Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS59816.roa
File:                     AS59816.roa (raw, json)
Hash identifier:          SE0iDfqh8P8J1aL/+yVbzKPEtJ7+AxcltmkejzBQORw=
Subject key identifier:   88:63:38:11:EA:9A:B8:58:4F:B0:46:53:9C:87:4D:9B:36:9D:0E:64
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7DF5122B35B39EBA1475844D747D756D4D895AF4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS59816.roa
Signing time:             Wed 23 Mar 2022 09:20:39 +0000
ROA not before:           Wed 23 Mar 2022 09:15:39 +0000
ROA not after:            Wed 22 Mar 2023 09:20:39 +0000
asID:                     59816
IP address blocks:        5.252.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f5:12:2b:35:b3:9e:ba:14:75:84:4d:74:7d:75:6d:4d:89:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 23 09:15:39 2022 GMT
            Not After : Mar 22 09:20:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:6f:71:80:93:19:6b:3a:0b:97:85:58:39:
                    47:cd:52:17:6f:05:4d:5d:84:9b:e2:98:e0:e1:f1:
                    4f:2a:3e:52:5d:a2:a1:a2:56:3e:ec:02:7d:0c:2a:
                    ae:46:e3:88:dd:c6:7a:73:e1:79:8f:bb:77:ed:68:
                    24:42:54:03:eb:c2:64:1f:e0:64:0f:d2:b4:9d:30:
                    e2:08:39:83:b7:25:ca:cf:62:84:ac:57:3d:cc:1d:
                    46:b2:09:b5:fa:42:59:cb:32:2c:67:b5:f2:03:31:
                    d2:6c:3b:d7:3b:48:12:2e:8b:f9:6f:9e:3f:0e:0b:
                    e2:47:83:75:16:e8:05:40:e5:3e:75:33:f9:6c:ad:
                    81:4b:00:bc:62:2c:f3:f7:0b:5d:14:0d:7e:a6:bb:
                    93:e1:60:88:05:71:e3:4f:9f:5d:92:b4:1d:e6:7a:
                    6d:2b:6c:e5:e5:00:e3:ad:3c:83:6f:fe:64:a3:53:
                    a6:41:b3:dd:25:95:10:d3:58:64:fb:ff:ea:a5:cc:
                    66:53:ce:8f:78:d7:97:33:61:fb:c3:01:32:bf:25:
                    56:40:51:16:7e:f3:43:f4:14:9c:99:65:cf:54:4d:
                    e1:9b:1b:09:6d:fc:85:84:b4:10:a2:eb:a3:da:51:
                    00:3c:27:eb:04:da:1c:7a:97:de:2d:11:f3:f0:23:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:63:38:11:EA:9A:B8:58:4F:B0:46:53:9C:87:4D:9B:36:9D:0E:64
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS59816.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:23:3c:78:62:55:ce:fd:3c:f3:1f:76:2b:c5:e4:71:b1:51:
         8b:11:34:73:ca:3d:f9:d5:21:81:5e:a7:37:67:2a:5a:fd:30:
         d6:0c:ea:c7:9f:75:6e:d7:d8:7d:11:9e:e4:eb:a9:67:8f:6e:
         ed:87:76:ca:63:07:c5:8b:7c:af:37:06:1c:a8:f9:78:5a:38:
         45:19:4d:5d:2c:ff:cb:94:2b:b4:f7:2c:e2:33:b9:ce:b6:7d:
         b2:08:73:4a:b6:80:6e:d2:ff:a5:8a:6a:03:65:77:b9:b3:1c:
         3f:c3:24:54:7c:53:38:99:6b:17:b2:76:1a:bc:6a:a3:02:ca:
         cd:65:1c:d8:bd:2d:61:90:a9:3b:1c:ac:2c:3a:c8:6e:b2:21:
         47:a2:29:82:38:57:88:d4:0d:e3:e3:80:54:71:bf:37:80:d9:
         ce:1b:f4:09:d0:88:b1:5a:1a:28:3c:6a:00:97:31:32:d3:48:
         dd:be:35:5f:77:1e:36:5e:c0:9d:89:13:1e:91:64:1a:d5:27:
         ce:3c:31:8e:c6:c9:30:fc:2b:9f:84:61:bc:d0:bc:b1:23:d9:
         62:13:b6:10:a1:ee:3f:41:0c:66:a0:2a:a6:39:69:c4:79:f2:
         fb:3e:da:ed:b0:3a:a0:61:46:61:47:ce:f8:35:fa:34:ab:05:
         94:af:1a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----