Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
File:                     3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier:          FSEnxwyY4PmGJEu2KMZdEPAWdOsE7Si28G5LY6qqRYQ=
Subject key identifier:   A9:B0:DE:74:26:F9:6A:59:56:B0:C1:05:D3:D5:03:5D:2B:56:BA:BA
Certificate issuer:       /CN=0B571D046EE5DDB45973505832427E4002C57BBD
Certificate serial:       1873C72590FA5237636B2033366D9278F5C6C345
Authority key identifier: 0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD
Authority info access:    rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
Signing time:             Wed 18 May 2022 14:55:05 +0000
ROA not before:           Wed 18 May 2022 14:50:05 +0000
ROA not after:            Wed 17 May 2023 14:55:05 +0000
asID:                     138156
IP address blocks:        103.141.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:73:c7:25:90:fa:52:37:63:6b:20:33:36:6d:92:78:f5:c6:c3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B571D046EE5DDB45973505832427E4002C57BBD
        Validity
            Not Before: May 18 14:50:05 2022 GMT
            Not After : May 17 14:55:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:c6:5c:80:28:46:8b:84:b0:ca:37:5b:61:
                    23:58:52:d2:b7:84:f3:81:8e:8c:0b:99:f9:60:8b:
                    21:5c:ff:2c:47:52:29:8f:a1:e4:4f:ad:b1:5b:f2:
                    c5:1c:70:93:ea:88:dd:65:4b:87:02:86:cb:39:12:
                    0e:c9:b9:4a:77:cf:b1:e3:e4:09:9f:3f:25:64:31:
                    64:5c:57:1a:a9:cf:04:da:eb:83:e1:bb:09:33:a7:
                    e5:2b:1b:5d:48:a0:15:66:59:aa:9f:45:71:2f:de:
                    36:67:d8:c3:55:0a:5d:4b:9d:92:d7:13:c9:7c:0b:
                    f2:48:1f:a1:d2:03:8d:34:14:73:9f:0d:4e:69:8e:
                    f2:25:6c:fa:9a:99:14:f0:5d:c3:6d:8b:51:33:61:
                    c5:bc:5c:b4:d5:8b:4a:a6:95:6f:35:95:40:dc:98:
                    25:3b:8c:f0:a7:99:5f:76:69:cd:14:b0:12:0b:0f:
                    93:00:c5:5a:29:e5:df:86:6a:4a:6a:98:68:7e:16:
                    6a:0b:7e:2a:98:32:bd:75:a0:af:69:9f:7c:4a:52:
                    e9:fd:85:57:63:5e:6c:be:15:73:b9:4e:d2:df:5d:
                    67:81:60:7b:32:50:8b:f5:f7:32:fc:57:5e:31:71:
                    a0:13:2b:50:14:78:61:7f:35:d8:7d:c7:8e:ac:48:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:DE:74:26:F9:6A:59:56:B0:C1:05:D3:D5:03:5D:2B:56:BA:BA
            X509v3 Authority Key Identifier:
                keyid:0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:38:ca:c4:0a:84:b3:a8:90:87:a1:fc:71:b0:ba:ac:8f:54:
         79:78:1c:c4:2a:bb:6b:43:fd:6f:13:a6:79:b5:df:2f:81:1d:
         42:6e:90:a0:69:1f:2b:11:2a:d7:57:02:fd:dd:dc:3a:0c:b9:
         09:e1:3a:fa:c2:ab:a9:72:9a:7a:35:df:f6:69:9f:62:d5:50:
         05:b7:02:22:9c:f1:53:20:3d:bc:32:fa:e8:05:a8:28:22:5c:
         30:2c:b3:bb:42:1f:b9:8a:4f:f1:0a:cb:6c:e7:21:79:5a:7a:
         d5:7f:68:cf:93:2a:b7:d4:33:38:7a:78:c2:26:00:74:c2:a0:
         4b:3a:cb:ef:d4:1c:57:28:41:35:4e:4a:c8:bb:d4:eb:d4:e1:
         30:40:aa:ed:64:1f:92:8a:37:ac:59:37:59:ed:36:d8:2c:d2:
         7d:d8:0f:32:31:c4:a5:a3:f5:03:77:07:81:b1:50:ff:8a:31:
         19:b4:31:eb:57:a4:13:10:c9:88:1b:48:18:db:af:de:68:4b:
         7f:44:9a:60:d5:87:94:9d:28:19:a8:81:1d:9d:74:eb:39:bc:
         c1:95:b0:06:d4:fa:69:19:63:03:f2:ad:3c:d4:58:9e:71:99:
         29:6c:e7:b7:22:b1:df:94:18:25:fe:7f:66:52:9e:f8:94:20:
         5f:17:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----