Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa
File:                     3138352e3231362e3130342e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier:          zA2EpssbAYO0noQtU4u2RkVLQgbEHXcNHOk2re2ee5k=
Subject key identifier:   06:1B:20:E1:8B:C0:65:A0:5F:50:E3:A4:F9:CD:4A:B3:94:87:8B:CC
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       687F9275E968BB58199D3A9BA332AEC69CDAC0F3
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:50:53 +0000
ROA not before:           Mon 26 Sep 2022 14:45:53 +0000
ROA not after:            Mon 25 Sep 2023 14:50:53 +0000
asID:                     834
IP address blocks:        185.216.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7f:92:75:e9:68:bb:58:19:9d:3a:9b:a3:32:ae:c6:9c:da:c0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:45:53 2022 GMT
            Not After : Sep 25 14:50:53 2023 GMT
        Subject: CN=061B20E18BC065A05F50E3A4F9CD4AB394878BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:d3:b3:aa:71:80:7a:54:51:8a:a5:1b:a1:
                    7e:d0:ac:55:1b:ed:63:69:28:17:b3:35:97:26:49:
                    75:9f:50:48:5f:ef:6e:c1:4b:c9:00:97:2e:97:25:
                    84:ad:d2:c2:f4:a3:6c:c1:f4:86:68:82:e6:20:47:
                    b3:49:aa:48:7b:6b:6c:54:08:dd:69:d0:20:c6:19:
                    12:6b:e3:78:4a:cd:ac:ae:8b:2e:c5:d7:bd:d3:70:
                    be:97:b5:2d:1f:43:6c:fa:46:75:49:cb:c9:67:7c:
                    5d:c2:33:14:79:26:eb:92:6f:9a:f2:74:11:60:44:
                    13:3a:8d:55:08:59:84:8a:d7:21:36:aa:24:c5:40:
                    36:c4:4c:f3:c2:9e:7f:96:43:e9:d0:90:4f:12:a3:
                    3b:b6:29:df:f0:1b:58:04:10:b7:7e:1b:02:35:b7:
                    51:66:26:96:58:a4:cb:38:36:cf:50:5a:9e:e0:8b:
                    cd:9e:5d:60:9b:d5:ec:38:6e:73:e9:00:5b:8e:ac:
                    30:04:37:74:1e:2a:e2:bd:00:24:f2:7f:58:af:e4:
                    2f:58:43:15:f3:81:f7:18:5b:2a:df:7f:84:94:9e:
                    ad:58:58:6e:20:19:3a:c4:7f:3e:e7:75:0c:79:22:
                    61:59:ee:71:a5:1b:f9:42:9a:11:ac:c2:56:3b:a2:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:20:E1:8B:C0:65:A0:5F:50:E3:A4:F9:CD:4A:B3:94:87:8B:CC
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32332d3233203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:e6:b4:67:22:93:d7:c3:51:85:bc:f1:a6:88:7c:87:70:89:
         57:fd:56:12:73:de:21:bc:ec:4e:80:6c:7c:a6:78:d1:d2:da:
         01:f6:b1:b5:cb:e6:b6:4b:a1:80:43:a3:84:e0:78:6f:43:14:
         70:08:83:a4:41:c1:e7:51:60:43:85:fe:ff:1a:42:41:ff:1d:
         70:13:90:91:3d:24:e2:f4:76:44:37:ca:e0:5d:69:48:62:32:
         e0:ac:3e:eb:2a:8e:38:eb:06:2b:16:e2:53:02:d6:84:ca:6a:
         e4:5c:28:1c:9b:93:c8:a8:07:00:b9:60:6b:d2:af:44:c3:26:
         8f:45:56:cb:db:d3:d7:92:fa:9b:26:5c:90:d3:94:3d:69:a5:
         ac:a4:b2:3a:91:9a:08:52:af:fc:f5:05:4d:b0:8a:88:e1:82:
         59:14:83:32:fa:1e:e0:33:92:82:f4:9b:29:18:d2:ac:c7:bc:
         59:b7:49:23:67:c2:c3:b2:05:a6:f1:3b:2a:f4:2b:3e:9d:7f:
         9a:c3:0d:f5:35:51:86:09:60:bd:96:2e:a7:30:a3:bb:97:48:
         77:77:5a:b5:18:a2:af:0a:a5:ab:59:80:28:6d:89:35:98:cd:
         37:37:00:2a:b7:bf:c4:80:9a:1a:38:c6:dd:8e:c1:ec:6a:47:
         0a:90:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----