Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa
File:                     3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa (raw, json)
Hash identifier:          BImw1lBt4aY5h9G42UjiV1SaR5J6ncNlC4kfl/7+ecg=
Subject key identifier:   B1:7F:88:F3:3F:76:1F:77:EB:65:E9:C6:80:38:A2:16:2E:BD:61:B6
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       1CB3B515E815152BE7FB70EC01169739CA541113
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 14:57:19 +0000
ROA not before:           Mon 26 Sep 2022 14:52:19 +0000
ROA not after:            Mon 25 Sep 2023 14:57:19 +0000
asID:                     1239
IP address blocks:        185.229.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b3:b5:15:e8:15:15:2b:e7:fb:70:ec:01:16:97:39:ca:54:11:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:52:19 2022 GMT
            Not After : Sep 25 14:57:19 2023 GMT
        Subject: CN=B17F88F33F761F77EB65E9C68038A2162EBD61B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:0b:78:d3:3e:a9:3d:2f:5c:6e:b2:dc:39:
                    5c:3e:b1:7d:3a:47:06:eb:48:bd:75:f5:da:ca:f1:
                    10:9a:36:f1:36:c3:8d:e9:f4:8f:46:e8:0c:52:14:
                    f4:66:de:53:bc:27:9f:f8:9c:41:19:9e:d5:5f:d6:
                    fe:a1:ba:9e:bb:9c:2b:b6:eb:b5:11:09:a3:3d:92:
                    18:7d:38:3a:20:58:e4:5d:97:a1:52:9c:0e:10:f8:
                    be:1b:15:18:05:dd:67:0c:21:dc:4a:eb:d6:10:58:
                    9a:30:a9:58:fd:63:73:e7:a1:fb:df:fe:ce:30:76:
                    cc:38:97:2f:e9:7d:77:89:3d:91:1c:ee:13:99:30:
                    cd:f5:be:dd:9e:03:90:cb:13:f8:5b:2b:d8:9d:c7:
                    21:5a:9a:39:dd:42:55:3b:56:cb:96:66:6a:c7:52:
                    12:78:49:86:d7:be:13:26:f6:ba:7c:00:51:92:56:
                    00:14:3f:c9:84:6d:23:5c:e9:2b:91:2e:4f:47:0a:
                    28:f3:51:14:1d:12:a0:75:3f:cf:e8:01:b7:1c:a7:
                    e6:6e:71:10:d8:17:a1:f1:e2:3e:62:fa:c0:e8:65:
                    38:78:f4:5e:32:9f:8f:de:aa:1f:19:1f:19:2c:bb:
                    b8:65:86:ab:ae:10:81:c5:fb:46:f1:25:bc:ab:dd:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7F:88:F3:3F:76:1F:77:EB:65:E9:C6:80:38:A2:16:2E:BD:61:B6
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32332d3233203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:0d:f3:2c:aa:75:62:e9:82:44:f1:df:c9:10:2a:06:19:4f:
         30:11:8a:fa:cb:78:68:d3:8c:de:be:56:64:db:4c:b0:76:1b:
         bc:42:82:bf:fb:60:83:c8:ed:e5:5e:3a:09:c1:73:30:4d:9b:
         6a:73:c7:dc:bd:a3:d5:72:1f:88:1a:34:83:54:9c:06:cd:f3:
         90:a4:3e:7d:a2:58:86:11:c0:d4:25:57:d2:6a:29:62:81:6f:
         6c:e3:85:29:ed:2c:ab:cb:a7:62:33:15:97:97:19:15:bb:1c:
         21:46:6d:fc:f4:c0:bf:df:c7:2b:18:8c:bc:6f:c9:0d:72:65:
         b8:72:1c:1d:1a:94:63:8a:71:db:06:5b:49:35:b8:1a:4d:bc:
         c5:9c:79:fb:54:6d:9d:57:2d:54:a8:8a:d3:c3:42:b5:c4:ee:
         5f:dc:4f:07:3f:df:85:01:93:35:e7:e7:4a:43:41:5d:be:ab:
         5a:e3:d3:8f:56:cc:fe:55:e7:e3:23:be:d3:24:ac:ef:b2:5a:
         17:4f:b5:3e:09:10:43:e5:fb:51:c1:7e:83:ce:d4:fc:c6:68:
         0a:47:7e:d8:ea:bf:be:10:a6:c8:0e:2a:f0:a7:4a:08:ef:93:
         6b:07:1f:98:0d:66:78:41:90:27:e7:24:e1:9a:f4:eb:1e:a2:
         5b:70:8e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----