Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
File:                     3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa (raw, json)
Hash identifier:          nuBHETH2rKXI19QvrmaZ4VoaFsxqWZXOlwQlM9TG4CU=
Subject key identifier:   A2:9F:BB:A8:72:38:18:BD:E7:E0:79:8A:50:BF:BE:58:A4:9A:EE:48
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       0D3E4D6544CD04CA7357D3CEE2009B9F6FFCBCD7
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa
Signing time:             Tue 29 Mar 2022 01:22:08 +0000
ROA not before:           Tue 29 Mar 2022 01:17:08 +0000
ROA not after:            Tue 28 Mar 2023 01:22:08 +0000
asID:                     207419
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:4d:65:44:cd:04:ca:73:57:d3:ce:e2:00:9b:9f:6f:fc:bc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 29 01:17:08 2022 GMT
            Not After : Mar 28 01:22:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:17:fb:0b:06:cd:63:99:1b:ee:55:67:18:
                    c1:77:bf:31:83:97:a5:5d:8c:f2:26:fc:22:01:d4:
                    2e:a0:12:f6:35:33:1e:de:cf:1a:52:60:2b:bb:bb:
                    d1:04:43:6e:1f:5a:51:a2:4e:b7:c7:42:5a:47:1b:
                    9d:03:6f:73:7f:5e:84:08:0a:38:1b:91:89:c5:58:
                    7e:02:fd:84:5a:5d:c5:c4:93:92:e7:d4:07:67:3a:
                    81:15:77:5e:ce:9a:b4:cf:d1:e1:0a:66:40:0e:b1:
                    d8:87:35:c9:b2:44:96:a8:c5:0c:13:9f:37:a8:67:
                    ed:42:06:c5:10:8f:39:d2:b3:78:b9:c5:f5:83:8b:
                    69:ae:68:0a:19:15:ec:65:b0:23:3c:72:64:df:c4:
                    26:e4:f9:24:94:e1:8a:23:07:a5:f3:98:09:10:6c:
                    75:ea:b9:7f:56:21:96:3b:7e:6c:0e:e1:8e:09:00:
                    2d:37:65:9a:76:b2:53:a1:96:8f:66:42:2b:24:b3:
                    c3:99:1e:6e:70:16:8d:4b:e6:65:7d:c4:f9:b9:c6:
                    0c:aa:b4:9e:ab:4d:de:13:ba:e0:ce:18:64:1e:2f:
                    16:8e:cb:77:21:5f:86:1c:30:ec:3d:39:35:21:e8:
                    0f:f2:45:7e:b6:9b:65:a6:10:eb:84:43:c5:dc:43:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9F:BB:A8:72:38:18:BD:E7:E0:79:8A:50:BF:BE:58:A4:9A:EE:48
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e20323037343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:80:5a:93:6d:27:1a:4e:f2:9c:a9:4f:46:df:4f:23:dc:
         d5:7c:43:63:81:b5:a2:9d:c6:7b:92:51:fa:60:9a:79:1d:eb:
         e3:a3:39:e2:ee:84:21:a7:0c:0c:7c:d7:fe:30:f7:ac:59:8b:
         02:f7:78:dc:21:75:bc:8a:89:f0:0e:ca:6d:ad:f8:3e:70:40:
         d2:8c:7d:76:92:ee:50:0f:78:a2:03:0e:dd:e5:81:5a:fd:d5:
         d9:87:5f:67:21:6c:38:d0:3f:67:e3:ae:87:15:df:1c:6e:e4:
         55:9b:ab:af:42:9c:5c:1e:10:fe:6c:66:8b:08:04:5d:6a:5c:
         4d:77:53:21:57:74:af:fc:b8:3e:9f:76:3c:97:7f:08:5f:35:
         7b:fc:cf:ae:e7:c5:7c:3b:56:ca:4b:95:ac:da:ec:b9:a9:64:
         70:80:28:37:0a:f6:bd:c9:4d:a9:62:70:b1:04:43:59:23:b0:
         69:c3:fe:27:44:51:3a:27:09:18:14:ab:d0:16:60:9b:0c:dc:
         a4:ce:13:38:c4:a3:20:72:d8:9a:41:c5:25:5a:0a:03:66:3e:
         d7:f4:d7:b8:f2:fd:77:24:0e:bb:4e:d5:0e:ca:3f:a0:99:c8:
         79:e7:ec:8a:e1:60:a7:64:a0:6b:60:7a:8c:cf:97:71:48:f7:
         d2:ae:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org