Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207459.roa
File:                     AS207459.roa (raw, json)
Hash identifier:          qXbUGMnRRt5R9UydAbr+r3AlJGuCouVL5barzu210sE=
Subject key identifier:   9C:01:39:43:19:37:67:82:3A:F0:DB:91:FD:E4:16:18:6E:37:A7:42
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       177EBBF0BD57D790884288B3ABC308636B1297A9
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207459.roa
Signing time:             Mon 06 Jun 2022 17:45:41 +0000
ROA not before:           Mon 06 Jun 2022 17:40:41 +0000
ROA not after:            Mon 05 Jun 2023 17:45:41 +0000
asID:                     207459
IP address blocks:        185.143.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7e:bb:f0:bd:57:d7:90:88:42:88:b3:ab:c3:08:63:6b:12:97:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  6 17:40:41 2022 GMT
            Not After : Jun  5 17:45:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:4d:e9:4c:fd:f0:14:10:9e:af:24:04:b2:
                    34:a6:f6:1f:3b:30:e1:e8:c8:0a:01:87:a6:ac:ff:
                    50:b2:3e:65:7a:be:69:da:89:6a:7d:04:9a:e1:77:
                    e3:5b:ea:02:97:c4:e7:c8:fd:f9:3d:eb:35:8d:bf:
                    bf:af:88:1c:a2:59:9e:aa:d1:7d:44:93:77:45:50:
                    b3:0c:3d:e5:71:28:de:37:30:de:04:35:cf:68:ce:
                    90:1e:d9:0b:bd:eb:ce:81:1d:47:47:36:0a:10:53:
                    37:39:95:96:83:ea:10:31:fd:d7:e7:58:fe:07:ad:
                    b1:c1:dd:3e:1d:f9:0e:4b:4f:2b:ee:c7:84:c6:f0:
                    02:89:db:56:ca:af:42:af:71:8b:ce:3d:a9:5d:8d:
                    a4:d3:57:fd:de:01:17:1f:80:3a:20:63:d8:06:8d:
                    24:39:bf:6b:e4:ec:82:5b:97:08:22:53:35:03:54:
                    8f:8c:5c:dd:b6:aa:04:3d:89:68:f5:95:1e:15:02:
                    e0:86:a5:cd:27:ae:ef:07:b3:7a:ae:57:48:dc:99:
                    6d:7c:9d:a1:8e:c2:c0:7d:64:77:1e:7b:1a:6c:36:
                    6e:5b:fb:21:37:e6:bb:ec:0b:bd:e6:db:92:ad:b0:
                    ee:a7:35:eb:d2:8d:6a:64:04:7e:13:b9:66:80:93:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:39:43:19:37:67:82:3A:F0:DB:91:FD:E4:16:18:6E:37:A7:42
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:95:ab:91:c4:ed:62:85:f8:07:89:7a:6e:63:27:a6:b1:95:
         39:c6:f0:b5:5b:a1:f7:12:0a:a6:ef:d2:60:3e:89:30:11:e1:
         d0:28:a1:9a:b2:43:29:a1:14:b1:4e:97:32:8e:03:a5:d6:77:
         39:8d:1d:1a:95:16:6b:cd:9b:5d:e8:4e:e0:04:5f:66:7c:26:
         9c:2d:2b:99:af:c9:be:dc:f5:ab:29:2a:81:7c:f6:f8:9a:d9:
         bf:59:bf:ff:e1:5a:02:b0:4e:95:90:9b:ae:b4:9d:b2:2e:92:
         bc:88:0b:65:ee:7c:ab:35:91:b8:f6:33:da:03:f2:38:ab:f9:
         2d:a8:49:ca:10:0b:94:5f:4e:2d:6e:c4:c6:dc:f8:d5:75:78:
         69:94:23:3c:36:98:90:59:18:2d:48:03:9d:ab:c7:e6:f4:0e:
         8d:82:88:c0:73:64:5b:18:1e:a8:d3:d5:30:0c:18:78:de:4d:
         14:8c:ce:d5:f3:04:18:8a:68:7c:e2:6b:aa:70:31:33:48:66:
         4e:fd:08:c0:ed:5c:d9:f9:e3:b2:f3:b7:13:7a:a1:8c:e1:c2:
         7a:e0:03:b3:cd:ab:10:c3:9d:84:33:b8:40:e4:28:d5:a2:2d:
         7a:1e:4a:64:24:cc:b8:10:5e:dc:44:70:19:94:64:6e:26:b1:
         b6:42:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----