Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS49999.roa
File:                     AS49999.roa (raw, json)
Hash identifier:          9fC/fumo9lT0A/taGVKVq0b712BLr9hTZ+Tzbv3fJvg=
Subject key identifier:   AD:B7:0A:75:4D:5B:99:BC:98:C3:86:7A:60:C6:65:F0:4F:EC:67:34
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       41F6D2A1C6DE7DD49A49F630600DF54E62AE001B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS49999.roa
Signing time:             Wed 09 Mar 2022 13:37:41 +0000
ROA not before:           Wed 09 Mar 2022 13:32:41 +0000
ROA not after:            Wed 08 Mar 2023 13:37:41 +0000
asID:                     49999
IP address blocks:        181.215.53.0/24 maxlen: 24
                          181.215.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:d2:a1:c6:de:7d:d4:9a:49:f6:30:60:0d:f5:4e:62:ae:00:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:41 2022 GMT
            Not After : Mar  8 13:37:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1e:da:0d:05:b7:19:41:91:86:7f:9a:dc:92:
                    b5:24:f5:95:5e:21:d1:c0:48:63:7d:9f:41:65:87:
                    5c:6b:1d:46:ab:3d:43:80:fd:a8:86:ab:e4:38:cf:
                    25:1e:b1:0d:05:bf:d4:9b:25:2e:3e:d5:0b:92:94:
                    42:eb:9c:77:86:03:3b:6c:19:22:da:2c:12:e8:e8:
                    6f:b7:e1:c2:89:40:62:fa:02:ba:4f:a1:89:6f:2b:
                    ee:47:70:2b:75:b1:5d:f2:8c:55:04:3a:1c:17:ad:
                    80:4d:4f:ad:2f:34:ce:88:cd:9d:12:b3:3c:65:d4:
                    8b:4f:74:97:0d:16:86:c7:c7:8f:31:60:41:97:b7:
                    61:40:ee:ed:51:8e:00:4c:20:71:39:a3:90:33:1f:
                    55:d1:e4:e6:2e:8e:56:0c:dd:4d:4e:89:ae:53:1d:
                    84:41:84:55:5f:14:5d:ad:96:28:de:9c:6a:84:e8:
                    99:21:2a:52:89:a3:ce:bb:87:e8:10:9b:6b:ff:22:
                    8d:88:76:31:0a:b4:47:2f:a6:d2:56:2d:ce:e0:82:
                    bd:86:7e:7d:dd:34:cd:21:ae:6c:ef:a1:a2:91:1c:
                    15:eb:e4:ff:58:56:86:33:0a:6d:c2:6e:52:64:c3:
                    b1:e5:99:97:bc:0d:f3:5f:57:02:2b:97:df:98:97:
                    7b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B7:0A:75:4D:5B:99:BC:98:C3:86:7A:60:C6:65:F0:4F:EC:67:34
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS49999.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.53.0/24
                  181.215.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:97:8d:ed:2f:2a:da:d9:55:ef:04:29:16:04:c3:4e:e8:d1:
         75:4c:4a:29:84:18:a1:35:d0:fe:29:b9:c5:4d:e0:6e:9a:6d:
         1c:80:32:b1:f1:57:8f:7f:f4:bc:d0:58:93:85:90:dc:af:b5:
         65:cb:25:ae:56:94:d6:69:f5:8e:5b:95:b4:32:75:d0:05:50:
         77:f3:55:bd:93:67:0c:70:23:c3:8b:fa:c1:01:e9:75:af:ca:
         55:b6:fb:bd:f8:e9:7f:87:ef:84:12:99:a3:93:b0:96:42:9c:
         06:b6:85:16:40:a0:66:e8:4b:5c:15:02:99:ab:3e:06:17:fb:
         d1:8c:1c:63:d0:80:b8:ef:aa:9b:52:71:8d:f1:b7:2c:95:04:
         da:bc:e7:0f:48:a4:a5:3f:14:d6:38:e7:35:9a:dd:91:e4:19:
         4d:a3:cc:b8:51:69:33:61:fa:c2:47:88:a4:72:a3:a9:eb:87:
         9a:65:b8:b7:99:ff:8a:b5:1a:a5:79:de:47:0f:37:ee:4c:63:
         15:9b:3e:42:43:4c:9b:2f:25:ce:c5:16:7b:4e:cb:4c:6a:cc:
         c0:6c:5e:35:ec:e0:a0:38:57:f0:50:0b:b0:8c:9b:44:ce:f4:
         fb:05:a5:e8:49:ec:de:c5:4b:ea:e1:a4:be:3e:2b:36:c7:1b:
         79:5c:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----