Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272110.roa
File:                     AS272110.roa (raw, json)
Hash identifier:          lc/Bi9VkUVx7lu2m/jvPKcrKoyg2Hka5pFREn/GOMLo=
Subject key identifier:   66:7F:52:5C:4A:DB:AE:92:42:00:B7:E2:EC:CA:34:8A:F0:A1:C2:1A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4A307166FE1C2A68C3684FAD1AF08C3CA64E6CA3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272110.roa
Signing time:             Fri 03 Jun 2022 08:33:35 +0000
ROA not before:           Fri 03 Jun 2022 08:28:35 +0000
ROA not after:            Fri 02 Jun 2023 08:33:35 +0000
asID:                     272110
IP address blocks:        191.96.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:71:66:fe:1c:2a:68:c3:68:4f:ad:1a:f0:8c:3c:a6:4e:6c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  3 08:28:35 2022 GMT
            Not After : Jun  2 08:33:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:81:20:b3:fa:f0:9d:26:2b:28:e5:64:e9:
                    2e:e1:49:76:38:1d:f7:b5:c1:9f:f0:77:c4:72:bb:
                    4e:eb:4c:b1:b5:73:cf:ad:d7:5a:8a:b7:71:2b:5a:
                    6b:9e:b0:95:6a:c9:25:d4:f5:75:f7:a3:39:b7:f5:
                    e2:f9:bc:b0:e7:52:6a:0d:ee:6c:31:0c:a7:1b:62:
                    e7:3b:06:77:83:7f:c9:f9:86:b5:cf:ba:4e:5f:96:
                    95:e4:2c:99:d7:f0:c6:08:73:db:80:b2:79:69:d4:
                    5b:4b:08:d5:8c:33:4a:e3:79:d0:5d:3b:c9:eb:21:
                    87:8b:f9:2a:ee:f7:8f:a9:a1:e7:f9:02:46:19:32:
                    1f:aa:9a:09:14:a2:f0:18:75:04:ca:c9:7f:e9:08:
                    7c:35:ab:d7:16:88:f8:81:f8:f7:8f:8a:93:3d:17:
                    0f:17:4a:58:65:1a:db:8e:6d:d9:66:22:82:81:79:
                    92:2c:39:4c:1d:07:cd:04:db:0e:7b:12:50:49:58:
                    ef:b3:cb:f8:7f:56:8a:b7:2e:f8:03:fc:eb:a1:5a:
                    e9:71:d8:6a:96:de:39:d4:1d:bf:6b:38:8b:b0:ea:
                    5b:94:e5:33:88:41:9d:d6:91:3d:06:dd:ef:99:c8:
                    27:1d:f6:e4:08:0a:bb:55:81:37:2d:58:46:38:99:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:52:5C:4A:DB:AE:92:42:00:B7:E2:EC:CA:34:8A:F0:A1:C2:1A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS272110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:56:a6:15:d3:e8:3e:79:15:33:5d:4d:1e:3a:9b:3c:b9:05:
         76:3b:a9:4b:f9:81:5c:82:a6:cd:72:e7:af:89:39:d2:a2:8e:
         aa:da:fc:1c:d3:16:00:99:6f:ad:fc:ef:de:27:0b:23:cb:96:
         cb:2c:93:5d:7b:ae:4e:70:c1:8d:36:db:f5:3d:03:48:d8:3c:
         a8:c8:83:d7:64:cb:2b:1b:ca:33:89:2a:82:0b:01:fe:0b:7b:
         b1:3a:14:cc:05:00:b0:55:3d:2d:98:ad:68:21:d8:e1:19:0c:
         47:2b:02:f4:d7:af:f9:ff:d6:7c:9c:a7:c7:2d:52:dc:26:24:
         7b:5d:86:de:e9:45:bb:77:f8:f2:7b:17:1d:0f:42:d5:c8:f8:
         f0:35:2f:94:5c:24:0b:e6:eb:09:c4:4b:d3:bb:73:eb:2a:e2:
         a8:e2:6c:61:b8:a5:2f:9a:57:c0:75:1b:89:cf:ed:64:1f:66:
         50:58:06:e3:93:0a:39:a6:50:26:32:98:f6:ec:26:46:a9:b6:
         2a:ca:44:6c:af:0b:3a:78:ba:b0:fd:00:95:8a:5d:f2:2e:b5:
         7f:62:f1:35:7c:2c:76:1c:db:3e:4e:e3:e4:48:1a:e8:72:af:
         88:2a:52:5e:9c:b8:dc:ab:6f:97:41:fa:5e:b7:31:65:8d:0f:
         0d:44:e8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----