Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS48678.roa
File:                     AS48678.roa (raw, json)
Hash identifier:          VKORPFGYHiZpoERzmDPBIz7y7GZDjOXCDztsLUr26tU=
Subject key identifier:   C3:43:E7:26:3D:FE:7E:D6:93:8B:40:A5:B3:95:2F:08:D8:2D:C9:79
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5044E15C160CA15B3BCAB732E02DE707F7DADEEC
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS48678.roa
Signing time:             Wed 09 Mar 2022 13:37:40 +0000
ROA not before:           Wed 09 Mar 2022 13:32:40 +0000
ROA not after:            Wed 08 Mar 2023 13:37:40 +0000
asID:                     48678
IP address blocks:        181.214.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:44:e1:5c:16:0c:a1:5b:3b:ca:b7:32:e0:2d:e7:07:f7:da:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:40 2022 GMT
            Not After : Mar  8 13:37:40 2023 GMT
        Subject: CN=3082010A0282010100CB0693C37154568578214067EAA60BF55F8E64CC49B6C5FEA1EFCC882EB2A47F08E16AFF25CB99B1B12D4F668503ABEBA924BD97745FDE883AD40BE6066147C658D452A7144927DD5A5750328F6E8EB7D08239535CFE02CA1C2EDECE0C3E0DF7F6FEFF1CC6C2235E298A54F06E7A7DBA7056DA989C57DD615C22C80CC7A8F209A5B947D9324E9C74FE405CC2607CE4B1BF38B0C1E3E4CBFCC1402F1AED7FF5080ECFAC42EFBF3894653B9C9AB586FEE1572119EEB888BA7A4691659560EA2E80397943D5DC47C9B9117BEDA67FF0EE457B063DC87B70BA808601E982548DAEC1ACB7B20BBA1C74B0B5EC998AF0149ADA8E4F6DDDF664996B2E124D16C721E8610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:93:c3:71:54:56:85:78:21:40:67:ea:a6:
                    0b:f5:5f:8e:64:cc:49:b6:c5:fe:a1:ef:cc:88:2e:
                    b2:a4:7f:08:e1:6a:ff:25:cb:99:b1:b1:2d:4f:66:
                    85:03:ab:eb:a9:24:bd:97:74:5f:de:88:3a:d4:0b:
                    e6:06:61:47:c6:58:d4:52:a7:14:49:27:dd:5a:57:
                    50:32:8f:6e:8e:b7:d0:82:39:53:5c:fe:02:ca:1c:
                    2e:de:ce:0c:3e:0d:f7:f6:fe:ff:1c:c6:c2:23:5e:
                    29:8a:54:f0:6e:7a:7d:ba:70:56:da:98:9c:57:dd:
                    61:5c:22:c8:0c:c7:a8:f2:09:a5:b9:47:d9:32:4e:
                    9c:74:fe:40:5c:c2:60:7c:e4:b1:bf:38:b0:c1:e3:
                    e4:cb:fc:c1:40:2f:1a:ed:7f:f5:08:0e:cf:ac:42:
                    ef:bf:38:94:65:3b:9c:9a:b5:86:fe:e1:57:21:19:
                    ee:b8:88:ba:7a:46:91:65:95:60:ea:2e:80:39:79:
                    43:d5:dc:47:c9:b9:11:7b:ed:a6:7f:f0:ee:45:7b:
                    06:3d:c8:7b:70:ba:80:86:01:e9:82:54:8d:ae:c1:
                    ac:b7:b2:0b:ba:1c:74:b0:b5:ec:99:8a:f0:14:9a:
                    da:8e:4f:6d:dd:f6:64:99:6b:2e:12:4d:16:c7:21:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:43:E7:26:3D:FE:7E:D6:93:8B:40:A5:B3:95:2F:08:D8:2D:C9:79
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS48678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:0a:2b:1d:ad:10:e3:33:90:7f:fa:5c:d8:6a:e6:fd:fb:
         80:ff:3e:f0:1a:5f:34:2a:69:ab:e2:77:70:24:f2:ce:4a:1e:
         0a:96:b8:40:fb:2d:a8:fe:d3:05:e7:c0:94:50:84:66:b8:26:
         98:d8:81:60:3d:81:9e:1d:db:4e:a8:db:72:c6:d8:c8:2f:2d:
         8f:22:85:6a:83:8c:b8:2b:07:e3:bc:97:49:c5:8a:67:55:b2:
         aa:21:24:5f:16:53:bd:ca:37:1c:7f:32:fe:b1:9e:5b:64:c4:
         c0:ea:a6:62:b7:9d:bc:bd:d2:41:6a:ab:77:8b:55:92:ff:a2:
         4f:35:73:cd:f9:97:6c:1f:65:57:2e:48:c2:41:e8:34:61:a8:
         d8:b5:14:b9:e6:ea:ed:7e:6b:fb:07:80:bd:9f:66:24:96:da:
         50:6d:31:d0:19:c4:ce:d5:3c:b0:b9:15:b6:25:cb:ca:df:91:
         9a:46:70:13:55:ee:01:fb:0d:0d:dc:06:3f:1e:ab:7f:32:3d:
         e6:19:78:ab:1e:99:f3:2b:93:15:40:d4:ea:7e:c9:71:af:fd:
         ad:07:22:e8:ec:a3:64:35:64:d2:f5:8e:ff:d2:ef:7f:5f:66:
         f5:1b:87:38:87:70:49:80:b7:8b:98:fa:f4:05:f5:5f:93:78:
         2c:a5:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----