Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa
File:                     3230382e37362e34302e302f32322d3234203d3e2036343631.roa (raw, json)
Hash identifier:          G4Ulg8WOcwfu9TuqX7qwIHRHSFqfqLOWOhsHFMnNODs=
Subject key identifier:   34:9D:8B:01:ED:BB:EF:5F:66:AB:8F:85:C1:E8:0D:18:D5:70:59:4E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       53124735EAADBA3D5260C538E0BF04738F4B8CF2
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa
Signing time:             Mon 14 Mar 2022 22:53:54 +0000
ROA not before:           Mon 14 Mar 2022 22:48:54 +0000
ROA not after:            Mon 13 Mar 2023 22:53:54 +0000
asID:                     6461
IP address blocks:        208.76.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:12:47:35:ea:ad:ba:3d:52:60:c5:38:e0:bf:04:73:8f:4b:8c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 14 22:48:54 2022 GMT
            Not After : Mar 13 22:53:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:ee:b8:68:34:0f:94:65:0e:ad:b8:f1:33:
                    99:87:f3:1b:58:a0:20:4a:12:f8:94:46:01:0b:e5:
                    42:95:7a:c1:46:98:df:9e:98:8a:68:65:cb:7b:c3:
                    e8:39:47:0d:3e:06:cc:d4:03:a6:88:7a:40:df:ac:
                    18:65:1f:e2:2e:03:69:f6:38:e3:4e:d4:d8:4f:c7:
                    7f:40:d3:1e:77:d6:d2:4c:6b:66:98:6a:f0:3f:d8:
                    eb:b6:1e:1e:e6:8a:01:0f:f3:a6:b0:ad:a4:60:41:
                    0a:80:41:b0:a9:84:19:83:24:6e:62:dc:ba:59:e1:
                    bf:4b:48:f8:9c:f6:54:50:92:20:78:93:31:f3:2b:
                    2e:7d:fa:91:1c:52:a3:1e:69:f1:94:d6:55:66:2b:
                    0d:05:89:82:47:a2:24:81:96:66:12:f0:a2:ae:81:
                    41:df:d9:fa:c0:7b:9c:df:8d:18:83:c7:60:d5:7a:
                    e6:73:8d:b2:e2:77:43:78:bd:4b:b0:c1:c0:34:00:
                    11:0c:82:b4:21:6a:12:e8:fe:b5:b3:a6:6a:63:35:
                    4a:d2:d1:57:99:04:f6:a6:d2:3c:32:9b:47:ed:b9:
                    41:8d:9b:23:2b:4b:b6:33:e0:6c:b6:78:aa:8a:64:
                    8e:27:96:de:fe:1d:17:91:c7:44:31:b1:16:b9:9a:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:8B:01:ED:BB:EF:5F:66:AB:8F:85:C1:E8:0D:18:D5:70:59:4E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230382e37362e34302e302f32322d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:15:24:cc:43:db:bf:2f:12:2c:cf:e4:d2:31:dd:4e:72:
         c8:0a:70:12:08:b2:a9:f2:71:3b:82:56:92:12:00:db:2c:86:
         41:78:c3:7d:24:c4:0d:2d:06:72:bc:c0:58:ed:b5:db:fa:1b:
         95:03:3b:5d:ed:a0:4c:cb:20:d7:39:f9:7a:3e:ba:a4:0e:d5:
         cd:7a:8f:c7:21:d8:76:a7:14:d7:e1:73:0e:78:3d:10:1e:8c:
         bc:1d:4a:3d:76:21:68:5b:3b:40:bc:cb:3d:58:48:79:69:d0:
         f5:16:59:d3:1b:d8:cc:68:71:a8:71:97:69:08:c3:2d:52:bb:
         8b:97:39:0b:84:f6:28:e7:25:a2:93:76:1f:da:18:4a:cd:c2:
         98:23:a4:61:35:24:48:3a:a7:77:e7:0d:cd:11:2f:0c:32:06:
         4c:63:70:7c:d2:1b:7c:ad:96:fa:76:7c:6b:3a:94:df:27:21:
         e5:d3:ea:95:e0:5e:1e:a1:85:c9:c4:c4:2a:01:6b:e0:aa:b0:
         ec:f5:2f:c0:48:0b:f1:43:eb:7f:bc:f5:64:36:5e:1a:c0:c2:
         08:7d:0b:fd:67:b5:05:41:5c:4d:c2:f7:c7:22:3f:09:3f:21:
         4c:41:91:6b:40:db:2f:b6:45:ce:e6:02:67:d4:e9:94:74:0a:
         a4:59:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org