Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64134.roa
File:                     AS64134.roa (raw, json)
Hash identifier:          T8bCvfF0JkkZP14u9x6AjbxxKAer8an6pN3pta7BJpI=
Subject key identifier:   B0:B8:55:D2:43:0F:23:7D:A9:0E:BD:2E:AE:B0:3C:95:0E:3C:5C:5D
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       34E65BBE50846C8DBE7F896C6F85E6337FCBA933
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64134.roa
Signing time:             Wed 09 Mar 2022 13:37:42 +0000
ROA not before:           Wed 09 Mar 2022 13:32:42 +0000
ROA not after:            Wed 08 Mar 2023 13:37:42 +0000
asID:                     64134
IP address blocks:        191.101.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e6:5b:be:50:84:6c:8d:be:7f:89:6c:6f:85:e6:33:7f:cb:a9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:42 2022 GMT
            Not After : Mar  8 13:37:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:be:44:33:b1:6d:bf:8e:cc:d2:95:0a:8e:
                    6f:8b:2a:a6:41:b8:40:e8:51:ed:99:c7:04:7f:e3:
                    6d:b8:be:3a:50:62:51:7d:ef:d7:f2:bd:a1:6c:1d:
                    5d:2f:fc:5e:46:63:98:40:fb:0b:6b:7c:07:65:ec:
                    c6:2a:94:e0:8e:7b:de:cb:10:3b:69:57:59:d9:a5:
                    fa:3a:7c:14:75:64:d1:d3:98:49:01:58:38:ea:56:
                    ef:92:06:53:00:cd:d7:74:59:cf:2d:7d:9c:33:ab:
                    2f:3c:5c:4c:f8:85:f7:4b:93:80:b1:7f:98:b0:ef:
                    3b:82:3d:d7:09:48:d4:bb:be:bb:05:6e:b2:99:82:
                    38:a3:13:86:25:53:7c:3c:a1:67:98:93:1e:e0:79:
                    70:6f:0c:6e:27:4a:77:59:17:b4:79:48:0b:ce:81:
                    1d:14:7b:b4:18:f9:c8:0c:f5:0f:af:dc:dc:7d:63:
                    61:62:7f:14:d0:39:c3:54:50:12:67:ea:8b:bf:0b:
                    9b:8a:fe:54:60:57:b7:0e:98:0b:f7:ea:f4:fa:58:
                    b2:87:52:e3:72:ae:a3:c1:ad:28:e7:52:23:85:b1:
                    4c:22:8f:73:f2:2f:26:17:67:9f:96:fc:0f:ad:de:
                    6f:78:62:3f:46:e8:c9:95:6b:3b:41:c1:60:3a:fe:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:55:D2:43:0F:23:7D:A9:0E:BD:2E:AE:B0:3C:95:0E:3C:5C:5D
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS64134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:c8:6f:c4:1c:4e:80:5c:30:b0:9e:c4:0b:7c:62:20:94:
         57:87:fb:05:57:d7:e8:25:25:1c:a7:d7:bc:63:65:b4:9f:05:
         7f:12:cb:c2:84:b5:4d:43:74:e5:63:87:c3:73:06:13:65:55:
         c0:c8:29:41:f5:41:aa:84:c7:2d:27:22:61:df:cc:b8:c5:7f:
         d8:04:ff:f3:c2:3f:65:88:b4:4a:5b:9d:26:bb:88:d3:f2:e4:
         b3:54:2d:aa:c8:41:0a:d7:ba:dc:85:8c:d0:c7:c3:38:5b:fc:
         d6:fe:3c:9b:18:97:a1:a0:46:01:18:db:41:73:c7:ca:ec:f1:
         58:43:3e:20:c6:c9:35:5b:41:05:12:6b:29:70:56:a8:69:62:
         36:2f:ca:b1:50:0a:85:e0:89:3a:1d:90:73:94:c5:a7:65:db:
         b9:e1:73:31:e4:43:a0:91:b7:17:9e:f5:73:08:a1:74:13:f4:
         65:39:e3:19:e9:2a:dc:e7:86:ff:26:99:63:75:8d:35:8d:b7:
         57:a2:1d:d9:96:87:79:30:0f:35:5c:34:16:06:24:36:a8:da:
         dd:cd:fc:87:20:57:19:6e:c6:4d:bf:d6:24:e6:9d:2b:e2:0a:
         b3:02:19:01:65:65:8a:79:0b:08:48:df:1c:fc:b2:38:fc:c5:
         5a:68:96:aa
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUNOZbvlCEbI2+f4lsb4XmM3/LqTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDkxMzMyNDJaFw0yMzAzMDgxMzM3NDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNBRUJFNDQzM0IxNkRCRjhF
Q0NEMjk1MEE4RTZGOEIyQUE2NDFCODQwRTg1MUVEOTlDNzA0N0ZFMzZEQjhCRTNB
NTA2MjUxN0RFRkQ3RjJCREExNkMxRDVEMkZGQzVFNDY2Mzk4NDBGQjBCNkI3QzA3
NjVFQ0M2MkE5NEUwOEU3QkRFQ0IxMDNCNjk1NzU5RDlBNUZBM0E3QzE0NzU2NEQx
RDM5ODQ5MDE1ODM4RUE1NkVGOTIwNjUzMDBDREQ3NzQ1OUNGMkQ3RDlDMzNBQjJG
M0M1QzRDRjg4NUY3NEI5MzgwQjE3Rjk4QjBFRjNCODIzREQ3MDk0OEQ0QkJCRUJC
MDU2RUIyOTk4MjM4QTMxMzg2MjU1MzdDM0NBMTY3OTg5MzFFRTA3OTcwNkYwQzZF
Mjc0QTc3NTkxN0I0Nzk0ODBCQ0U4MTFEMTQ3QkI0MThGOUM4MENGNTBGQUZEQ0RD
N0Q2MzYxNjI3RjE0RDAzOUMzNTQ1MDEyNjdFQThCQkYwQjlCOEFGRTU0NjA1N0I3
MEU5ODBCRjdFQUY0RkE1OEIyODc1MkUzNzJBRUEzQzFBRDI4RTc1MjIzODVCMTRD
MjI4RjczRjIyRjI2MTc2NzlGOTZGQzBGQURERTZGNzg2MjNGNDZFOEM5OTU2QjNC
NDFDMTYwM0FGRTMzODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo66+RDOxbb+OzNKVCo5viyqmQbhA6FHtmccEf+NtuL46UGJRfe/X
8r2hbB1dL/xeRmOYQPsLa3wHZezGKpTgjnveyxA7aVdZ2aX6OnwUdWTR05hJAVg4
6lbvkgZTAM3XdFnPLX2cM6svPFxM+IX3S5OAsX+YsO87gj3XCUjUu767BW6ymYI4
oxOGJVN8PKFnmJMe4HlwbwxuJ0p3WRe0eUgLzoEdFHu0GPnIDPUPr9zcfWNhYn8U
0DnDVFASZ+qLvwubiv5UYFe3DpgL9+r0+liyh1Ljcq6jwa0o51IjhbFMIo9z8i8m
F2eflvwPrd5veGI/RujJlWs7QcFgOv4ziQIDAQABo4ICJTCCAiEwHQYDVR0OBBYE
FLC4VdJDDyN9qQ69Lq6wPJUOPFxdMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVM2NDEzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAL9lPzANBgkqhkiG9w0BAQsFAAOCAQEAAqHIb8QcToBcMLCexAt8YiCUV4f7
BVfX6CUlHKfXvGNltJ8FfxLLwoS1TUN05WOHw3MGE2VVwMgpQfVBqoTHLSciYd/M
uMV/2AT/88I/ZYi0SludJruI0/Lks1QtqshBCte63IWM0MfDOFv81v48mxiXoaBG
ARjbQXPHyuzxWEM+IMbJNVtBBRJrKXBWqGliNi/KsVAKheCJOh2Qc5TFp2XbueFz
MeRDoJG3F571cwihdBP0ZTnjGekq3OeG/yaZY3WNNY23V6Id2ZaHeTAPNVw0FgYk
Nqja3c38hyBXGW7GTb/WJOadK+IKswIZAWVlinkLCEjfHPyyOPzFWmiWqg==
-----END CERTIFICATE-----