Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          +X/xQYbJ7Mlh+qXVKQorHOVHBhfuL+kpAI2YUvci77M=
Subject key identifier:   40:6D:7C:98:21:E4:FB:A6:A7:F0:FF:E2:47:04:45:D6:DA:0C:80:63
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7A73E297847CBA7ED2933C5E5B39E34F2759ACF4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209242.roa
Signing time:             Wed 09 Mar 2022 13:37:43 +0000
ROA not before:           Wed 09 Mar 2022 13:32:43 +0000
ROA not after:            Wed 08 Mar 2023 13:37:43 +0000
asID:                     209242
IP address blocks:        191.101.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:e2:97:84:7c:ba:7e:d2:93:3c:5e:5b:39:e3:4f:27:59:ac:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:43 2022 GMT
            Not After : Mar  8 13:37:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:67:7b:aa:93:64:26:ee:9a:d4:a0:75:67:
                    46:6b:9e:10:09:40:63:e2:8d:f8:58:28:96:82:7e:
                    48:25:8d:19:a4:b4:7e:e0:f0:9f:c1:b6:f3:ce:11:
                    df:2f:32:b3:0e:96:d0:af:e3:5c:95:55:a6:1c:2f:
                    1c:4b:39:05:f9:06:eb:57:a0:43:80:c9:65:1b:e7:
                    2c:43:90:1a:f0:23:7d:d7:3b:7d:78:b9:95:cc:70:
                    d3:da:37:1d:a6:89:63:8c:77:72:2c:e8:8a:58:4e:
                    ab:f3:0f:eb:e4:54:c7:04:f6:eb:af:b9:87:98:70:
                    06:32:ab:8d:15:c6:d9:7c:34:ca:37:e2:62:23:6d:
                    40:ee:29:d3:67:5b:c6:ea:90:29:25:48:31:76:24:
                    11:4b:e1:ec:8f:95:aa:e6:0a:ce:41:40:fd:1a:30:
                    65:0a:82:2e:66:8d:3f:1b:8e:e7:40:a5:25:e4:8e:
                    e1:5c:41:8b:c2:20:4b:33:77:a3:aa:9f:ab:f1:3a:
                    25:46:d0:a3:4c:92:f6:65:11:f8:bd:1a:19:dc:85:
                    92:13:4a:2e:6f:96:27:78:42:ed:84:0f:d6:9a:a4:
                    d4:ff:ef:34:c0:82:2c:5f:34:99:ea:f6:b4:b5:47:
                    b0:90:da:90:06:ec:78:b2:ba:41:70:e1:6c:84:75:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6D:7C:98:21:E4:FB:A6:A7:F0:FF:E2:47:04:45:D6:DA:0C:80:63
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:c0:3d:d4:08:9b:60:1a:92:d8:0c:84:81:d8:36:dc:a7:
         f2:6a:61:b8:03:36:41:15:d3:e5:ff:ba:ac:0b:12:be:68:97:
         d4:a7:eb:15:f3:bf:f4:b4:63:4f:9b:32:55:44:8f:8b:b1:0a:
         4f:14:dd:e7:0a:76:dd:ed:07:1b:5c:15:32:fe:a1:79:8b:e4:
         3d:cd:37:9b:8a:b8:06:41:59:ba:35:09:60:6f:f7:ad:91:7c:
         6a:b9:8e:66:12:c4:49:d6:d4:2a:e7:cb:ed:d3:d6:d4:28:6c:
         ac:e9:66:7b:fa:16:69:3e:53:5f:e5:69:b8:5b:a4:b1:12:bf:
         1a:27:37:f1:77:12:3b:b0:9f:09:a0:b1:43:c7:cd:ea:47:64:
         6a:b4:1e:bf:f2:9f:5a:3f:e6:74:a9:05:96:3b:7b:b8:2d:fd:
         de:b5:15:31:f8:7f:c7:95:bb:85:f1:86:61:86:18:5a:67:2a:
         b6:1f:1f:cc:34:ec:74:20:77:ef:dc:28:d6:1e:f5:5a:1e:d7:
         4b:5e:8c:5f:57:ee:a3:f2:1e:50:43:b1:d4:53:d7:21:ac:61:
         da:a3:f7:08:b4:fd:3a:28:e4:f7:63:21:95:8e:4d:48:b3:8a:
         14:32:3f:e7:52:5c:5d:34:05:ec:64:bc:95:2c:be:16:b6:e5:
         02:98:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----