Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS20771.roa
File:                     AS20771.roa (raw, json)
Hash identifier:          KEzR8bMt/pmBd/HWyQrgCGPycRLSPWsAqLq/1gPQyqU=
Subject key identifier:   F5:AF:E6:D9:E8:38:D1:70:DC:5F:3E:14:C7:71:C1:84:65:AD:96:43
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2F3ABC0941E54C8BB76E0C549B170DC7D472649E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS20771.roa
Signing time:             Wed 09 Mar 2022 13:32:27 +0000
ROA not before:           Wed 09 Mar 2022 13:27:27 +0000
ROA not after:            Wed 08 Mar 2023 13:32:27 +0000
asID:                     20771
IP address blocks:        109.106.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3a:bc:09:41:e5:4c:8b:b7:6e:0c:54:9b:17:0d:c7:d4:72:64:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:27:27 2022 GMT
            Not After : Mar  8 13:32:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d2:00:26:03:ed:46:49:4d:da:ad:67:ff:03:
                    fe:a4:15:4a:f1:93:4a:bb:4e:92:a6:57:f0:7e:a3:
                    a1:ce:b2:be:da:0b:14:47:62:b5:b2:9e:9b:96:b0:
                    04:a1:21:48:65:01:30:91:9b:67:c8:f6:1a:c6:10:
                    80:f9:c1:e2:76:b3:e8:e3:a0:8d:3e:2b:73:65:e3:
                    15:86:61:09:5c:a2:43:84:82:71:0c:36:86:7c:c0:
                    f0:8b:6f:ad:0e:0d:1d:50:b5:d1:0d:4a:a2:92:28:
                    52:f3:a1:03:1a:f0:e6:6f:df:72:fc:89:a1:e8:40:
                    e2:45:98:6a:51:7d:b9:45:56:5a:dc:ca:6c:0c:b5:
                    4b:44:af:db:c4:09:ec:46:14:d4:f5:eb:aa:98:93:
                    8b:cb:76:a0:74:7b:5d:bb:3a:20:94:02:71:37:f0:
                    ef:8f:85:51:99:11:f4:bf:e9:05:3e:a1:b0:53:b5:
                    5e:ff:77:0f:16:f7:fd:85:f8:73:bb:4b:b8:6b:63:
                    50:02:7c:ff:a6:8b:67:c9:b5:df:1b:5f:f5:e3:8a:
                    4b:78:74:d9:4a:7a:5d:56:da:67:0e:f2:b9:fb:dc:
                    ac:74:dd:67:18:4d:6a:89:ba:fc:68:fd:88:ca:4f:
                    17:25:e7:d6:fe:2e:2b:97:61:7f:cd:20:ae:06:28:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AF:E6:D9:E8:38:D1:70:DC:5F:3E:14:C7:71:C1:84:65:AD:96:43
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS20771.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.106.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:93:7f:ba:30:47:83:0d:b0:7f:f2:06:18:a2:5d:ce:65:
         bf:67:96:d2:df:ef:57:76:8e:31:62:7f:60:45:fd:cb:29:0d:
         35:70:5e:a5:15:1d:2b:28:a8:a4:a1:d7:50:dd:9a:e6:f1:73:
         16:e3:5c:b5:56:ae:5c:2c:33:b7:e4:04:97:ca:be:43:1b:53:
         b6:52:96:4b:f5:a0:dd:c9:5d:43:17:ad:21:f2:fb:78:3d:1b:
         8c:41:24:e7:f9:1f:18:84:48:ec:c4:aa:e5:ce:a7:2c:95:46:
         6a:c9:94:a9:1e:00:23:03:9b:69:42:c5:91:65:46:35:5f:4d:
         47:5f:e6:e9:cd:36:c5:60:32:ad:f4:54:40:11:26:46:8c:76:
         be:f5:43:6e:81:bc:ab:97:42:a3:50:31:95:f7:05:8b:d0:ba:
         d9:84:af:ae:6a:01:42:ee:28:51:23:48:84:be:51:bf:8a:fb:
         a7:41:bf:4b:15:e4:55:9b:02:ec:63:f7:4d:71:ff:40:cb:20:
         d2:85:05:b4:d0:aa:25:59:ee:d7:04:2e:b7:fe:10:3a:09:69:
         a3:f7:f8:de:22:ef:03:35:2e:3a:45:e9:75:7c:94:36:8c:fa:
         0b:33:8b:8e:af:70:27:7e:54:7f:cc:84:dd:e1:eb:37:d2:e0:
         df:06:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----