MjM5RDE3QkNG
NDc3MEU3M0U1NDZCMkJFNjE4RkRDNDlGQzg4QkI3MDE1REExMTU0OTE2QjFFMTVF
QUIzNEFFMjU5NjJCQjVBNjlCRkNFQzhFMzFDRjNFMTUwNDUwRkZCNzdBMEFENjVC
MzJDQkVDQTdDODk2NjE5MEYwMjcyQTE0MjNGMTgwRDhBOTc1NTBGMEYxN0U4MEEx
QkFCMDM1REYzOThGNzFEQjg2NzlBNkI5RkZERjYzODJFMTc2QjBEOEY4QjVCN0Ew
MDBEMjJGQzcyOTcwMEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0E0wdRzzjrE06tGdjGVHLbnqt+g8AgZUMiVhR/vWVnozm2mOb8w9
EHVBfUwTa4BF7033fV7Q+0TNKdxfvPMAm4b/o9tisK7aOtApafzsoIsjDapljwY/
OixjFluSVC7myRJo5vrBc3Z706k8CB8PO2SaBCjGVLdmUnnfk7JvUMv9ByqtJBt9
BMlqUEkheIHR3LBqTYI50XvPR3DnPlRrK+YY/cSfyIu3AV2hFUkWseFeqzSuJZYr
taab/OyOMc8+FQRQ/7d6CtZbMsvsp8iWYZDwJyoUI/GA2Kl1UPDxfoChurA13zmP
cduGeaa5/99jguF2sNj4tbegANIvxylwCwIDAQABo4ICJjCCAiIwHQYDVR0OBBYE
FO1ld64OIUeeuxUFvr9LsnpRbjOIMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMyMDUzOTcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC11qwwDQYJKoZIhvcNAQELBQADggEBABGz9TqWOUMgio9N4+24AwdR2Zlr
P+gUgOLmOC8/56JkMqgN02ChhrVyJVRmqJBgjiDZHZzf4v3LQgDHIjpk2VaY1hcP
S3OsenMSGGE793o6o0H/v++enOKnGB5RChgtfS5c8gTghQceg7IEliymaPcjGgxE
sI9GxJz2VkEx/fTHQARnsB2jYaF0Vn74Rt9PbYzoK42oo7/K3tu9uQ+iY6Caf+EO
xUfCd1QiYDroQNOCrlwd0Cyvy+swWRU9WUUNVQyLajv2p9SJyvcBQx+dVeU+JD55
ghsuDypD3H7Yb8eOwW/yH4N+VvwjLzsbQZ+W+CaIkXy9PjoSd8XuUtCotmc=
-----END CERTIFICATE-----