Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa
File:                     3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier:          vw9APzqguuEpsy9K8ITFAluHzkdFy6E/jVXWXeEp7mY=
Subject key identifier:   ED:C8:F5:29:F7:F0:96:D8:F7:06:35:84:11:E3:04:6D:9F:D3:EA:FB
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       58757DB893C1CFF03EF63DE72BA60D93F555B48E
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 14:55:04 +0000
ROA not before:           Mon 26 Sep 2022 14:50:04 +0000
ROA not after:            Mon 25 Sep 2023 14:55:04 +0000
asID:                     1239
IP address blocks:        185.216.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:75:7d:b8:93:c1:cf:f0:3e:f6:3d:e7:2b:a6:0d:93:f5:55:b4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:50:04 2022 GMT
            Not After : Sep 25 14:55:04 2023 GMT
        Subject: CN=EDC8F529F7F096D8F706358411E3046D9FD3EAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:76:49:ee:bc:03:bb:40:13:e7:98:ae:c8:
                    73:2f:0e:c7:78:cd:33:a6:49:50:de:dd:14:f1:24:
                    36:75:24:ea:21:cf:c6:b8:06:e1:d5:b7:f0:7c:25:
                    57:c8:09:3a:01:24:6c:e8:5f:ec:14:4a:be:04:51:
                    ea:9c:18:5e:d1:ad:a9:dc:f1:e2:b8:2c:32:94:56:
                    90:bd:0e:ba:c5:71:6b:4c:08:e4:f6:4e:32:4b:0d:
                    9e:d5:5c:c8:c9:fa:1d:5a:45:d2:ac:26:c7:a7:7f:
                    b9:47:a5:cb:76:25:c5:72:b7:b7:ec:c3:d0:c2:b2:
                    fb:92:1a:42:98:90:ca:86:ee:b4:2c:24:32:d2:15:
                    a2:d6:4d:78:6b:f5:53:81:a2:26:e3:73:e0:92:a0:
                    c4:a5:5e:28:9e:12:04:08:9f:c9:93:3f:7f:8b:5f:
                    69:cb:49:fa:c2:2d:52:79:d9:73:0f:7c:b1:2d:09:
                    77:f6:11:06:e4:bf:5e:73:b8:d3:72:f4:49:93:8c:
                    1c:c1:89:b8:67:c7:18:9f:a5:58:9d:a3:7e:1e:47:
                    d4:c1:c0:ac:da:af:ba:8a:7f:a5:a3:8c:ce:f2:9e:
                    6e:07:3b:59:82:fa:30:50:f4:24:e0:9f:a1:40:c4:
                    7e:e5:89:ba:ad:a7:e1:53:04:27:2e:77:dd:7c:9f:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:F5:29:F7:F0:96:D8:F7:06:35:84:11:E3:04:6D:9F:D3:EA:FB
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130362e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:d8:e7:7b:a0:78:7c:64:d9:40:e2:bb:9f:1f:0b:b5:cf:
         d6:74:97:d7:e0:53:cd:5b:79:2a:c8:66:ef:86:62:20:f4:4b:
         00:d7:0b:5f:72:21:98:a9:f5:df:45:4e:09:c0:b5:cb:c0:fb:
         76:ce:ee:eb:79:15:15:eb:f1:70:04:6f:5b:de:4e:93:8a:42:
         cf:11:c9:cd:95:5b:b4:5a:41:ca:c0:a6:4e:3a:cd:ba:a5:f7:
         69:88:47:6e:26:6f:95:a9:d9:3e:ae:92:22:5f:cb:fd:32:cb:
         3e:71:c3:66:4c:7d:ca:ca:ba:d9:e0:3c:ff:ca:c6:f3:ef:2a:
         dd:1e:aa:ca:78:63:29:a1:86:1f:ad:69:86:b8:5e:09:55:90:
         12:ac:3b:fe:f1:29:f8:62:61:78:f3:75:13:f6:42:21:21:ea:
         db:9f:38:2d:dd:7c:19:fc:eb:16:8a:31:d2:48:d2:be:48:de:
         89:9d:ef:31:27:56:1a:1a:6c:11:b8:60:4d:0d:f5:b2:d2:47:
         d8:ef:2f:5a:3e:c1:01:90:0a:26:2b:07:ce:42:8c:cc:d2:50:
         4c:2c:df:91:60:7f:51:fb:36:48:f2:82:ca:25:39:81:35:0d:
         50:7c:30:38:ef:1e:f0:b3:25:90:bf:5d:18:27:bf:d4:d9:9f:
         f8:89:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----