Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS23422.roa
File:                     AS23422.roa (raw, json)
Hash identifier:          uwItLpw7VelQ+zMEfa0rR+n155MUyQptQINLKwVKzv0=
Subject key identifier:   B8:CA:1E:0F:8A:22:EF:19:B8:F5:1B:E4:18:20:60:B6:1C:C4:C4:D3
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4310784AD9E252753308FAD82580A837B9DA2BB2
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS23422.roa
Signing time:             Wed 09 Mar 2022 13:34:50 +0000
ROA not before:           Wed 09 Mar 2022 13:29:50 +0000
ROA not after:            Wed 08 Mar 2023 13:34:50 +0000
asID:                     23422
IP address blocks:        191.96.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:10:78:4a:d9:e2:52:75:33:08:fa:d8:25:80:a8:37:b9:da:2b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:29:50 2022 GMT
            Not After : Mar  8 13:34:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:72:29:78:ce:0c:01:5a:21:0a:90:1e:9b:
                    f4:12:b5:23:0f:fd:a7:04:ff:2c:5f:b0:8b:2f:c4:
                    fa:f8:9b:97:2c:53:79:3b:92:34:75:9e:a9:4d:b6:
                    e2:7d:46:82:01:6d:09:cf:0d:f8:da:3b:10:ad:b2:
                    81:e5:18:22:c3:f8:13:27:a3:3e:b0:c6:d8:c9:1a:
                    49:13:ea:f1:10:2a:5c:98:b8:db:4a:b7:12:e2:3d:
                    ce:d0:a1:06:24:4c:25:fd:99:fa:a4:43:e9:05:a2:
                    20:5f:e3:d9:bc:43:76:9b:87:2a:20:f8:1e:f6:b0:
                    93:14:63:0f:db:e6:79:76:64:a5:c5:06:34:91:63:
                    e6:c3:77:7f:1c:59:e0:1f:d9:39:74:02:ff:0c:5c:
                    bb:47:5d:20:65:2b:03:20:ae:0a:6a:65:63:a6:40:
                    6a:2c:99:d0:dc:71:76:0b:37:ea:63:c5:3f:88:f7:
                    23:48:42:2d:74:f3:9a:5c:4a:2e:91:fc:a4:81:82:
                    84:75:a3:1a:75:29:66:b1:0c:23:be:8b:c8:e0:85:
                    d6:10:27:e7:06:03:74:8b:e3:4e:b0:24:6b:fd:ba:
                    f6:3c:f2:2c:89:9a:3f:86:ff:c3:ec:f7:20:97:4c:
                    09:a4:a9:3a:d9:74:cf:6f:12:db:2f:a5:46:0e:9c:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CA:1E:0F:8A:22:EF:19:B8:F5:1B:E4:18:20:60:B6:1C:C4:C4:D3
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS23422.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a8:0c:2b:5a:4a:a5:bc:e7:25:36:a1:5f:89:52:64:29:09:
         40:aa:3b:6f:ed:d2:55:22:08:0e:b5:c9:ee:9a:65:40:a9:51:
         8a:08:8d:6b:e3:7f:82:2c:91:ef:37:ab:69:a7:6b:e4:2b:46:
         36:d2:53:0b:95:a4:d3:7a:47:04:31:91:4c:a0:0c:1b:63:12:
         92:d3:73:c5:9c:5e:c8:3f:a0:98:5d:90:50:c9:00:15:95:70:
         9d:52:26:87:44:a8:63:28:ba:47:a2:e0:1f:4b:fe:c5:b8:9e:
         d4:c0:e8:b9:e1:86:e1:45:50:43:4d:72:4e:15:02:62:33:3b:
         1b:96:b6:5e:b8:fa:b4:2d:09:f5:e1:dc:79:8e:aa:ac:a0:e3:
         7b:cd:dc:e7:74:64:6d:ae:72:6e:5a:36:62:90:cf:24:e7:89:
         0b:76:fd:15:bf:9d:f9:8c:01:20:08:0c:d5:03:ce:55:59:8e:
         df:64:29:97:fe:e7:4a:2b:16:0c:85:7d:3a:a1:b5:ca:25:95:
         85:7c:43:52:9e:62:fe:ea:72:08:a2:00:c0:ff:a9:8e:c9:16:
         57:4e:84:97:14:b0:73:36:f8:68:06:0b:83:c2:f9:13:b2:1e:
         43:ef:fa:2b:b4:2a:82:c0:b3:4f:72:73:01:37:62:52:cc:03:
         b5:9f:01:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----