Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
File:                     323430353a393234303a3a2f33322d3332203d3e203631333137.roa (raw, json)
Hash identifier:          C+JHV8l6HYqrt07dWzylz/76WlkdNNzbE9T8a+jaYPQ=
Subject key identifier:   69:04:B4:35:0D:77:49:1D:26:00:B9:F9:80:CC:FC:64:44:5F:B2:6B
Certificate issuer:       /CN=0B571D046EE5DDB45973505832427E4002C57BBD
Certificate serial:       2A9977CB6996087AB78D932548CD4F3F02B83E56
Authority key identifier: 0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD
Authority info access:    rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
Signing time:             Wed 18 May 2022 14:55:05 +0000
ROA not before:           Wed 18 May 2022 14:50:05 +0000
ROA not after:            Wed 17 May 2023 14:55:05 +0000
asID:                     61317
IP address blocks:        2405:9240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:99:77:cb:69:96:08:7a:b7:8d:93:25:48:cd:4f:3f:02:b8:3e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B571D046EE5DDB45973505832427E4002C57BBD
        Validity
            Not Before: May 18 14:50:05 2022 GMT
            Not After : May 17 14:55:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:bc:28:6f:a9:e0:36:52:69:49:22:63:5b:
                    69:be:81:cb:ce:d4:29:7a:d7:90:a1:5e:a4:06:a6:
                    1e:d1:a8:18:c5:28:95:96:4b:ab:00:64:d0:80:e8:
                    a6:44:fa:d6:31:f7:b8:32:69:e4:b8:15:55:24:b1:
                    0a:ec:89:bd:b2:85:7e:e3:bb:52:ae:b0:2f:91:61:
                    65:ef:27:65:52:22:f0:07:8b:0c:d1:04:39:87:ce:
                    db:35:83:ab:f7:45:d5:29:68:57:a4:ea:50:06:6c:
                    8b:4f:f0:e7:c7:f9:0c:01:c9:8e:eb:05:e9:06:8f:
                    08:85:4a:0f:6e:8f:39:26:35:80:cd:09:d5:3d:76:
                    e6:82:71:94:76:73:ac:65:eb:ca:3e:c5:45:b6:0c:
                    c3:bb:fc:8f:a7:7f:69:bb:99:75:46:68:ed:58:71:
                    ad:f7:c4:2b:bb:23:0c:da:f8:99:e9:15:86:b2:12:
                    08:28:8b:33:14:af:cf:73:b4:48:2d:61:e5:0b:e8:
                    66:ef:d4:3c:f8:de:35:a2:21:75:1b:f6:53:23:5b:
                    03:63:b3:74:9e:63:4d:09:e2:ab:6b:2e:ab:cb:44:
                    ef:cd:5a:e6:68:b5:12:6e:d9:ff:e6:4f:d9:b8:77:
                    b9:c4:4d:2d:89:9e:5b:79:c8:b5:e3:79:42:81:10:
                    87:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:B4:35:0D:77:49:1D:26:00:B9:F9:80:CC:FC:64:44:5F:B2:6B
            X509v3 Authority Key Identifier:
                keyid:0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f33322d3332203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:68:47:5c:71:fb:a3:71:75:83:b3:13:b3:e2:e0:d4:50:0c:
         9a:31:5a:ff:21:5a:39:c9:15:c8:5a:bd:f5:12:d9:9b:59:d4:
         32:0a:64:4e:10:39:e0:bf:18:40:29:cb:49:ed:4f:1f:16:4f:
         50:68:fb:90:b3:a4:35:c2:59:b1:69:bd:18:ec:11:72:61:78:
         a4:88:e0:2a:87:e7:1a:e2:f3:1b:a3:25:45:69:a5:82:20:a0:
         da:79:e1:d1:0e:30:96:9c:d3:c1:35:30:8e:4a:6b:99:b2:82:
         48:90:c8:99:bc:ef:e7:e5:68:56:42:14:2e:7c:7f:d4:85:fd:
         f6:9f:5a:aa:65:8d:49:39:f5:d1:05:31:61:50:b6:71:33:71:
         7c:a5:6e:81:78:40:e7:51:b3:d5:ec:d1:42:c5:83:43:78:aa:
         13:7a:e2:09:bf:fc:b9:b4:32:1d:f9:41:5b:45:9b:7c:5f:8e:
         b4:11:89:b7:03:2c:ec:b5:d9:78:2e:07:b5:f8:05:4f:73:8d:
         53:4d:e8:94:d1:ea:ba:b8:96:f1:0b:cf:e2:03:97:1f:04:1e:
         9d:05:40:47:af:0d:19:71:04:11:17:ed:66:72:a2:23:93:04:
         d6:72:34:dc:c1:0c:47:1b:c6:f8:f5:8d:bc:1e:f6:4b:13:aa:
         98:06:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----