Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206735.roa
File:                     AS206735.roa (raw, json)
Hash identifier:          tFWI9e8a9rSQfE9N+O2er6gzY0wvagZ5w5Puxbo4CR4=
Subject key identifier:   50:82:96:BA:4F:95:5A:10:A4:A0:76:67:A1:29:07:3F:44:99:D1:0E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       58606EEC250F6B86AA41D36075E1FC7A7E0B3ACC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206735.roa
Signing time:             Fri 10 Jun 2022 07:52:55 +0000
ROA not before:           Fri 10 Jun 2022 07:47:55 +0000
ROA not after:            Fri 09 Jun 2023 07:52:55 +0000
asID:                     206735
IP address blocks:        193.31.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:6e:ec:25:0f:6b:86:aa:41:d3:60:75:e1:fc:7a:7e:0b:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 10 07:47:55 2022 GMT
            Not After : Jun  9 07:52:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:b2:e2:03:1d:f9:3d:a1:76:b7:bf:3b:4b:
                    f4:e9:b4:70:75:34:72:e2:e9:c1:6b:d3:f2:11:02:
                    1b:b7:75:03:9a:c4:a8:bd:13:15:39:ec:4d:7c:50:
                    f3:ca:42:f2:ff:18:d8:de:d7:19:e2:ac:95:04:b3:
                    a0:01:23:07:5a:4c:8e:ad:96:95:46:8c:39:e4:77:
                    69:1c:52:da:5f:25:03:0a:5c:32:c4:43:93:e7:83:
                    ee:1a:87:1b:2d:75:96:a8:05:97:6b:ac:05:5d:f7:
                    26:5e:1e:74:08:b7:bf:2e:aa:cd:65:5e:0b:5d:c7:
                    6f:c4:f9:01:9a:e5:fb:8d:04:89:1b:65:3f:11:3c:
                    4e:39:82:ee:ab:29:07:df:d9:32:09:87:b7:6d:f7:
                    73:3d:2d:6c:19:ec:69:ec:66:e9:99:b7:61:f1:89:
                    82:2e:41:f2:08:83:ac:53:c4:27:36:de:97:7c:56:
                    49:b6:90:fa:37:71:ec:70:50:50:20:9b:c1:d7:ae:
                    ef:ce:2c:2f:11:2a:cd:14:a5:cb:06:b6:49:f4:3a:
                    22:d6:d4:68:0b:5b:a4:7e:f3:75:64:0e:18:77:12:
                    51:c5:b8:11:56:55:f0:59:9c:72:6f:a6:0f:9b:c9:
                    d1:52:f2:58:48:01:5d:d3:f0:d5:8b:92:4b:82:36:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:82:96:BA:4F:95:5A:10:A4:A0:76:67:A1:29:07:3F:44:99:D1:0E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS206735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ae:55:51:0e:94:31:3e:5d:aa:04:7a:94:ad:9e:09:4b:6c:
         2b:4e:f5:1d:4f:39:a0:6e:ce:63:4e:fa:be:4d:e8:ed:f5:8c:
         0d:47:73:aa:6f:74:93:01:c1:81:aa:2f:76:e5:a3:a0:ad:df:
         97:a2:46:f4:7e:8c:34:f8:95:91:88:1f:75:46:f9:ca:94:be:
         00:19:53:7e:bd:d8:53:77:5f:f8:0c:62:ec:1d:e8:f8:48:ef:
         ff:57:62:88:d5:48:79:23:98:6f:9f:80:ea:c7:79:84:9c:65:
         78:66:e2:aa:5b:1d:5e:b8:7b:4e:d5:1a:07:bd:62:aa:79:fb:
         68:90:cd:9d:19:87:17:e5:96:32:3a:a0:ce:32:0f:c2:63:b3:
         56:1f:e8:6d:c2:66:45:f4:f4:85:d0:7f:8c:a8:1d:9e:da:c8:
         34:93:bd:36:00:24:a5:02:57:4a:a1:ee:c1:03:77:5a:ad:7e:
         92:e9:76:b7:38:b3:a1:9c:8d:99:e8:66:7b:db:b5:07:c7:16:
         f3:34:72:4d:7d:2d:23:99:71:03:9a:f5:9b:0d:60:9f:2c:76:
         79:d6:b6:8f:23:7a:eb:f4:ad:43:e2:6b:81:b3:da:0a:d3:3d:
         22:87:68:c1:7d:86:42:f1:70:35:0d:57:10:5e:59:8e:3d:5a:
         e9:6e:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----