Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
File:                     3136322e3231332e302e302f32322d3234203d3e2036343631.roa (raw, json)
Hash identifier:          idCxD5gUuiPpg6ZJ0DmqAWzYES4ekyZlhVPSfNItGZk=
Subject key identifier:   05:33:F5:3D:3B:3D:F3:E7:48:30:67:57:9D:95:67:A3:FD:A8:5F:02
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       2F3D34F2A98148AD11ED1FC9855A64015FA77D87
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa
Signing time:             Mon 14 Mar 2022 22:53:40 +0000
ROA not before:           Mon 14 Mar 2022 22:48:40 +0000
ROA not after:            Mon 13 Mar 2023 22:53:40 +0000
asID:                     6461
IP address blocks:        162.213.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:34:f2:a9:81:48:ad:11:ed:1f:c9:85:5a:64:01:5f:a7:7d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 14 22:48:40 2022 GMT
            Not After : Mar 13 22:53:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:17:2a:a9:2b:8c:a4:ee:97:1a:01:dc:fd:
                    61:06:88:a2:a6:17:01:aa:7d:fd:15:20:f2:39:41:
                    f7:f7:06:96:ec:24:7e:8b:67:e6:7c:14:d6:53:6d:
                    e8:54:f6:ac:58:cc:1f:b3:70:53:32:1c:1f:83:07:
                    5b:b3:c3:8b:85:96:0c:74:66:39:36:80:b7:ed:7d:
                    6f:9c:ad:0f:29:b7:2c:25:6a:10:93:25:ef:00:eb:
                    34:d9:2a:e3:0d:f0:34:87:6c:28:62:3b:6f:20:d6:
                    6d:8b:64:af:30:f5:f2:68:26:9e:3c:a5:dc:09:97:
                    59:b3:e6:45:ab:60:2c:c9:59:0c:a0:0c:b8:2c:68:
                    af:b0:53:a0:4e:f5:70:65:e8:fc:d4:ee:90:24:b4:
                    f8:70:35:5d:f7:ba:b6:b6:d5:87:6c:ea:88:1c:fa:
                    31:4e:a3:49:d7:8f:27:2a:13:85:65:dd:ca:9f:da:
                    e6:96:f5:0a:22:c4:86:07:50:47:ad:57:8e:76:60:
                    72:f6:b5:2d:34:e6:b9:4e:d9:f9:4d:f7:8d:82:85:
                    3f:dc:bf:b7:4c:a0:1e:ed:2a:d8:78:56:6b:79:7f:
                    eb:ef:da:64:b8:49:bb:24:7e:cb:49:2b:1e:cb:f8:
                    eb:06:42:ad:0a:22:1a:6e:ad:a3:46:55:f4:f8:49:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:33:F5:3D:3B:3D:F3:E7:48:30:67:57:9D:95:67:A3:FD:A8:5F:02
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3136322e3231332e302e302f32322d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:48:a8:06:d8:78:d1:b5:20:ae:6e:a4:61:4c:65:5f:38:b3:
         d1:30:48:38:aa:5a:e4:f8:ce:39:9f:04:0d:82:44:9c:8b:9e:
         4d:16:91:f4:9a:53:42:29:28:94:99:d4:58:76:0e:4f:1c:1b:
         35:d6:bf:e4:30:54:e2:e7:b4:0d:6b:67:9b:be:98:1b:82:c0:
         09:28:73:7a:f7:da:44:f5:da:6d:58:6e:74:78:9d:e5:6f:1d:
         ef:eb:46:d5:f7:ae:64:63:a7:d9:20:9c:0f:2e:3e:33:4c:6d:
         b9:81:30:ec:67:16:e9:1e:f7:69:d3:95:75:6d:39:cb:49:c3:
         bb:c1:1d:6a:e5:ba:df:9c:f9:f3:f7:71:6d:6d:6a:b3:05:69:
         3c:61:ae:89:e0:a7:bc:7e:5e:2f:cc:0a:19:1b:22:ce:35:0c:
         56:30:f3:91:21:41:ee:10:3a:e5:f1:33:53:7b:43:b4:bc:a1:
         75:48:77:31:9d:ef:a4:97:6c:a1:7a:df:5a:d4:da:32:1f:cf:
         36:f9:c2:26:0c:39:c4:05:92:4f:d2:06:05:57:b8:64:55:6a:
         f1:7a:7b:89:49:c6:2c:e4:d2:4b:e8:2e:f3:ff:bf:b8:17:1f:
         1c:87:da:93:48:67:bd:f6:cf:c5:38:7c:81:cc:f8:80:5e:14:
         e1:89:a0:8d
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIULz008qmBSK0R7R/JhVpkAV+nfYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAzMTQyMjQ4NDBaFw0yMzAzMTMyMjUzNDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE1MjE3MkFBOTJCOENBNEVF
OTcxQTAxRENGRDYxMDY4OEEyQTYxNzAxQUE3REZEMTUyMEYyMzk0MUY3RjcwNjk2
RUMyNDdFOEI2N0U2N0MxNEQ2NTM2REU4NTRGNkFDNThDQzFGQjM3MDUzMzIxQzFG
ODMwNzVCQjNDMzhCODU5NjBDNzQ2NjM5MzY4MEI3RUQ3RDZGOUNBRDBGMjlCNzJD
MjU2QTEwOTMyNUVGMDBFQjM0RDkyQUUzMERGMDM0ODc2QzI4NjIzQjZGMjBENjZE
OEI2NEFGMzBGNUYyNjgyNjlFM0NBNURDMDk5NzU5QjNFNjQ1QUI2MDJDQzk1OTBD
QTAwQ0I4MkM2OEFGQjA1M0EwNEVGNTcwNjVFOEZDRDRFRTkwMjRCNEY4NzAzNTVE
RjdCQUI2QjZENTg3NkNFQTg4MUNGQTMxNEVBMzQ5RDc4RjI3MkExMzg1NjVERENB
OUZEQUU2OTZGNTBBMjJDNDg2MDc1MDQ3QUQ1NzhFNzY2MDcyRjZCNTJEMzRFNkI5
NEVEOUY5NERGNzhEODI4NTNGRENCRkI3NENBMDFFRUQyQUQ4Nzg1NjZCNzk3RkVC
RUZEQTY0Qjg0OUJCMjQ3RUNCNDkyQjFFQ0JGOEVCMDY0MkFEMEEyMjFBNkVBREEz
NDY1NUY0Rjg0OTg1NjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwVIXKqkrjKTulxoB3P1hBoiiphcBqn39FSDyOUH39waW7CR+i2fm
fBTWU23oVPasWMwfs3BTMhwfgwdbs8OLhZYMdGY5NoC37X1vnK0PKbcsJWoQkyXv
AOs02SrjDfA0h2woYjtvINZti2SvMPXyaCaePKXcCZdZs+ZFq2AsyVkMoAy4LGiv
sFOgTvVwZej81O6QJLT4cDVd97q2ttWHbOqIHPoxTqNJ148nKhOFZd3Kn9rmlvUK
IsSGB1BHrVeOdmBy9rUtNOa5Ttn5TfeNgoU/3L+3TKAe7SrYeFZreX/r79pkuEm7
JH7LSSsey/jrBkKtCiIabq2jRlX0+EmFYwIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FAUz9T07PfPnSDBnV52VZ6P9qF8CMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMTM2MzIyZTMy
MzEzMzJlMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjM0MzYzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAqLVADANBgkqhkiG9w0BAQsFAAOCAQEAjkioBth40bUgrm6kYUxlXziz0TBI
OKpa5PjOOZ8EDYJEnIueTRaR9JpTQikolJnUWHYOTxwbNda/5DBU4ue0DWtnm76Y
G4LACShzevfaRPXabVhudHid5W8d7+tG1feuZGOn2SCcDy4+M0xtuYEw7GcW6R73
adOVdW05y0nDu8EdauW635z58/dxbW1qswVpPGGuieCnvH5eL8wKGRsizjUMVjDz
kSFB7hA65fEzU3tDtLyhdUh3MZ3vpJdsoXrfWtTaMh/PNvnCJgw5xAWST9IGBVe4
ZFVq8Xp7iUnGLOTSS+gu8/+/uBcfHIfak0hnvfbPxTh8gcz4gF4U4YmgjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org