Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS31898.roa
File:                     AS31898.roa (raw, json)
Hash identifier:          IBok4kM/Qs6mZAW/6U2Fzf6LGKsZvJ8G6S59oFYMkdY=
Subject key identifier:   E1:65:96:49:F2:9F:79:B8:F8:CF:DE:AB:DC:8E:5B:D2:34:C7:86:8A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       24F20A904E085582264DDB3602AA701F368BBDCF
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS31898.roa
Signing time:             Tue 08 Mar 2022 07:51:13 +0000
ROA not before:           Tue 08 Mar 2022 07:46:13 +0000
ROA not after:            Tue 07 Mar 2023 07:51:13 +0000
asID:                     31898
IP address blocks:        193.227.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f2:0a:90:4e:08:55:82:26:4d:db:36:02:aa:70:1f:36:8b:bd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:13 2022 GMT
            Not After : Mar  7 07:51:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:fa:4d:18:d5:a0:41:e1:10:51:4b:01:ef:
                    8e:49:63:e9:cc:1b:8a:1c:c2:29:e1:8e:7b:f9:32:
                    c7:d6:1c:19:62:50:a0:8b:59:01:2b:9f:54:f8:06:
                    1d:90:35:78:d6:c3:ba:56:a5:42:67:60:1b:18:9e:
                    0d:ec:ed:19:ed:19:bf:93:a9:53:d6:b5:a5:66:e9:
                    0c:98:e1:7c:ee:d3:65:35:5c:a1:c1:c4:29:a4:6a:
                    9e:9c:a2:ff:5c:fb:96:67:f1:7f:f7:77:49:9d:50:
                    ca:75:12:fb:7d:5c:0e:27:1e:39:ab:38:66:e4:d6:
                    76:9a:43:1a:84:b0:eb:56:93:10:86:b9:a0:ae:d0:
                    e0:f5:a2:dd:b3:58:fe:38:07:ad:38:0a:20:0c:e3:
                    a2:99:4a:23:7b:46:00:c4:21:1b:9b:f6:67:25:fb:
                    b9:49:6d:f4:a6:9c:07:2c:59:a1:79:49:e0:5e:c7:
                    6e:c1:61:3e:53:1f:68:4f:9f:6e:3d:1b:8f:0d:2c:
                    0d:aa:ab:a7:a2:b1:c0:b8:ef:af:65:5c:62:c7:2f:
                    f2:5b:d6:2f:03:17:c0:4c:39:0d:95:d9:78:d8:8d:
                    11:22:ca:f4:a8:77:9b:50:8e:f1:ef:c7:aa:cb:03:
                    4e:d6:ce:0e:00:cd:fe:ff:ca:bc:52:ed:e1:d4:bf:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:96:49:F2:9F:79:B8:F8:CF:DE:AB:DC:8E:5B:D2:34:C7:86:8A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS31898.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:26:87:3b:54:65:f3:e0:ce:10:5f:eb:64:75:a2:1a:7a:
         71:02:08:7a:b8:a0:d1:a3:84:3c:f2:e6:0f:27:40:7a:ed:4a:
         39:e8:19:8b:70:de:ca:6e:b7:95:bb:fd:d6:88:e2:8e:46:98:
         b5:cc:23:c1:7d:53:2a:3d:34:84:1a:52:4b:85:e0:6d:31:25:
         85:42:47:e8:99:d7:6e:3b:19:fd:38:f7:cc:b8:1f:fb:e7:8a:
         87:a6:eb:fc:33:56:19:86:93:0d:20:21:db:59:0d:da:a9:62:
         d2:35:ed:36:bc:76:4e:ec:50:b1:3f:c3:e4:e5:28:58:6a:7d:
         c0:02:0c:70:c3:a0:66:80:34:8b:68:7b:84:55:f6:57:3d:c5:
         fd:94:21:17:1e:f6:5f:08:e2:47:ee:9e:6d:5a:bc:83:f7:ae:
         34:b1:d3:ce:60:1b:55:5e:ba:5d:a5:2a:9f:f9:c0:96:47:ca:
         24:67:b9:e4:24:ed:60:f6:27:7e:c4:90:01:60:17:6c:64:10:
         f3:60:1f:b5:9e:a2:bc:7c:ba:ad:5d:19:84:25:78:02:b7:69:
         1e:66:5e:87:e2:fb:b7:bc:b4:30:4e:0f:89:f5:0e:b8:ac:4b:
         6b:91:1a:77:a4:8e:e2:3b:ae:c6:af:9e:3a:ce:db:bf:01:78:
         55:b4:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----