Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232302e302f32342d3234203d3e20323131343339.roa
File:                     3138352e3232392e3232302e302f32342d3234203d3e20323131343339.roa (raw, json)
Hash identifier:          9ttKpT6dI6wbnS/bXLjsLHJjIYbQUtR+8YhJRT5y/c8=
Subject key identifier:   E6:F2:68:E4:C6:17:3A:87:CB:33:E3:2C:DD:36:1F:CF:5D:C6:27:75
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       575E0165E53592513F0D7649304B8311B4FAD7A5
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232302e302f32342d3234203d3e20323131343339.roa
Signing time:             Tue 15 Nov 2022 03:53:33 +0000
ROA not before:           Tue 15 Nov 2022 03:48:33 +0000
ROA not after:            Tue 14 Nov 2023 03:53:33 +0000
asID:                     211439
IP address blocks:        185.229.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5e:01:65:e5:35:92:51:3f:0d:76:49:30:4b:83:11:b4:fa:d7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Nov 15 03:48:33 2022 GMT
            Not After : Nov 14 03:53:33 2023 GMT
        Subject: CN=E6F268E4C6173A87CB33E32CDD361FCF5DC62775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:59:62:1e:90:3c:ca:38:8c:41:7c:21:55:dd:
                    6f:2a:09:b7:b6:6c:53:7a:c9:6c:f3:d6:b7:32:83:
                    6a:4a:36:22:9e:33:45:aa:04:97:11:c4:79:38:d9:
                    23:87:d2:bc:a9:b8:8a:88:eb:62:42:cb:ee:96:b5:
                    ca:d5:f4:79:40:1a:93:c0:07:95:e8:c1:33:96:2d:
                    16:37:cb:60:12:76:61:74:55:6d:b7:8e:06:08:85:
                    b8:b7:37:55:75:c5:ab:9f:e0:64:1c:8b:76:2a:3d:
                    ff:32:18:68:b1:43:55:ba:22:70:0f:a6:52:e4:ec:
                    34:9b:0b:15:93:7c:ab:bb:34:63:f5:79:56:25:57:
                    c2:1d:4b:06:4d:97:c3:8a:c7:50:16:6f:74:1c:43:
                    12:34:32:81:40:cd:ed:75:e0:ad:ca:9b:af:e9:4c:
                    9d:60:7d:8e:47:b9:ba:a6:32:f4:b5:ef:9f:fa:8b:
                    1c:66:a1:7d:38:aa:24:6d:4e:e3:5a:bf:14:f5:d4:
                    85:b5:f3:ff:1d:66:83:03:c9:53:1d:85:05:88:08:
                    d7:a7:e2:e6:a4:37:99:3f:c9:13:1b:5c:d5:75:09:
                    be:1c:63:c9:df:4c:49:8f:d8:2f:a9:81:1a:e6:99:
                    5a:dc:1a:4f:4d:f1:1c:a9:ef:b0:dd:a0:17:a2:52:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F2:68:E4:C6:17:3A:87:CB:33:E3:2C:DD:36:1F:CF:5D:C6:27:75
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232302e302f32342d3234203d3e20323131343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:c8:80:f5:28:49:d8:02:0d:d0:0a:21:b1:c8:35:d6:9d:
         65:38:d7:31:48:79:75:2e:d1:e1:01:22:bf:72:da:67:00:0c:
         a7:12:8c:d8:c5:af:28:04:44:66:83:ea:f3:e8:0e:f0:f2:f3:
         53:77:fa:c4:e8:88:7f:35:fd:bd:d7:18:5c:17:35:ff:b1:95:
         3d:4d:9a:4c:8d:8c:e1:c8:43:6e:5d:55:ef:df:fd:ad:a9:f2:
         5f:e2:dd:a6:8f:31:c1:44:31:e0:0e:be:8a:fe:61:b1:6a:dd:
         73:e8:9e:80:3e:57:4a:9a:0c:92:4d:22:1e:cf:77:de:ae:94:
         41:2e:6a:1b:d9:0b:44:42:a5:40:1f:5a:38:41:d5:33:8f:e7:
         4e:52:87:4e:bd:de:a2:dc:63:1e:32:59:f9:dd:51:78:87:14:
         53:6a:25:a9:bf:5e:8e:1b:d7:42:30:05:65:eb:a4:48:00:cf:
         25:b6:b9:a6:e7:18:11:fc:59:93:61:cd:8a:78:7a:c3:9b:64:
         ff:3f:5d:99:30:ef:1b:86:4e:92:01:1c:57:cf:c2:7d:26:e7:
         a0:64:a7:64:c7:60:40:57:42:48:c4:09:57:1e:e8:3f:05:57:
         a3:92:5c:6c:70:89:33:d5:37:95:36:67:1b:1b:91:13:67:d0:
         cd:34:8a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----