Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa
File:                     3138352e3137362e39322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          DUEr6bXXmoHcmypcNrXXHXd5uktEyivcDz2Wz1oJAJA=
Subject key identifier:   B9:9C:40:9B:6D:0E:37:C0:A4:B2:73:17:7C:85:9F:9A:80:B2:B8:86
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       297DA508FC5E522BBC9A8AD8C57E629FC0221CAF
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 14:47:15 +0000
ROA not before:           Mon 26 Sep 2022 14:42:15 +0000
ROA not after:            Mon 25 Sep 2023 14:47:15 +0000
asID:                     1239
IP address blocks:        185.176.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7d:a5:08:fc:5e:52:2b:bc:9a:8a:d8:c5:7e:62:9f:c0:22:1c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:42:15 2022 GMT
            Not After : Sep 25 14:47:15 2023 GMT
        Subject: CN=B99C409B6D0E37C0A4B273177C859F9A80B2B886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:d1:09:80:09:bc:ae:b5:fe:32:5b:7c:aa:
                    d5:c9:b5:4b:a8:60:e3:73:6a:61:16:7d:38:a3:a8:
                    b8:7c:28:8e:4e:d3:ee:0f:a9:42:4d:b5:7b:32:c9:
                    d5:d0:cb:18:a4:f0:67:96:21:1e:4c:a8:59:79:fd:
                    41:dd:85:a5:19:42:3e:1f:c7:e2:c1:45:08:fa:30:
                    6c:3a:9f:de:12:4f:79:30:98:4e:b1:9a:aa:17:d0:
                    5f:bd:8d:58:cd:1c:f0:5b:06:30:e6:d4:ea:8b:43:
                    e7:35:b8:7c:e2:43:77:e1:4e:53:ed:0f:66:12:d6:
                    b1:54:2f:8b:7c:34:29:e4:12:13:cd:19:aa:6e:4e:
                    b8:d1:79:25:d3:0e:44:50:a9:4e:e6:9b:bd:05:e8:
                    43:f2:58:b3:44:cb:da:7e:50:ea:bf:05:55:f1:7b:
                    b2:c1:2a:32:ac:70:fb:b7:bf:ba:3b:e3:c7:d6:c9:
                    91:c5:d0:df:e0:fd:75:31:5b:b9:b9:9d:03:db:eb:
                    2b:9c:21:e4:47:2f:84:94:61:d9:1a:0d:a4:cb:7a:
                    1e:a2:5a:c6:02:3e:79:a1:e6:bb:52:31:4b:f3:d9:
                    d4:b2:46:de:fc:e3:a7:77:f2:2e:81:40:86:9e:45:
                    8e:3c:a7:81:f8:47:23:5c:0f:67:14:0c:ab:20:22:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:40:9B:6D:0E:37:C0:A4:B2:73:17:7C:85:9F:9A:80:B2:B8:86
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:14:fe:98:55:6e:80:b1:39:c2:5b:03:71:6d:69:04:57:2f:
         c3:46:6a:73:67:e5:22:17:3a:c1:0b:b7:f1:25:d7:cd:1a:7c:
         4c:7a:dd:bd:e9:60:cc:90:21:36:22:89:e6:46:b6:60:8f:bc:
         5f:3c:48:f8:01:15:8a:d0:0f:64:94:8c:17:be:d0:73:d8:e6:
         a8:38:bc:e6:6b:77:e3:c8:0e:e7:3d:ca:40:6e:80:1a:92:86:
         2c:95:27:e0:ad:fd:43:3f:03:dd:81:4d:d5:52:d4:95:16:6c:
         c4:51:b3:f3:57:76:74:c1:eb:9c:9a:f8:44:cb:7f:a2:44:d1:
         e5:a1:5c:75:38:9f:88:ed:74:9a:65:36:f9:6e:63:52:1a:b1:
         44:fe:52:35:7b:8d:0c:ec:8f:a1:a2:a4:e1:ca:8c:1d:4b:e8:
         8a:67:14:e4:87:66:f4:57:ec:c2:d6:00:c4:d9:ad:db:c2:37:
         79:36:0e:d0:4a:56:3c:2b:3f:81:eb:c7:4c:4c:27:56:2d:c9:
         d2:73:9e:fc:63:b7:c8:c0:de:e7:8e:16:88:15:4e:fa:1b:5a:
         a7:6f:2e:4c:4d:a3:a7:0b:9b:95:e3:d3:1a:af:a3:4e:c8:b2:
         9c:0b:b2:7b:a2:db:d7:e6:c0:f7:e1:b3:0a:da:71:2c:31:98:
         b7:25:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----