Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa
File:                     352e3138312e3138332e302f32342d3234203d3e20323131393735.roa (raw, json)
Hash identifier:          0i/tXkYTBfquSkbANFIxsR5/9MgI1zT1f8aP5Bx5ZsA=
Subject key identifier:   FD:1B:44:6F:D8:EC:DB:30:12:95:81:D9:4E:56:EB:CE:EC:EC:0D:16
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       132DD523E14A0CDD40CED0DD2D48F1D803DAB431
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa
Signing time:             Mon 26 Sep 2022 15:00:26 +0000
ROA not before:           Mon 26 Sep 2022 14:55:26 +0000
ROA not after:            Mon 25 Sep 2023 15:00:26 +0000
asID:                     211975
IP address blocks:        5.181.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2d:d5:23:e1:4a:0c:dd:40:ce:d0:dd:2d:48:f1:d8:03:da:b4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:55:26 2022 GMT
            Not After : Sep 25 15:00:26 2023 GMT
        Subject: CN=FD1B446FD8ECDB30129581D94E56EBCEECEC0D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:76:0d:6a:1a:66:6c:9d:bd:c3:0d:da:e5:8c:
                    19:e6:9d:7c:f1:33:a0:fe:7b:68:4f:d8:ad:01:c8:
                    dc:71:6c:52:aa:96:83:08:1b:d1:84:98:ad:ac:05:
                    cd:88:da:44:99:0f:48:eb:6c:d3:ad:1b:aa:86:a7:
                    80:04:6e:79:8b:86:0b:de:3f:a8:bb:1e:9a:6b:4f:
                    cd:a3:09:43:cf:67:36:f2:d0:96:81:16:1c:75:56:
                    3f:99:8b:40:df:b1:bd:a3:d5:5a:fa:ee:8e:01:e8:
                    63:6d:4a:2e:25:7a:cf:5f:b8:62:20:6d:c8:b3:8f:
                    6e:bf:f4:69:7c:d1:14:26:0c:e3:1f:9e:c9:07:b4:
                    ff:e8:6c:98:6b:1b:7b:93:b3:83:7d:59:e9:dd:d1:
                    b6:de:5c:f5:a7:8f:ec:b4:fa:bc:88:e1:68:56:c6:
                    e2:b6:03:64:36:7b:f8:54:e8:27:d0:49:f8:0f:44:
                    0b:1d:5e:eb:14:07:b0:06:cf:6d:67:3b:b7:8b:f3:
                    ec:35:07:09:f2:a7:f4:b2:be:94:1a:d3:d0:3b:3e:
                    1b:05:44:03:fa:48:e3:a2:d3:ce:28:5a:1f:31:f3:
                    8a:c6:e3:75:c7:21:33:a1:1d:10:66:6b:1a:40:b5:
                    23:ef:72:25:fe:ca:59:1d:20:d1:81:3c:3b:2b:c7:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1B:44:6F:D8:EC:DB:30:12:95:81:D9:4E:56:EB:CE:EC:EC:0D:16
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138332e302f32342d3234203d3e20323131393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:20:81:4b:88:3b:af:dc:b2:a0:2d:96:f7:b1:df:0c:73:df:
         ed:d6:6d:42:92:de:cb:63:52:e1:e1:bd:d0:95:7a:33:60:e7:
         70:4c:e4:67:e2:0f:5c:be:e8:00:0e:ca:3c:87:a7:6b:e5:8d:
         82:86:d6:e4:1f:95:f4:4e:7b:b3:e5:b6:07:5f:99:96:ca:30:
         60:03:4f:5c:25:ca:42:d4:19:ac:d3:59:13:d7:62:82:bf:7e:
         02:cc:da:dd:65:d7:28:cd:eb:06:c0:aa:87:92:eb:f0:d5:35:
         2f:c7:48:f9:e5:77:f7:27:b0:c6:9e:0e:23:3d:7c:8c:c5:0a:
         ce:6f:80:d1:c3:73:5c:c7:08:ad:98:26:72:f8:a3:aa:a5:dd:
         c9:76:b8:65:4c:ad:c4:5c:6c:69:9d:bc:5a:43:35:96:52:75:
         86:b4:7d:71:b6:0c:e0:7c:a9:25:d4:76:8c:84:8a:db:d5:41:
         50:45:3c:00:1b:78:f2:fd:67:ff:28:6e:1b:b5:71:cb:ec:35:
         a1:58:11:c6:d5:14:61:2b:6d:96:cf:a5:51:a4:30:4d:7d:bf:
         cb:35:e0:ef:43:08:80:c8:be:1a:99:c4:95:29:49:2b:b7:e4:
         ae:54:ba:3f:2d:51:53:c1:6f:7f:e0:65:3e:8c:40:72:1b:92:
         fb:9b:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----