Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270375.roa
File:                     AS270375.roa (raw, json)
Hash identifier:          0lqJE2DzNkjCSVrw88i3TKLTNWCGVFS9wZwXqWxTJwo=
Subject key identifier:   5D:D0:5B:95:BA:87:5C:E1:33:59:F4:D5:D1:CE:98:0E:9A:5D:4B:95
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4DC7373621C96EBFDC8DDDBB3844866AECB63342
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270375.roa
Signing time:             Wed 09 Mar 2022 13:37:45 +0000
ROA not before:           Wed 09 Mar 2022 13:32:45 +0000
ROA not after:            Wed 08 Mar 2023 13:37:45 +0000
asID:                     270375
IP address blocks:        191.96.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c7:37:36:21:c9:6e:bf:dc:8d:dd:bb:38:44:86:6a:ec:b6:33:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:45 2022 GMT
            Not After : Mar  8 13:37:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:23:10:3c:4a:53:76:e3:0c:64:94:be:67:
                    4a:70:c1:8e:03:bf:ec:f6:c8:56:50:e0:2f:0a:fe:
                    30:13:e3:2a:18:04:62:55:60:f0:44:11:86:c6:b6:
                    87:40:46:6e:fc:1f:ce:70:c5:49:15:5a:64:d2:d8:
                    4a:d1:ae:30:b9:d5:9b:3d:0e:49:80:4a:cc:c0:f3:
                    64:1e:9c:32:dd:83:1e:2b:fb:88:a3:de:5d:9c:84:
                    7e:d9:73:4f:7a:4a:b8:73:97:a4:f1:c1:3b:cb:fd:
                    31:83:12:32:a4:82:4c:0c:3b:3a:fb:b5:c5:5c:96:
                    b6:b1:b0:58:37:6e:09:97:f9:11:ff:5b:42:e3:f1:
                    ce:fd:0a:22:1c:f0:4b:5d:88:b8:ec:69:99:e1:b5:
                    b5:e1:44:1e:2a:25:88:ca:74:bd:bb:39:c3:f0:82:
                    7d:b2:4f:f3:97:62:8a:79:e6:6d:b8:89:52:96:2b:
                    2f:a2:b9:35:4d:0b:8b:02:ba:9d:81:61:05:8c:43:
                    6e:fb:85:d7:d8:42:67:e0:6a:fb:88:2c:b9:34:15:
                    8c:54:77:57:6d:0d:c5:9a:da:4f:54:f0:76:90:ba:
                    ed:d6:96:9d:c5:bb:d9:eb:d9:8a:2b:28:34:bd:ca:
                    f8:96:83:d8:81:28:55:97:da:8f:98:7f:6f:7b:1a:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D0:5B:95:BA:87:5C:E1:33:59:F4:D5:D1:CE:98:0E:9A:5D:4B:95
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS270375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:fd:81:78:03:ef:71:78:a5:22:fe:a8:98:84:13:56:c7:49:
         9a:dc:7a:9a:49:98:47:d3:5c:7c:11:50:12:de:51:14:ac:20:
         b3:93:0b:0c:3a:58:84:d1:3e:d0:bf:4c:89:49:96:24:36:ef:
         7f:fe:0f:36:ad:45:99:bf:89:4f:a2:7d:e1:f6:83:55:09:03:
         23:b1:36:5e:e6:bb:4d:2e:32:41:9e:28:f6:04:9b:4a:20:00:
         50:36:73:cb:65:4c:68:0c:89:4f:c6:1c:37:4d:fd:7f:b5:d1:
         13:1c:61:5d:49:54:16:73:50:ef:33:c8:f0:55:db:5d:b3:b6:
         24:f5:49:75:70:85:cb:72:3c:71:37:e4:f5:87:95:c3:05:b4:
         87:1f:b4:0f:c7:9d:2f:b3:0c:f3:98:98:58:75:4e:0a:ba:33:
         17:22:6e:b8:12:87:0b:af:67:65:3c:08:9b:02:f0:2f:b8:42:
         77:bf:0d:55:8a:25:7f:d1:11:92:f8:31:12:9a:34:0c:a3:bb:
         58:d4:1e:4c:b8:77:af:11:40:46:69:de:f9:96:9d:17:d5:f7:
         67:94:f1:19:e9:f8:13:71:b5:8b:7f:0f:98:9a:43:45:13:d2:
         37:be:af:a1:31:0a:c6:61:8a:e1:8f:76:3b:d0:6b:28:6a:0c:
         fd:60:b7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----