Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271996.roa
File:                     AS271996.roa (raw, json)
Hash identifier:          S5LuYwv4gXnyQLOjUM+X9kRPPYDIi40UIIhC3O/vZCo=
Subject key identifier:   23:46:A9:9C:EF:B7:4B:39:A9:5E:62:B6:50:25:EB:7C:D7:3D:B3:03
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6AF287B5753165B8E892CF25E8220F619F8A4DC7
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271996.roa
Signing time:             Wed 16 Mar 2022 20:41:08 +0000
ROA not before:           Wed 16 Mar 2022 20:36:08 +0000
ROA not after:            Wed 15 Mar 2023 20:41:08 +0000
asID:                     271996
IP address blocks:        181.215.231.0/24 maxlen: 24
                          181.215.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f2:87:b5:75:31:65:b8:e8:92:cf:25:e8:22:0f:61:9f:8a:4d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 16 20:36:08 2022 GMT
            Not After : Mar 15 20:41:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:27:8f:75:88:93:58:54:6e:cd:b7:3e:83:
                    f2:73:f5:c6:74:3e:b1:92:88:86:81:2b:27:e0:20:
                    ba:10:e5:5f:98:9d:e1:25:f2:dc:93:56:b7:12:4f:
                    ef:c1:9a:ff:06:5b:3c:16:11:2a:33:ac:76:91:35:
                    79:30:03:44:2f:27:65:3e:7b:5d:b8:f1:18:74:88:
                    70:a4:29:91:80:d3:fd:df:bc:b1:50:a4:ca:79:b6:
                    8c:18:3c:2e:58:24:52:c5:0e:f9:1b:a3:51:18:26:
                    96:af:b4:19:e5:a2:b2:17:b9:40:9a:c5:65:13:a9:
                    fb:3a:72:5a:31:84:4c:94:04:f1:a8:20:b6:12:bb:
                    e4:4b:0f:87:2c:88:f1:ff:d0:12:0c:24:ae:3b:53:
                    69:2d:17:41:f8:06:4a:ba:53:c4:9d:d3:3c:e8:9d:
                    0a:66:bd:35:5f:c6:e3:d8:4f:83:17:f2:ea:ef:9f:
                    08:09:cc:91:0f:83:a7:42:01:36:6c:dc:d5:f3:3d:
                    aa:f9:cd:ec:85:7c:c5:1b:b9:c6:28:cc:d5:fa:3b:
                    bc:0d:ab:ba:9c:04:43:92:6c:84:86:bc:4e:7c:98:
                    ee:7e:a9:bf:83:0c:5d:bb:31:bd:bb:50:9f:1a:bc:
                    88:3e:9c:2a:65:b5:30:7d:0c:51:14:ce:f6:c9:8a:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:A9:9C:EF:B7:4B:39:A9:5E:62:B6:50:25:EB:7C:D7:3D:B3:03
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS271996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.231.0/24
                  181.215.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:9f:1e:14:ff:7b:b3:bb:d8:66:ec:ab:d7:03:eb:98:a9:
         36:9e:ed:04:bb:b2:82:6f:8f:0a:ae:a3:64:b2:a3:ae:24:71:
         49:52:c3:ee:4e:ed:b3:a3:9b:b0:80:55:94:c4:9a:91:57:4f:
         30:7d:ea:c3:c6:f8:e3:68:b8:04:27:0d:fa:15:a9:53:92:19:
         c8:85:a5:94:e3:7a:77:95:1f:aa:8e:45:76:76:37:b0:6f:1e:
         60:7b:3e:5e:26:40:a3:85:85:0f:3c:06:39:ae:5a:d7:7f:c0:
         14:44:8b:bb:19:ad:49:a8:0e:ad:e3:94:ca:34:d4:8c:38:d7:
         ba:93:bc:5c:b4:fe:76:04:5a:e7:3d:15:17:4e:a6:16:28:11:
         62:1f:b2:30:48:6d:e8:cb:84:72:2f:71:c3:c0:e2:28:54:4d:
         a3:c4:fa:37:c4:d5:24:aa:cb:d2:fb:68:64:44:2f:26:26:43:
         92:39:f0:ca:fe:62:0e:d1:91:2e:80:ce:d1:a2:0f:e3:e7:93:
         86:03:4e:c5:62:59:a7:c3:f3:0f:73:40:70:c1:db:48:c1:4f:
         c6:36:a2:f6:8b:ff:f6:5f:44:3b:e5:53:c0:03:e7:2a:be:45:
         e6:45:d6:78:4b:d0:8f:7d:49:a7:ea:a9:c0:73:80:1e:19:3b:
         f8:1d:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----