Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205474.roa
File:                     AS205474.roa (raw, json)
Hash identifier:          URgLaru6VjFaNhgVEQgq7itwg/YdGVVWFEXCc2WNIkk=
Subject key identifier:   0B:BF:98:68:95:52:D8:86:69:56:E6:90:54:30:21:C8:C2:9A:C0:99
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       66096A6A461BF50815D3CD5B94D2E4627D57E3D3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205474.roa
Signing time:             Mon 25 Apr 2022 21:57:21 +0000
ROA not before:           Mon 25 Apr 2022 21:52:21 +0000
ROA not after:            Mon 24 Apr 2023 21:57:21 +0000
asID:                     205474
IP address blocks:        181.214.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:09:6a:6a:46:1b:f5:08:15:d3:cd:5b:94:d2:e4:62:7d:57:e3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 25 21:52:21 2022 GMT
            Not After : Apr 24 21:57:21 2023 GMT
        Subject: CN=3082010A0282010100CF95C4382C9E8A236C3060DAAEFEE9C6053A6717BBC3455A19D55F336D804E54D81B72D07508B470978F955827D8D4B6782FCEC5BBA4D0774100D64BDA45ED8763D51BB773ED42E0CBC7B77067764293E318815AFF0E86E6C75284A9D0AD62BD4C0B692407F7D002FFC331D227A1E8BA216F081DCC5ADCD1D40726B23BE9D84FC6C144DC0A6C79A77CDD6C8C0DA091DE8A7890E00F7D301770F4778F4BCE57F24F801F523F4A1DC28E7636D7B9BF92E485975521C6211E5D0DBFBF97DD8FB5DC826E6B9010DAE25259DE61AA89151595F78FFCAD6E80254AA55BAA4E5ACA1A7C1F380F774FE18F1F05EAA8F898BFB2394CA738CD6EF2F1F62A1DBA1FEE9840D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:c4:38:2c:9e:8a:23:6c:30:60:da:ae:fe:
                    e9:c6:05:3a:67:17:bb:c3:45:5a:19:d5:5f:33:6d:
                    80:4e:54:d8:1b:72:d0:75:08:b4:70:97:8f:95:58:
                    27:d8:d4:b6:78:2f:ce:c5:bb:a4:d0:77:41:00:d6:
                    4b:da:45:ed:87:63:d5:1b:b7:73:ed:42:e0:cb:c7:
                    b7:70:67:76:42:93:e3:18:81:5a:ff:0e:86:e6:c7:
                    52:84:a9:d0:ad:62:bd:4c:0b:69:24:07:f7:d0:02:
                    ff:c3:31:d2:27:a1:e8:ba:21:6f:08:1d:cc:5a:dc:
                    d1:d4:07:26:b2:3b:e9:d8:4f:c6:c1:44:dc:0a:6c:
                    79:a7:7c:dd:6c:8c:0d:a0:91:de:8a:78:90:e0:0f:
                    7d:30:17:70:f4:77:8f:4b:ce:57:f2:4f:80:1f:52:
                    3f:4a:1d:c2:8e:76:36:d7:b9:bf:92:e4:85:97:55:
                    21:c6:21:1e:5d:0d:bf:bf:97:dd:8f:b5:dc:82:6e:
                    6b:90:10:da:e2:52:59:de:61:aa:89:15:15:95:f7:
                    8f:fc:ad:6e:80:25:4a:a5:5b:aa:4e:5a:ca:1a:7c:
                    1f:38:0f:77:4f:e1:8f:1f:05:ea:a8:f8:98:bf:b2:
                    39:4c:a7:38:cd:6e:f2:f1:f6:2a:1d:ba:1f:ee:98:
                    40:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:98:68:95:52:D8:86:69:56:E6:90:54:30:21:C8:C2:9A:C0:99
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:58:e7:52:c6:f1:bb:cb:81:71:e8:3a:07:87:e6:4a:31:90:
         51:52:06:74:78:16:f8:0b:8d:0e:d8:db:93:89:bf:fe:21:08:
         79:63:05:cd:80:78:6a:56:d7:08:24:2c:cc:17:59:42:11:89:
         d3:29:67:93:85:d6:bd:db:eb:62:ed:d6:34:fc:41:b8:0c:bd:
         ad:54:7b:30:e5:46:f3:42:44:1e:3a:e6:c4:95:13:32:ac:21:
         35:25:b1:d1:98:45:09:78:f4:9b:aa:0c:5f:79:7e:4d:f4:fc:
         7f:1a:51:c5:cb:7e:d4:77:58:f6:0e:16:51:25:18:5e:e7:60:
         ca:13:b0:40:e5:02:5b:a0:04:b8:76:07:e0:90:1f:df:41:cb:
         ac:e0:a7:32:cb:1f:1a:cc:b4:78:c2:d7:b3:87:ca:ac:5b:bc:
         c6:c5:56:6a:ab:50:91:5b:b1:ff:e5:45:13:fc:4d:c5:1f:3b:
         c8:5e:9c:dd:22:9c:bd:e6:a6:69:21:1f:29:a4:e8:43:99:0f:
         4c:a6:1b:3f:28:27:49:13:17:1d:50:62:ea:5b:b9:c4:2f:31:
         6b:3d:03:08:6a:df:20:c4:9a:21:1d:2e:ea:42:04:b7:c7:af:
         55:e2:65:5e:1c:e4:64:3d:31:5e:44:f9:90:96:00:99:37:54:
         47:38:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----