Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29854.roa
File:                     AS29854.roa (raw, json)
Hash identifier:          UB8Go775ZqpemACuUj6hxpnfPXD0Ob3xViAmhTe9YKo=
Subject key identifier:   00:D8:07:7B:2B:8A:7C:44:89:62:52:06:21:3B:F9:E3:F1:7B:A4:93
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       27095049C5935A2F11BE31971F2670C2226193BE
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29854.roa
Signing time:             Wed 09 Mar 2022 13:36:12 +0000
ROA not before:           Wed 09 Mar 2022 13:31:12 +0000
ROA not after:            Wed 08 Mar 2023 13:36:12 +0000
asID:                     29854
IP address blocks:        191.96.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:50:49:c5:93:5a:2f:11:be:31:97:1f:26:70:c2:22:61:93:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:31:12 2022 GMT
            Not After : Mar  8 13:36:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:b9:65:12:1f:2f:fb:fd:9d:ce:bf:b1:fd:
                    e5:f1:d9:48:dd:7e:d3:da:26:a9:fd:cb:71:ef:51:
                    f5:fb:cb:7a:69:f5:21:e3:87:93:c3:96:79:13:53:
                    3c:d7:63:3e:26:d8:bc:78:2d:1f:d9:cb:4f:64:ac:
                    a2:c2:d6:43:8d:35:13:f5:83:77:b9:68:ea:da:d0:
                    4d:3a:aa:57:dd:61:f5:66:4e:ba:6b:45:55:ba:55:
                    f4:ec:cf:3d:bc:06:a2:8c:ba:42:a5:86:e7:61:21:
                    c2:be:42:83:60:af:d4:01:99:44:f7:40:f0:c0:ef:
                    60:6c:37:81:92:3e:25:d9:9a:a9:da:d5:f6:41:08:
                    f0:b5:9d:7e:d7:83:89:08:6e:4f:08:b3:58:7e:ac:
                    fd:d5:82:2d:b3:99:19:16:33:75:00:df:72:6c:45:
                    0f:b7:8c:8c:b4:7e:c4:af:71:2a:95:a2:fe:8d:3a:
                    ea:f0:3d:18:9c:db:60:78:c0:d1:d6:71:15:9f:07:
                    80:d2:73:00:75:ed:5e:b8:27:31:f5:15:f0:c6:9d:
                    18:4d:7f:43:26:77:7c:c5:96:f6:89:78:89:36:e8:
                    9c:08:c9:05:71:5c:2f:82:cc:51:8f:0c:c6:d0:d0:
                    08:20:04:67:e6:75:ec:ef:55:65:ad:d8:1c:3f:97:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:07:7B:2B:8A:7C:44:89:62:52:06:21:3B:F9:E3:F1:7B:A4:93
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS29854.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:53:ac:e8:a7:60:af:a6:8e:e4:cd:82:2f:d4:05:07:ad:2f:
         c0:c0:4b:60:e7:ee:c3:6f:2d:5c:fd:2e:45:44:0c:18:77:4e:
         50:98:f8:6b:8e:55:36:70:a4:8a:09:45:63:b9:85:84:34:f3:
         bd:f7:db:4b:8d:ef:3c:af:e5:55:4d:0c:87:16:d1:65:83:fb:
         82:cb:91:e7:59:06:58:4b:71:a8:3e:54:0c:e5:a2:52:e5:57:
         d4:37:4c:7f:ae:99:b7:ad:0a:49:5b:11:83:9b:97:05:52:d9:
         f4:4e:2f:b2:c9:93:96:5c:7f:85:fa:a7:ed:94:6c:0a:aa:d3:
         70:d0:f2:d8:16:c4:1b:f6:ed:6c:6c:54:83:db:e4:36:15:49:
         cf:0a:19:40:68:6e:ea:b9:34:65:eb:6d:a7:3f:17:b7:05:02:
         6e:a5:0a:21:e4:7f:fa:58:81:1d:d3:4e:1a:31:65:dd:fd:23:
         4c:91:2d:d2:9a:5d:ea:ae:5d:8d:80:c1:76:c3:9c:a2:87:7a:
         5a:7a:c1:b6:ed:32:f9:88:f7:0c:5a:9f:8a:6b:b7:3a:38:bb:
         86:91:09:ce:24:f8:1a:90:9a:9b:86:f4:ad:3a:70:f9:52:04:
         1a:cb:81:99:3d:e0:43:ce:0b:fc:d6:44:57:8f:45:68:d6:27:
         f0:9b:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----