Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS60458.roa
File:                     AS60458.roa (raw, json)
Hash identifier:          ELATcC394G+B8cymfL21hpdUlz6ouJfEwS+1YLYBqe8=
Subject key identifier:   D9:B0:51:10:65:CE:12:B3:3E:C9:1A:27:E0:32:1A:7C:46:D6:DC:5F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       51412355F2ECE2087D8B0017B784079A0E821197
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS60458.roa
Signing time:             Wed 09 Mar 2022 13:37:41 +0000
ROA not before:           Wed 09 Mar 2022 13:32:41 +0000
ROA not after:            Wed 08 Mar 2023 13:37:41 +0000
asID:                     60458
IP address blocks:        191.101.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:23:55:f2:ec:e2:08:7d:8b:00:17:b7:84:07:9a:0e:82:11:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:41 2022 GMT
            Not After : Mar  8 13:37:41 2023 GMT
        Subject: CN=3082010A0282010100DAA2EC82C5051C72C39E044B8857A3687B2249BDA2360C2945B7A3E31AD210341D5F34EB61A3503E89CBBA988A5ED2D79413CB209263B2B0EE961F2A970CFC8AAFA0057EDCB0E56EF304A4EEB280AA00E1AB39BEEE42A98500AC4B56189A3AD572AA10D049F55DA00610655E4CEB3B0BACF80C2501E88FDAC1A42585DB497BDEEEAF20E17EE4B28690E84DF95B58826A9A47B050354E0DC6AF62A3CDCBAF8AEC62ED934050DFC416F3AEAEC23543EB4F9CEB5EBBA1B79FB4577CEB26DFB781856F5B5852C3A01D95710C63B035FCC4CDCDC8B5A08ADFE4769340DF38391975F7112C7D0A70A53800E8528CBB57104C2D303D92C94D536B92608CF639D39ABD3D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:ec:82:c5:05:1c:72:c3:9e:04:4b:88:57:
                    a3:68:7b:22:49:bd:a2:36:0c:29:45:b7:a3:e3:1a:
                    d2:10:34:1d:5f:34:eb:61:a3:50:3e:89:cb:ba:98:
                    8a:5e:d2:d7:94:13:cb:20:92:63:b2:b0:ee:96:1f:
                    2a:97:0c:fc:8a:af:a0:05:7e:dc:b0:e5:6e:f3:04:
                    a4:ee:b2:80:aa:00:e1:ab:39:be:ee:42:a9:85:00:
                    ac:4b:56:18:9a:3a:d5:72:aa:10:d0:49:f5:5d:a0:
                    06:10:65:5e:4c:eb:3b:0b:ac:f8:0c:25:01:e8:8f:
                    da:c1:a4:25:85:db:49:7b:de:ee:af:20:e1:7e:e4:
                    b2:86:90:e8:4d:f9:5b:58:82:6a:9a:47:b0:50:35:
                    4e:0d:c6:af:62:a3:cd:cb:af:8a:ec:62:ed:93:40:
                    50:df:c4:16:f3:ae:ae:c2:35:43:eb:4f:9c:eb:5e:
                    bb:a1:b7:9f:b4:57:7c:eb:26:df:b7:81:85:6f:5b:
                    58:52:c3:a0:1d:95:71:0c:63:b0:35:fc:c4:cd:cd:
                    c8:b5:a0:8a:df:e4:76:93:40:df:38:39:19:75:f7:
                    11:2c:7d:0a:70:a5:38:00:e8:52:8c:bb:57:10:4c:
                    2d:30:3d:92:c9:4d:53:6b:92:60:8c:f6:39:d3:9a:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:51:10:65:CE:12:B3:3E:C9:1A:27:E0:32:1A:7C:46:D6:DC:5F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS60458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3f:30:4d:32:8c:71:f2:3e:c4:3c:ce:63:72:d8:22:8c:f4:
         ae:6f:c9:02:1d:e2:95:15:8a:09:64:1b:8b:f0:93:9d:0a:ba:
         3d:cf:d1:42:74:93:2b:fd:06:76:50:ab:ff:5d:6f:b8:84:df:
         a7:d5:98:90:2b:61:18:ee:d4:83:2d:13:24:85:fa:cb:8f:ea:
         8c:e9:89:38:cd:00:54:58:4a:2b:eb:a2:fa:fe:ab:88:25:8a:
         40:01:e4:d4:eb:f9:2b:16:f5:6a:0b:c5:f2:a8:45:a3:2c:74:
         a7:67:dd:f9:c7:be:25:2d:49:fe:ba:05:a7:dc:0e:5d:21:c7:
         3b:39:fb:bc:43:e2:29:16:7d:fe:74:87:f9:21:ab:83:fb:04:
         0a:3e:b1:dd:e7:29:87:1e:96:10:e4:35:18:dd:34:d7:dd:bf:
         70:10:33:fd:ae:52:da:0a:a1:f9:0f:d0:7f:7e:71:b1:48:61:
         22:60:13:1a:d3:39:87:8d:6a:be:70:08:75:03:1c:7b:91:67:
         d6:8a:4f:cc:a8:ef:5b:11:43:0b:54:e8:1b:81:03:9b:07:6b:
         fa:40:b8:f9:d0:27:7e:b2:20:5b:13:f8:ad:94:27:a5:67:94:
         7b:6c:b7:6d:8d:ef:95:0d:fa:c7:a9:d1:92:a1:72:45:43:1c:
         e8:58:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----