Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272045.roa
File:                     AS272045.roa (raw, json)
Hash identifier:          AoY6koMbbtW+8vi1lY6mdXWopGYvMj8221bxlqZH9NM=
Subject key identifier:   64:10:1C:5C:F8:2A:79:B7:C3:0A:3B:62:F4:26:7C:25:B0:BA:42:7C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       2C73008DA326A7C1A76FF60021E3AA1337F2ADC3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272045.roa
Signing time:             Thu 31 Mar 2022 00:35:31 +0000
ROA not before:           Thu 31 Mar 2022 00:30:31 +0000
ROA not after:            Thu 30 Mar 2023 00:35:31 +0000
asID:                     272045
IP address blocks:        191.96.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:73:00:8d:a3:26:a7:c1:a7:6f:f6:00:21:e3:aa:13:37:f2:ad:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 31 00:30:31 2022 GMT
            Not After : Mar 30 00:35:31 2023 GMT
        Subject: CN=3082010A0282010100A3E50D71606A4210093C0C3DAA7CC7FAFA91692E86D74CF879C7D0B2DACDEDC550CBDD1B49A02635492779BDAE850E389E482025D89EDF6E4C36530BBAFB4AF49CD7DA06C08D2BFF5A00706C8D41E5E5AF9D37580D5E0DC656DEFD4BDACD7E97E7DE231AFE432C73D48EC6708E135BDBF8BD202B3F14ACFA4718B775F5EE471C4323C81C2F2AB56C53BD06CE917AF6953BCC486697549469D7340FF9F27218CD6ED47362EC49C119C02482819D06872C2C5DDB881964B18047A045E8398478A45E6771A4789B61FFDA4706E95F805F50F0F56A8F97D2FB474B62445EB4B1BC616BF99F076F3F4BEB54BCB1EDAB2043F896B91EC19D81E3A59D46723E5394057B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:0d:71:60:6a:42:10:09:3c:0c:3d:aa:7c:
                    c7:fa:fa:91:69:2e:86:d7:4c:f8:79:c7:d0:b2:da:
                    cd:ed:c5:50:cb:dd:1b:49:a0:26:35:49:27:79:bd:
                    ae:85:0e:38:9e:48:20:25:d8:9e:df:6e:4c:36:53:
                    0b:ba:fb:4a:f4:9c:d7:da:06:c0:8d:2b:ff:5a:00:
                    70:6c:8d:41:e5:e5:af:9d:37:58:0d:5e:0d:c6:56:
                    de:fd:4b:da:cd:7e:97:e7:de:23:1a:fe:43:2c:73:
                    d4:8e:c6:70:8e:13:5b:db:f8:bd:20:2b:3f:14:ac:
                    fa:47:18:b7:75:f5:ee:47:1c:43:23:c8:1c:2f:2a:
                    b5:6c:53:bd:06:ce:91:7a:f6:95:3b:cc:48:66:97:
                    54:94:69:d7:34:0f:f9:f2:72:18:cd:6e:d4:73:62:
                    ec:49:c1:19:c0:24:82:81:9d:06:87:2c:2c:5d:db:
                    88:19:64:b1:80:47:a0:45:e8:39:84:78:a4:5e:67:
                    71:a4:78:9b:61:ff:da:47:06:e9:5f:80:5f:50:f0:
                    f5:6a:8f:97:d2:fb:47:4b:62:44:5e:b4:b1:bc:61:
                    6b:f9:9f:07:6f:3f:4b:eb:54:bc:b1:ed:ab:20:43:
                    f8:96:b9:1e:c1:9d:81:e3:a5:9d:46:72:3e:53:94:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:1C:5C:F8:2A:79:B7:C3:0A:3B:62:F4:26:7C:25:B0:BA:42:7C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:61:f1:ca:2f:f0:fa:fd:7a:14:d1:c3:7c:99:9d:4e:36:ec:
         b4:3e:fa:74:7a:05:5a:08:6d:ad:4b:ad:31:90:de:ae:77:0f:
         db:b0:38:b3:aa:ff:07:dd:02:12:be:fe:21:bb:48:be:47:bb:
         d8:07:48:86:03:79:0f:f7:81:18:fb:c5:b2:28:b5:d4:23:dc:
         d2:2f:65:27:ff:8b:ef:1e:b9:25:60:49:3f:ec:c7:91:f3:2d:
         c4:e4:5f:b3:2c:92:2a:32:7b:4f:dd:fb:0d:db:a6:77:d9:93:
         79:f4:d1:6d:d8:d4:7e:95:95:25:6d:04:7b:25:e6:43:9d:a0:
         75:15:7f:96:c7:c8:c6:7c:65:9b:45:9b:c7:66:66:e7:34:14:
         ad:ca:e0:da:44:15:87:a5:83:fa:35:cd:bc:e1:9a:83:62:99:
         50:ad:ea:32:29:58:73:1f:aa:8e:38:14:a4:63:74:ff:df:79:
         2e:8e:ed:f7:18:bd:7f:9a:07:97:12:a9:e0:43:a0:96:6a:2a:
         1a:ce:19:5b:da:17:42:32:25:a9:79:ad:b5:5f:3f:5e:9f:2d:
         74:67:e8:03:15:34:55:14:61:9a:d7:45:c1:ca:9c:a5:af:df:
         67:60:d5:d3:72:ba:2f:42:3c:ae:c9:8f:08:4f:dc:8a:50:d4:
         38:3a:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----