Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131393735.roa
File:                     352e3138312e3138302e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier:          epyrSJjZwd2fKYFE1LM9kMxZtUJtkdFzbqEuKqj3+3M=
Subject key identifier:   B6:ED:D5:1E:E2:D4:89:29:C6:34:68:2D:75:19:47:CB:AD:4E:F1:1B
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       6FD800BC6D2DF29F7BDE9CA682716E009DAEFD2A
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131393735.roa
Signing time:             Thu 27 Oct 2022 11:52:16 +0000
ROA not before:           Thu 27 Oct 2022 11:47:16 +0000
ROA not after:            Thu 26 Oct 2023 11:52:16 +0000
asID:                     211975
IP address blocks:        5.181.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:00:bc:6d:2d:f2:9f:7b:de:9c:a6:82:71:6e:00:9d:ae:fd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Oct 27 11:47:16 2022 GMT
            Not After : Oct 26 11:52:16 2023 GMT
        Subject: CN=B6EDD51EE2D48929C634682D751947CBAD4EF11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d3:c2:ba:98:59:36:d5:be:0b:b8:90:61:b3:
                    e7:5e:54:7d:0d:88:1b:b7:ac:f1:e2:e7:20:ec:de:
                    25:d6:a3:7b:78:04:74:ec:8d:dc:be:5a:d8:4c:4a:
                    8d:b1:6c:12:29:13:d0:8d:67:17:52:1f:2f:1f:51:
                    42:54:51:10:79:b9:fc:3e:39:73:4c:d5:11:8d:6e:
                    63:42:14:e3:9b:59:5e:ce:18:46:c2:e2:b6:34:04:
                    8a:91:11:02:37:51:8f:96:e6:69:a8:73:3a:54:07:
                    57:97:95:2c:0d:cd:87:55:9a:11:cc:37:ff:32:87:
                    35:27:68:59:75:0a:29:68:2a:7c:aa:a0:bc:2c:ce:
                    e2:1d:df:c3:ba:11:51:4e:06:20:49:f5:53:2d:73:
                    5b:97:4f:aa:af:d3:a3:43:e1:cb:c4:2c:87:9a:a5:
                    26:16:12:45:25:b9:58:0d:24:ae:36:ff:14:5c:ba:
                    e3:3e:fc:7c:2d:36:76:48:ba:6a:75:98:ee:7d:0e:
                    e7:a7:0e:04:5f:30:f9:cf:dd:43:d6:ba:7e:fe:41:
                    11:e2:02:83:c2:30:06:45:bc:4d:4b:f0:89:8d:65:
                    72:8d:91:51:a3:7d:1e:6f:1f:11:0d:7e:69:95:17:
                    f5:0d:5d:da:00:25:24:39:a3:f9:3b:4f:a0:b2:47:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:D5:1E:E2:D4:89:29:C6:34:68:2D:75:19:47:CB:AD:4E:F1:1B
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:c9:de:20:da:8d:58:af:20:1f:06:29:3e:e1:3d:0f:19:
         03:d2:63:1d:5d:1b:9e:ba:7b:9a:db:2c:c3:13:44:a2:3a:60:
         4a:38:53:0a:38:21:6d:38:b6:f8:38:f8:97:c7:f7:88:d9:f8:
         cb:fe:e7:0a:a6:ce:c2:84:08:83:13:cb:ed:ac:da:55:a9:2e:
         0b:59:15:ae:6d:0a:ac:5d:41:1f:13:69:f1:14:b4:e8:b7:7e:
         1b:6a:6d:51:d9:cb:7c:40:d4:e4:e1:f2:43:5c:9b:9a:77:f8:
         c8:12:2b:2c:35:07:ff:57:84:dd:6e:24:93:b4:21:ae:48:b2:
         2c:09:bc:77:e8:d1:49:ac:6e:63:a5:d6:c6:44:40:49:64:d6:
         b7:01:96:33:e0:d5:5b:c2:4f:3d:f9:f6:7e:8a:a1:27:d3:83:
         95:77:f3:ea:a5:e5:6e:da:43:aa:6c:ae:8f:6a:18:9b:b1:fa:
         03:43:8b:41:bd:b6:d9:b6:94:f4:8c:0e:7a:f8:3a:d5:e9:72:
         72:6e:0b:d5:7e:2c:6f:a0:a6:f5:f9:8e:b6:96:94:38:65:1d:
         ea:c1:7f:31:44:03:85:62:6b:50:77:47:17:bc:6e:7a:cd:49:
         db:15:ef:20:1f:a5:14:16:d2:6b:96:b8:33:13:f4:73:ca:4f:
         f1:02:3a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----