Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f34382d3438203d3e203631333137.roa
File:                     323430353a393234303a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          oK6LmDcSyK2LeuAJPa8tAPv9ETaSmQGmE6wGjLUXLUQ=
Subject key identifier:   05:61:4D:B6:4B:C3:1E:BC:D5:9C:5B:D2:C2:80:E6:4C:1B:5C:04:CD
Certificate issuer:       /CN=0B571D046EE5DDB45973505832427E4002C57BBD
Certificate serial:       2B79BE098A88412186F96D34ADED4A248BBCEC4A
Authority key identifier: 0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD
Authority info access:    rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f34382d3438203d3e203631333137.roa
Signing time:             Wed 18 May 2022 14:55:05 +0000
ROA not before:           Wed 18 May 2022 14:50:05 +0000
ROA not after:            Wed 17 May 2023 14:55:05 +0000
asID:                     61317
IP address blocks:        2405:9240::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:79:be:09:8a:88:41:21:86:f9:6d:34:ad:ed:4a:24:8b:bc:ec:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B571D046EE5DDB45973505832427E4002C57BBD
        Validity
            Not Before: May 18 14:50:05 2022 GMT
            Not After : May 17 14:55:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:99:86:53:92:fc:68:5d:22:17:f3:26:68:
                    46:61:52:27:c2:5d:06:d0:5d:83:96:67:cb:b6:a9:
                    9c:45:19:fb:1a:33:31:ad:19:19:31:0b:82:84:03:
                    d4:f1:6e:fd:88:7a:ed:6d:08:bd:84:71:5b:83:fb:
                    82:f6:55:0d:00:8a:84:c0:01:fc:3b:2f:f7:90:bf:
                    37:b0:cf:e8:67:bf:6b:4e:da:f7:bb:c3:47:b2:f2:
                    e9:53:73:b3:ef:d3:e3:80:55:bd:85:07:6f:80:38:
                    6e:05:12:6d:1c:6b:70:bf:16:13:d2:60:29:90:c5:
                    3c:d1:6b:93:e9:11:d9:e1:5f:d0:ba:83:93:c3:6d:
                    98:48:b3:79:41:4c:50:35:53:3f:68:f7:d3:75:21:
                    1c:75:21:fc:3c:16:f6:99:6a:09:d8:87:db:8c:25:
                    14:15:96:ce:09:75:f1:71:7d:dd:b8:8e:4c:37:6e:
                    c4:e5:2c:4c:c7:94:be:59:13:dd:3a:e3:01:47:97:
                    03:25:fd:d7:5b:ff:f1:f7:73:9c:a6:cb:fc:0f:35:
                    a2:91:50:81:4f:73:5b:c3:29:c5:f3:d5:90:eb:72:
                    15:12:a5:4d:d9:c7:6b:fa:44:05:b4:5e:2c:0f:64:
                    09:0e:44:7d:2c:9f:fc:aa:ce:2d:4e:f0:4b:e5:a9:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:4D:B6:4B:C3:1E:BC:D5:9C:5B:D2:C2:80:E6:4C:1B:5C:04:CD
            X509v3 Authority Key Identifier:
                keyid:0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/323430353a393234303a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9240::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:de:25:15:9a:31:7e:ee:4b:1a:84:11:88:bc:49:48:71:
         bc:77:41:a1:df:8f:15:9e:52:3a:1c:3e:b2:72:9e:d1:a1:3e:
         39:61:a5:d3:33:39:d2:cf:44:df:8b:ad:3d:6f:49:29:4e:2f:
         de:f1:8d:28:5f:3c:7c:f8:67:9e:d3:d9:d0:2f:d9:d6:f3:e6:
         cc:bc:77:07:d0:d3:4a:f2:55:96:7f:53:6f:b8:10:87:e3:b4:
         05:ca:b3:ad:c3:63:93:df:86:45:10:7b:87:7a:db:12:0e:db:
         9a:1d:c0:d7:96:83:82:5e:c2:be:b4:07:f9:5a:a8:32:94:5a:
         ea:88:aa:b9:6e:03:b0:92:4c:06:ae:43:82:42:14:22:71:af:
         e6:78:cd:4c:be:e4:f5:75:81:6a:ea:70:2d:24:49:a6:1c:93:
         02:97:54:22:6b:dd:38:c6:de:5e:98:f4:84:ec:67:71:77:0f:
         0b:d9:78:01:73:a5:64:17:14:9b:9f:b5:f7:4f:58:a9:ab:82:
         fd:0e:15:6a:e4:d8:96:dd:3c:c7:67:27:14:9a:14:ba:6f:67:
         ae:b5:81:6d:d5:62:ab:b2:6f:78:b3:36:a1:04:6b:e7:ca:a1:
         70:2f:52:7d:0c:a6:07:86:da:f9:54:8a:1f:bd:3b:3e:1d:6c:
         9e:8a:f2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----