Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa
File:                     3138352e3137362e39322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          rIjsQq+J4G9S2V6LBDR2VW6s3aPe8mUz4dN7LcNgJ9g=
Subject key identifier:   4C:31:E9:25:5D:3D:0A:19:FC:5E:EA:4D:C0:BD:F0:49:92:8A:FC:B3
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       3D21231747209536AA1CA98DE20931277560A1F5
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:48:24 +0000
ROA not before:           Mon 26 Sep 2022 14:43:24 +0000
ROA not after:            Mon 25 Sep 2023 14:48:24 +0000
asID:                     834
IP address blocks:        185.176.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:21:23:17:47:20:95:36:aa:1c:a9:8d:e2:09:31:27:75:60:a1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:43:24 2022 GMT
            Not After : Sep 25 14:48:24 2023 GMT
        Subject: CN=4C31E9255D3D0A19FC5EEA4DC0BDF049928AFCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:83:e2:7e:14:b4:02:d4:3b:a1:81:bc:6d:
                    f5:4d:c1:55:d9:4d:32:ab:ed:3c:39:c7:a6:e7:54:
                    51:0b:d7:3d:01:8b:8d:1d:1a:e0:b1:3f:9c:66:02:
                    67:bb:79:80:8b:1c:4c:4b:0b:2b:9a:29:45:3d:e5:
                    17:d7:55:42:7d:2b:71:af:fb:cf:0f:71:df:8b:c0:
                    68:d5:8d:b1:9a:33:89:d6:1a:1c:77:b0:0e:4c:9b:
                    10:af:84:4d:4c:b3:1f:3e:61:b5:de:4a:f4:df:7a:
                    63:08:96:c7:73:56:57:94:df:0c:84:9e:8a:a9:98:
                    7c:93:8e:2c:78:3b:4f:b3:ab:8b:3f:c4:05:b0:25:
                    37:d3:4b:7f:a0:e5:1a:0f:cf:40:7b:ea:f8:87:85:
                    92:88:8e:03:12:5e:0c:09:62:28:c2:e2:71:5c:95:
                    85:c9:59:6f:f9:f4:14:72:be:ce:b9:04:35:5f:e7:
                    6b:95:a0:c8:c7:4f:09:72:aa:2e:68:a8:07:54:5f:
                    9a:bf:40:8f:b3:6b:d5:41:62:4a:68:52:03:3c:22:
                    74:e3:6d:77:1f:8c:23:c6:56:34:f4:74:7a:4b:48:
                    5a:21:5c:eb:f4:b4:bd:f1:bf:21:1f:ff:11:81:63:
                    ee:f7:10:0b:7c:51:1b:fa:7f:40:ab:c3:9f:1e:bc:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:31:E9:25:5D:3D:0A:19:FC:5E:EA:4D:C0:BD:F0:49:92:8A:FC:B3
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:46:b6:a4:cb:04:a7:5f:b0:9e:0d:f3:90:17:70:a1:4c:
         d0:d1:34:b4:f1:d6:98:cc:24:e9:8d:dc:9f:5d:1c:ab:56:02:
         2a:40:5e:4e:87:e3:ae:87:00:9a:e1:ce:12:e7:8e:64:b6:1f:
         bb:cf:c2:6b:fc:97:97:cc:1b:34:4c:84:13:80:ca:c3:04:81:
         db:f0:24:e8:fa:2c:3c:8c:9b:f1:39:aa:09:3a:40:e9:a1:14:
         97:93:2a:eb:5c:8f:fa:12:d3:64:b5:aa:8a:7c:ce:61:f7:a2:
         11:82:53:75:9b:5c:6b:0e:da:79:20:24:6b:ae:2b:5e:0e:a3:
         05:33:64:c4:c5:d8:4a:ff:74:06:6e:bd:2a:b4:99:06:f4:3d:
         25:81:d4:b9:d3:ee:59:b4:84:9c:68:d5:b7:e7:49:42:40:e2:
         9c:d6:39:ec:0e:d1:d1:67:57:69:3c:5f:42:e0:2e:64:2d:11:
         fb:2d:4c:2a:ac:71:75:ad:d4:c6:0f:9e:90:8c:0a:db:b6:8a:
         c9:c9:76:67:f4:b3:c6:18:9c:a3:24:c1:c0:d2:58:aa:81:9b:
         17:51:e4:e0:69:2d:52:e9:37:b3:53:12:70:f3:69:69:78:b9:
         03:7d:10:e8:7e:2d:7a:9b:6f:b2:5d:3f:57:18:c4:55:6f:34:
         6c:d5:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----