Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
File:                     3139302e39322e3136342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          mw8H4uy7TL5uwcpXNJyHF8gBw0GFBU0iOGMKEatJv3Y=
Subject key identifier:   36:C4:67:87:95:D5:D5:5B:53:F9:FE:C7:6C:E6:4B:83:3E:B6:7B:B5
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       4F38DB30F7FCE85F955E912ABCFCDC7889D3AF59
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:20 +0000
ROA not before:           Mon 25 Oct 2021 12:52:20 +0000
ROA not after:            Mon 24 Oct 2022 12:57:20 +0000
asID:                     7029
IP address blocks:        190.92.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:38:db:30:f7:fc:e8:5f:95:5e:91:2a:bc:fc:dc:78:89:d3:af:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:20 2021 GMT
            Not After : Oct 24 12:57:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:0f:f3:c1:75:6d:6d:eb:cd:45:c4:26:c5:
                    2c:cd:25:cb:ff:35:5a:d1:82:e3:06:5e:ec:11:64:
                    68:50:a8:1d:2b:89:7d:45:08:47:e2:51:39:b3:4a:
                    9a:2a:53:95:2a:69:9b:9e:34:ff:0b:67:cf:9b:a8:
                    7e:59:26:36:2a:a5:87:99:33:c1:8a:40:05:07:18:
                    52:67:9b:01:89:c6:b4:ee:56:2a:30:e5:65:14:1c:
                    59:6b:8b:83:10:35:a2:e0:6c:aa:39:c6:f6:2f:e4:
                    98:08:97:42:a6:9c:36:02:31:eb:6d:8c:47:42:01:
                    11:86:9f:3e:53:2f:31:fd:06:a0:79:8d:79:72:9c:
                    83:50:f5:45:b8:14:c0:d1:d5:f9:c4:08:af:b6:4e:
                    58:dd:f1:78:4b:49:a8:e4:1c:2f:cc:3d:b3:2f:ed:
                    44:24:72:a9:cf:37:78:e8:9c:bd:5d:45:17:8f:f5:
                    51:42:4f:e8:31:db:d4:d4:de:f7:f7:b2:1f:55:0a:
                    cb:06:c8:d7:70:f2:8c:06:c5:9d:27:e3:59:49:8d:
                    df:43:68:c6:b9:34:9b:9a:56:39:a4:14:c6:7c:96:
                    53:be:29:22:61:6b:a3:1a:fe:14:16:23:3d:da:37:
                    a8:ea:70:d8:b5:3e:32:56:d4:5c:e5:4a:a9:41:2c:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C4:67:87:95:D5:D5:5B:53:F9:FE:C7:6C:E6:4B:83:3E:B6:7B:B5
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139302e39322e3136342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:de:b4:4b:c3:db:98:72:45:6b:99:bf:67:3d:09:4c:08:56:
         ba:31:31:8c:03:e7:b5:34:d4:09:12:7d:34:d9:77:00:b9:f1:
         f0:35:c7:8f:ce:0e:a3:72:6e:09:44:d0:ed:31:08:c1:03:0e:
         e2:ce:93:9a:87:51:4d:3b:42:f9:70:10:28:16:d7:9a:1d:e8:
         c3:e5:fc:cd:a7:c9:11:09:35:cc:d5:9c:95:4f:84:b1:c2:66:
         09:ce:80:e0:f2:b6:74:88:13:82:50:be:9a:4b:ed:8f:87:40:
         0c:ea:f0:2f:89:07:c5:37:5f:87:da:a9:99:70:f4:aa:cd:1e:
         48:39:c7:bd:bd:e0:0a:d4:22:af:e4:a3:b0:e5:8d:41:37:12:
         8d:0b:e2:72:ff:7f:59:5e:e6:5a:b2:41:71:87:40:c4:05:b1:
         0e:62:8d:d0:0d:e6:09:29:09:3e:7f:7b:59:28:df:5d:3a:3d:
         4d:c9:9c:cf:be:6b:3f:42:11:2a:ef:7b:e1:b7:94:9a:41:78:
         3e:6a:85:62:af:be:94:c6:3c:1d:ef:b8:89:91:44:e6:02:8b:
         5c:d4:18:35:74:62:1f:ca:09:12:b5:fc:d0:8c:c2:d0:73:62:
         8f:71:08:12:a6:bc:89:77:0e:9e:4f:44:b9:55:aa:cd:4a:8b:
         a7:2a:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org