Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267701.roa
File:                     AS267701.roa (raw, json)
Hash identifier:          bbn9nuClFHCT2BcmSWVOYyUvjDSPj/QFs+CUW6nZZv4=
Subject key identifier:   3C:C6:8E:30:E5:3F:E6:41:F0:5D:E7:3E:EF:9A:F2:D2:52:06:79:3B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1FC96EED235C1250FA1449DC5B72B4799585F08C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267701.roa
Signing time:             Wed 09 Mar 2022 13:37:44 +0000
ROA not before:           Wed 09 Mar 2022 13:32:44 +0000
ROA not after:            Wed 08 Mar 2023 13:37:44 +0000
asID:                     267701
IP address blocks:        191.101.56.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c9:6e:ed:23:5c:12:50:fa:14:49:dc:5b:72:b4:79:95:85:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:44 2022 GMT
            Not After : Mar  8 13:37:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:c8:46:3a:a8:3a:b9:b0:8e:a3:ca:df:90:
                    86:77:e2:00:0a:07:c8:79:13:14:83:8d:e3:88:76:
                    3e:02:8b:04:d2:70:45:38:80:67:e3:9e:6f:35:bd:
                    81:e9:2a:92:09:aa:e2:62:70:8c:c6:e1:aa:1f:47:
                    9b:6b:dc:71:21:54:f4:6d:e6:fc:34:2b:c2:b6:a5:
                    90:5a:4d:78:d9:2a:e9:9c:cb:2c:0e:47:f8:4d:cc:
                    d8:f8:61:b1:c3:b9:d0:ee:22:04:3f:93:17:ad:b8:
                    7b:cb:5d:92:11:d0:5a:1e:28:bb:79:7d:45:5d:9d:
                    84:59:68:85:71:d7:ff:9e:12:a2:9f:36:77:32:28:
                    bf:26:d9:62:c8:18:c0:38:8e:b7:04:67:fe:03:b5:
                    bf:fe:8a:7e:df:d5:22:74:53:15:2c:e9:f4:1a:da:
                    ec:42:cd:11:c8:19:7b:47:25:e7:24:c1:a5:48:52:
                    4b:1d:a6:cc:fc:7e:90:cd:cb:40:56:4b:87:cf:2f:
                    ae:1c:7c:7c:56:0c:c7:da:4b:7b:eb:61:11:03:5f:
                    ab:97:08:a9:27:a5:75:b9:08:b1:e1:cc:c9:37:a7:
                    08:56:b5:f0:38:7c:72:49:02:2f:b1:2d:1f:ae:91:
                    94:d2:5e:2e:7b:78:7e:2f:12:c8:96:2e:8f:a7:24:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:8E:30:E5:3F:E6:41:F0:5D:E7:3E:EF:9A:F2:D2:52:06:79:3B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS267701.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:b1:f6:b0:63:f7:9c:23:61:95:59:96:de:9b:fb:5a:ea:
         2f:e4:50:48:3b:f0:90:37:17:9c:51:87:ff:e2:32:bd:6a:e0:
         f6:88:bc:e2:43:03:13:38:d9:2a:36:a0:09:ea:99:9b:79:28:
         0b:6e:f9:86:4c:c9:94:c0:63:68:37:f0:f0:74:33:b6:a8:40:
         9d:e9:00:28:14:b2:24:f5:7a:68:30:f6:30:74:31:38:c2:88:
         81:8d:0e:4d:cf:0f:81:61:63:09:5d:15:28:d6:f2:92:51:43:
         81:ec:36:85:b1:71:ae:1c:46:64:0b:07:bf:0d:d4:e5:cd:cc:
         f0:71:42:ac:3f:d5:fc:bd:20:bc:63:d7:99:e1:27:72:65:10:
         90:b4:94:f7:a7:84:59:43:0a:67:76:02:16:f6:5b:8a:82:48:
         27:8a:ef:a8:8e:5b:29:13:f3:2f:6c:9c:57:2f:f8:be:69:40:
         78:2e:52:46:b5:45:74:cd:fc:5e:ed:c6:b3:f5:33:7a:5d:eb:
         0d:2e:6f:39:fd:b8:14:1d:f8:9e:1e:87:11:c7:24:8c:61:e8:
         f1:fe:ad:60:a1:50:85:2d:45:4e:90:34:ee:43:09:df:29:c7:
         57:08:87:25:b3:80:55:1b:37:d0:59:af:7a:da:f9:ef:38:d8:
         c6:1b:1d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----