Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS63018.roa
File:                     AS63018.roa (raw, json)
Hash identifier:          rIqTzSPWkRgl5UzGXu9Ut1ENoajOiEM0ythtAhl6OwA=
Subject key identifier:   71:24:FF:BF:1B:03:D0:B3:83:87:6C:DB:EB:BD:82:EE:F4:E5:F4:88
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       579D8CF925D46812D1D6EA8117368E21D07EE088
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS63018.roa
Signing time:             Wed 09 Mar 2022 13:37:43 +0000
ROA not before:           Wed 09 Mar 2022 13:32:43 +0000
ROA not after:            Wed 08 Mar 2023 13:37:43 +0000
asID:                     63018
IP address blocks:        181.215.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9d:8c:f9:25:d4:68:12:d1:d6:ea:81:17:36:8e:21:d0:7e:e0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:43 2022 GMT
            Not After : Mar  8 13:37:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:ad:68:0d:cc:51:cc:8a:a8:07:a8:54:9a:
                    05:12:f9:6d:cb:ea:a6:09:d6:ac:88:31:1c:47:19:
                    53:16:86:eb:5f:09:67:0a:68:4c:5f:ab:53:fe:2e:
                    62:ad:c1:f0:96:a1:22:a0:d2:67:6c:89:50:54:2c:
                    b1:62:f7:8a:a3:f6:18:d4:4f:f6:c0:0e:b0:de:bf:
                    96:6a:36:71:fc:a7:91:3f:32:ea:0a:2d:c4:72:a8:
                    cf:b7:d1:06:1b:f4:13:66:bc:e3:e1:ea:5e:c6:02:
                    2b:2a:21:95:65:d2:4e:4b:1c:af:ff:dd:20:a2:9d:
                    1a:28:cf:5b:6e:b8:14:12:2d:67:d4:1a:c3:9e:ec:
                    c5:73:d8:b8:d0:62:71:c9:1e:0c:d1:da:67:f8:5e:
                    b8:4b:a2:0b:82:66:85:41:ba:02:6b:57:a6:43:ca:
                    03:e1:6a:42:1c:d4:08:61:81:60:fc:e6:0e:47:62:
                    e9:0a:71:82:f3:18:9e:ee:85:da:55:51:57:36:34:
                    65:d8:91:c9:fb:28:15:81:97:53:6f:ec:3e:ca:b6:
                    d0:76:e0:c3:98:4d:ca:af:5b:c2:fa:e3:a7:f9:63:
                    4e:a1:f7:d3:f7:a4:08:43:bb:ef:83:49:ad:75:95:
                    12:b9:22:3f:8a:60:ec:9e:b7:1a:52:2d:1e:7b:fd:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:24:FF:BF:1B:03:D0:B3:83:87:6C:DB:EB:BD:82:EE:F4:E5:F4:88
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS63018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:42:de:2f:2c:29:25:81:6a:a5:87:63:9e:7e:12:b4:c6:f6:
         e5:1e:22:5d:dd:02:30:a3:fc:84:58:4b:d4:85:e9:40:da:9c:
         75:53:ae:d3:39:b0:2f:1a:1e:c1:c4:3b:f1:9c:23:96:ed:01:
         a5:93:be:2d:a8:f3:4f:44:64:80:8e:b6:aa:9d:db:0a:03:bb:
         b5:5e:1c:9a:ca:40:00:3a:2e:a2:a0:9f:5f:41:9c:f4:b1:5d:
         4a:55:9b:8c:4d:36:d6:65:c3:6c:1e:ad:c7:a0:0a:12:9e:b9:
         b5:87:b2:c7:62:1f:c2:7d:bd:21:6c:af:eb:95:c6:0c:ee:4a:
         38:98:40:4d:33:9e:f9:3f:5e:aa:95:63:1e:48:09:ba:72:85:
         d9:ec:23:8b:2c:67:91:27:b6:e8:ab:42:28:10:bb:38:f2:8c:
         57:77:79:89:46:20:6f:96:81:b7:ba:75:67:85:34:40:82:5d:
         41:e9:a7:34:58:f3:69:a3:24:a1:e1:41:98:47:e3:b0:e1:e2:
         5c:83:fb:a2:0c:f5:9f:da:84:d1:02:a2:9a:30:ef:82:f0:1c:
         63:1d:d9:b2:3b:1f:1c:e2:75:1e:d5:c1:c6:7c:e6:be:ae:55:
         e9:f2:37:c8:63:f6:9d:7e:60:99:77:3c:d2:39:07:c8:53:33:
         40:d9:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----