Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207588.roa
File:                     AS207588.roa (raw, json)
Hash identifier:          KnzO7QDlOxmqlcvglghWdjeivGPJjB/9lsmkHozzR+U=
Subject key identifier:   5D:7B:69:86:AA:F5:49:47:93:42:32:EA:29:1C:1E:43:B3:CF:6C:01
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5680BD916BAA9C233DE33A2F256095C4A39C889E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207588.roa
Signing time:             Wed 08 Jun 2022 15:31:52 +0000
ROA not before:           Wed 08 Jun 2022 15:26:52 +0000
ROA not after:            Wed 07 Jun 2023 15:31:52 +0000
asID:                     207588
IP address blocks:        191.101.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:80:bd:91:6b:aa:9c:23:3d:e3:3a:2f:25:60:95:c4:a3:9c:88:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  8 15:26:52 2022 GMT
            Not After : Jun  7 15:31:52 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:c1:d3:ce:77:9c:fe:59:a7:71:3d:fb:d3:
                    48:d5:50:57:d0:6d:67:5d:ac:b7:40:d2:44:bc:f2:
                    76:78:bf:fa:27:4c:5d:9c:cc:22:ba:40:74:df:7d:
                    e3:35:72:cb:43:a3:21:3a:3b:94:54:eb:bd:fc:db:
                    da:d4:99:0d:e2:b3:d2:a9:96:30:b8:80:d5:07:39:
                    98:8a:4f:39:fb:5c:bc:2d:08:cf:8d:5a:e3:04:20:
                    18:05:78:d8:99:11:3b:d6:c2:e4:a8:5f:f5:65:8d:
                    ba:ed:bf:31:07:b0:4b:2e:1b:46:cb:6b:bc:99:bb:
                    f7:48:ab:80:01:79:a0:38:15:76:1c:9b:51:6c:d4:
                    15:47:c7:20:20:33:1a:01:e5:0c:dd:c7:25:4b:50:
                    98:04:1c:b9:b6:d2:95:7b:a7:70:ea:b2:e0:ab:d0:
                    e4:2a:c4:2a:9b:8b:8a:6a:3c:82:b7:93:f0:a2:76:
                    81:a4:0a:6f:fc:6f:f4:2d:fd:ca:12:36:06:6d:f8:
                    5c:ed:90:9f:0c:71:2b:bd:54:7d:84:1c:d9:26:5d:
                    02:f4:61:16:0b:14:30:9e:50:d4:09:6a:28:6d:ad:
                    fd:8e:4e:39:fb:ee:b3:a9:72:74:a8:fa:49:e7:78:
                    f5:cd:c2:1c:ad:1b:a9:55:40:ba:36:b5:8c:84:47:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:69:86:AA:F5:49:47:93:42:32:EA:29:1C:1E:43:B3:CF:6C:01
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS207588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:58:7b:04:51:fc:e3:2b:92:f9:2b:e5:35:f7:03:dd:58:
         d1:bc:21:0e:6d:6d:bc:3b:25:0a:d5:0f:d1:88:54:c1:77:fb:
         68:77:65:29:38:c5:79:58:67:0f:2e:16:c1:3a:3b:5e:4f:ce:
         5d:c4:ea:60:df:df:32:9e:ae:26:a2:74:8c:4d:35:d7:81:d9:
         9c:17:25:6b:1c:3e:21:19:54:15:53:3e:83:e2:96:62:98:e4:
         41:73:48:43:8d:57:4f:5e:c6:37:f1:a1:cd:4b:ab:6e:1b:d4:
         bf:5a:85:a0:ab:57:42:3b:4f:9d:4b:a5:b3:cc:98:ca:04:24:
         22:f7:89:b3:dd:85:2e:e9:95:15:e3:d1:fa:7a:75:ce:e6:68:
         a0:70:13:ca:cb:f5:b0:bb:19:14:52:b6:f2:8f:2c:da:87:f2:
         8b:4b:7d:00:d5:82:5a:7e:88:e9:f4:a0:aa:bc:6d:d3:4f:29:
         40:56:2f:37:28:66:03:76:ae:28:50:81:86:97:83:59:eb:8e:
         a2:9f:b5:65:d3:8d:4c:85:1c:cf:ac:a3:1f:bb:45:67:39:0f:
         a4:3f:d4:74:d8:83:44:ea:cd:f1:16:31:7b:6a:04:73:1d:3c:
         be:a6:7c:a4:38:c8:1e:6b:08:f7:0f:4a:c2:03:7d:2b:86:64:
         49:de:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----