Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211588.roa
File:                     AS211588.roa (raw, json)
Hash identifier:          uCr17lNbtT3TJ6NfXLiwx8twlKfXjzkWp+l0eWprvCE=
Subject key identifier:   0B:0D:52:6C:85:4F:A3:E5:86:32:6A:1E:07:B2:01:3A:DE:69:E0:60
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       11CCE71005873806790B805E33AE61FE278D35FB
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211588.roa
Signing time:             Wed 30 Mar 2022 12:34:09 +0000
ROA not before:           Wed 30 Mar 2022 12:29:09 +0000
ROA not after:            Wed 29 Mar 2023 12:34:09 +0000
asID:                     211588
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cc:e7:10:05:87:38:06:79:0b:80:5e:33:ae:61:fe:27:8d:35:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 30 12:29:09 2022 GMT
            Not After : Mar 29 12:34:09 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:f8:a4:c1:d4:c7:49:06:32:89:e2:30:5b:
                    cb:ac:42:8d:06:d4:27:74:e2:0d:3d:6d:1e:bb:2c:
                    82:f4:c8:53:70:c8:f6:5a:b3:a1:df:23:65:01:50:
                    98:64:19:0c:5f:1c:91:8c:7b:6c:0b:21:f3:3d:33:
                    0c:5d:10:43:0d:b2:29:d7:df:88:b6:59:ac:ad:46:
                    f9:3a:02:4e:85:4e:0e:2d:f6:fa:2a:8b:eb:de:f7:
                    b3:90:0e:ad:cf:e0:9e:0d:e8:b1:97:d8:66:6e:c9:
                    e8:a6:12:f1:7c:d5:73:10:ff:9f:2a:5d:be:4f:93:
                    6b:19:59:09:90:70:f4:84:4b:6c:79:59:0f:ee:83:
                    7d:d9:8f:c6:12:c5:2e:b1:a6:42:3b:b2:6c:05:df:
                    e9:3f:31:f3:cd:4d:40:c1:3a:d9:d8:f1:ab:68:d9:
                    f7:94:52:e8:23:b9:fe:f9:79:93:e9:f9:65:ce:01:
                    c0:78:31:a0:31:eb:60:59:fb:45:46:45:08:d8:89:
                    7e:f3:ca:c1:41:f7:f2:a3:b2:85:d3:43:1d:7b:03:
                    91:bf:5f:f2:37:0a:9d:4b:7b:85:dd:db:82:de:8a:
                    99:43:86:07:a5:4a:44:3e:3e:60:92:87:98:51:01:
                    13:03:44:de:67:17:8b:5f:d0:40:29:b9:04:ba:24:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:52:6C:85:4F:A3:E5:86:32:6A:1E:07:B2:01:3A:DE:69:E0:60
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:dd:c6:a2:57:cd:7b:9f:c1:96:f1:47:b3:97:31:68:bf:59:
         80:54:fc:bb:9f:3f:db:fe:b4:cd:d2:5b:48:7b:f3:2e:a8:75:
         36:98:6d:30:64:e4:7a:4f:b6:a1:ea:58:07:75:74:aa:57:c4:
         6a:b0:b8:27:70:ee:ee:5e:3d:84:06:cc:1c:6a:d6:48:ea:44:
         7a:5c:50:a2:20:d8:65:37:20:59:49:9f:7e:cd:05:58:22:a5:
         3d:6b:f1:46:4f:c7:7a:e3:24:20:f7:5f:69:a9:d5:2a:9d:e4:
         c5:1f:00:7a:2a:27:ab:23:43:ad:5d:d6:92:d4:01:9e:87:c4:
         63:dc:c5:ff:e0:82:b2:ac:0d:e3:c0:e2:5e:b9:d1:e5:75:a2:
         8d:3b:d5:3b:3a:f1:41:60:6e:b6:95:7a:40:7a:60:5a:1d:8c:
         24:72:53:d2:0c:02:25:4c:d4:12:fd:f4:33:11:c3:69:16:14:
         7c:64:e8:94:35:80:2a:36:25:46:36:03:17:06:1b:e3:9b:ef:
         c9:22:18:ee:53:4a:d5:87:ee:7c:6b:67:86:b9:cf:8f:34:32:
         29:96:08:52:12:b2:0e:2b:f1:92:79:57:ab:b9:65:44:30:0d:
         9e:8d:c8:e1:a4:92:35:19:50:f0:fa:ee:af:90:c7:6d:e0:17:
         3a:64:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----