Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
File:                     3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          ZL/Pje4DQ/lfDSPxGsujnr0bfy0Du/BmjL3xG4FEzv0=
Subject key identifier:   49:05:EC:58:98:48:72:FA:8A:4F:B7:72:98:B0:48:8F:67:BA:CD:01
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       01C805BC2921629294CD4123678FCAEDEC75EC87
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:56:52 +0000
ROA not before:           Mon 25 Oct 2021 12:51:52 +0000
ROA not after:            Mon 24 Oct 2022 12:56:52 +0000
asID:                     1239
IP address blocks:        192.228.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c8:05:bc:29:21:62:92:94:cd:41:23:67:8f:ca:ed:ec:75:ec:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:51:52 2021 GMT
            Not After : Oct 24 12:56:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:50:50:81:10:53:64:19:18:fd:a3:4f:8e:
                    9b:f6:c5:8a:8d:c7:0f:9f:9e:ac:86:11:ca:2b:e1:
                    7e:5f:6c:98:71:dd:39:7b:79:12:cb:9b:79:57:bd:
                    0a:08:ce:13:23:5a:32:31:a9:9a:3f:db:83:21:c5:
                    0c:47:f0:bb:2f:be:cb:78:de:7f:0c:41:60:0a:29:
                    8e:3c:6f:ce:33:12:5e:0b:82:2e:cd:f5:ae:a0:98:
                    3f:9e:ac:c0:c9:bf:d0:80:6c:6a:84:b3:a9:a6:4a:
                    ec:1d:2a:d5:d7:40:92:d7:d6:60:a0:30:32:cf:d9:
                    ac:fa:5e:3a:85:26:40:78:ed:95:6a:3e:0e:7c:23:
                    2b:63:35:0f:16:cf:51:a2:c9:32:f4:a6:d0:d0:bb:
                    60:a0:4b:fe:af:0f:7e:70:c4:f9:f2:00:ba:fa:99:
                    27:4a:ed:52:e2:a8:e3:b2:05:65:01:c5:43:e2:b9:
                    ca:67:3b:4b:65:8d:61:62:3e:1c:b2:9a:86:4d:de:
                    47:79:97:ee:f5:eb:be:34:4e:cd:3b:c3:65:b7:41:
                    12:8a:f5:66:e3:07:52:85:c3:22:87:ca:2a:87:aa:
                    33:52:2e:a8:4f:a9:b1:6c:59:a7:44:60:fd:84:44:
                    c6:e0:59:f6:30:85:ec:2c:3c:1d:50:6a:8f:3f:9f:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:05:EC:58:98:48:72:FA:8A:4F:B7:72:98:B0:48:8F:67:BA:CD:01
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3139322e3232382e3131322e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:61:b1:27:46:09:05:7f:ba:02:1b:b6:7a:b2:3c:5a:98:
         5d:97:9e:ed:66:3a:0b:e9:5c:5c:9c:3e:e6:97:90:4c:fe:c8:
         e2:5c:29:9c:b3:29:eb:ca:a8:f6:34:e7:c3:37:23:7c:a5:0a:
         8a:22:95:79:63:21:15:82:f8:b3:dc:50:ec:9a:cf:56:08:19:
         c7:a6:cc:59:e6:bf:12:61:94:ce:6c:f6:ef:aa:55:8d:6f:86:
         1c:77:bd:cb:47:7c:0a:99:38:a8:27:b8:58:8c:ec:bc:a0:b3:
         02:bd:1b:c7:46:01:1e:b9:b9:10:58:68:c5:fe:0c:31:86:f2:
         19:e3:3f:18:85:b9:44:58:15:02:7f:53:fe:ab:32:2a:f7:15:
         79:22:7d:c8:3c:51:e9:b4:49:17:75:2a:bc:99:41:36:1a:f6:
         29:48:f7:84:b5:32:43:bb:f2:b7:05:61:54:df:09:49:ac:63:
         2e:8d:0c:68:f8:e9:69:0d:c6:73:04:67:93:c8:a5:57:cb:a6:
         7c:2e:31:b0:6d:91:31:b8:a2:99:6f:73:d8:f9:79:3a:51:e4:
         ed:9b:c1:6a:9b:a9:5f:54:6c:f1:7e:9b:d4:d2:e1:93:29:2b:
         3a:e6:31:1c:44:39:48:6e:52:cb:9d:69:df:29:70:fa:5e:cf:
         59:f7:fa:ab
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUAcgFvCkhYpKUzUEjZ4/K7ex17IcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMTEwMjUxMjUxNTJaFw0yMjEwMjQxMjU2NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkMyODUwNTA4MTEwNTM2NDE5
MThGREEzNEY4RTlCRjZDNThBOERDNzBGOUY5RUFDODYxMUNBMkJFMTdFNUY2Qzk4
NzFERDM5N0I3OTEyQ0I5Qjc5NTdCRDBBMDhDRTEzMjM1QTMyMzFBOTlBM0ZEQjgz
MjFDNTBDNDdGMEJCMkZCRUNCNzhERTdGMEM0MTYwMEEyOThFM0M2RkNFMzMxMjVF
MEI4MjJFQ0RGNUFFQTA5ODNGOUVBQ0MwQzlCRkQwODA2QzZBODRCM0E5QTY0QUVD
MUQyQUQ1RDc0MDkyRDdENjYwQTAzMDMyQ0ZEOUFDRkE1RTNBODUyNjQwNzhFRDk1
NkEzRTBFN0MyMzJCNjMzNTBGMTZDRjUxQTJDOTMyRjRBNkQwRDBCQjYwQTA0QkZF
QUYwRjdFNzBDNEY5RjIwMEJBRkE5OTI3NEFFRDUyRTJBOEUzQjIwNTY1MDFDNTQz
RTJCOUNBNjczQjRCNjU4RDYxNjIzRTFDQjI5QTg2NERERTQ3Nzk5N0VFRjVFQkJF
MzQ0RUNEM0JDMzY1Qjc0MTEyOEFGNTY2RTMwNzUyODVDMzIyODdDQTJBODdBQTMz
NTIyRUE4NEZBOUIxNkM1OUE3NDQ2MEZEODQ0NEM2RTA1OUY2MzA4NUVDMkMzQzFE
NTA2QThGM0Y5RjY1QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvChQUIEQU2QZGP2jT46b9sWKjccPn56shhHKK+F+X2yYcd05e3kS
y5t5V70KCM4TI1oyMamaP9uDIcUMR/C7L77LeN5/DEFgCimOPG/OMxJeC4IuzfWu
oJg/nqzAyb/QgGxqhLOppkrsHSrV10CS19ZgoDAyz9ms+l46hSZAeO2Vaj4OfCMr
YzUPFs9Rosky9KbQ0LtgoEv+rw9+cMT58gC6+pknSu1S4qjjsgVlAcVD4rnKZztL
ZY1hYj4cspqGTd5HeZfu9eu+NE7NO8Nlt0ESivVm4wdShcMih8oqh6ozUi6oT6mx
bFmnRGD9hETG4Fn2MIXsLDwdUGqPP59lyQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FEkF7FiYSHL6ik+3cpiwSI9nus0BMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMTM5MzIyZTMy
MzIzODJlMzEzMTMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMjMzMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATA5HAwDQYJKoZIhvcNAQELBQADggEBADzLYbEnRgkFf7oCG7Z6sjxa
mF2Xnu1mOgvpXFycPuaXkEz+yOJcKZyzKevKqPY058M3I3ylCooilXljIRWC+LPc
UOyaz1YIGcemzFnmvxJhlM5s9u+qVY1vhhx3vctHfAqZOKgnuFiM7LygswK9G8dG
AR65uRBYaMX+DDGG8hnjPxiFuURYFQJ/U/6rMir3FXkifcg8Uem0SRd1KryZQTYa
9ilI94S1MkO78rcFYVTfCUmsYy6NDGj46WkNxnMEZ5PIpVfLpnwuMbBtkTG4oplv
c9j5eTpR5O2bwWqbqV9UbPF+m9TS4ZMpKzrmMRxEOUhuUsudad8pcPpez1n3+qs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org