Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3233322e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          vT5a6CWA1UFGQbtqrBm9He6+w0LuPzUG/Q8+fAArv78=
Subject key identifier:   A7:25:40:6C:94:89:AF:84:29:62:FF:D8:16:61:C6:FD:A4:CA:19:9F
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       4BE1A3E6FD44FC6C46011E9C2969CA6B23FDD327
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:43 +0000
ROA not before:           Mon 25 Oct 2021 12:52:43 +0000
ROA not after:            Mon 24 Oct 2022 12:57:43 +0000
asID:                     7029
IP address blocks:        209.200.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e1:a3:e6:fd:44:fc:6c:46:01:1e:9c:29:69:ca:6b:23:fd:d3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:43 2021 GMT
            Not After : Oct 24 12:57:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:9c:08:3a:61:33:e3:64:69:b7:08:fb:a5:
                    69:a6:00:08:5b:74:0a:f8:d1:72:c7:ce:53:fb:4d:
                    ad:c6:96:7c:c7:99:14:a7:1c:36:33:81:73:f2:49:
                    55:a5:08:c7:c4:e4:2a:3f:de:eb:d7:ee:49:cc:da:
                    7a:64:56:3b:b0:4a:ed:cb:0c:f5:aa:05:53:2b:a1:
                    a5:b0:7e:4f:74:fd:92:44:d1:60:2b:5b:65:d4:62:
                    29:8f:be:fa:00:73:e0:0c:a1:e4:a9:bf:04:6d:23:
                    10:a9:df:c2:69:54:28:ae:c0:1e:ea:d5:40:e7:62:
                    e0:27:e1:b0:93:d3:a5:ed:9b:c8:3f:05:f1:75:2a:
                    7f:6a:8f:4d:d7:1d:96:9b:81:b8:db:1d:0a:13:64:
                    3f:73:d0:50:58:ac:e3:6e:5f:94:5b:c3:93:f0:f9:
                    12:c3:fa:d5:9f:df:8d:e8:52:9b:04:e5:e2:85:32:
                    3f:a6:17:2c:e5:a4:48:ef:10:87:90:b7:46:29:c0:
                    e6:f2:63:53:64:c0:94:94:5f:72:12:3f:a6:c7:af:
                    86:77:9a:47:5c:a0:48:6d:6d:51:10:f4:3d:46:0b:
                    ae:b9:cf:d4:01:a6:f7:53:2d:69:84:36:64:19:23:
                    f5:04:47:5f:39:aa:bc:3c:e6:98:37:d4:fb:c9:dc:
                    ac:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:25:40:6C:94:89:AF:84:29:62:FF:D8:16:61:C6:FD:A4:CA:19:9F
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:95:db:a2:82:a6:a9:8d:e7:4e:da:b1:c7:07:21:99:df:d3:
         e6:31:9b:ce:c8:2e:16:41:4d:ae:a6:50:00:1a:34:42:79:f3:
         5b:17:64:17:4e:bb:fc:a9:fe:ec:d0:82:9a:e1:71:64:dc:6b:
         78:d1:e8:ae:09:95:67:d7:5e:bc:b9:84:c1:98:7b:fe:5a:be:
         49:36:b5:b9:7c:d6:45:29:3e:34:01:83:2d:02:e1:a0:16:26:
         7f:3a:d9:82:64:ac:1e:44:93:3a:96:f2:20:3b:7b:b1:37:45:
         68:29:ac:a1:0e:ec:9e:91:e2:7c:cd:4c:ca:ad:fe:ce:52:5a:
         d5:c3:14:e4:53:e2:33:d7:39:db:00:bc:ab:d2:97:91:80:12:
         bb:2f:85:44:d6:3a:a1:db:8a:44:15:1f:4c:14:09:2a:61:4a:
         0b:a9:53:4f:48:60:f7:f8:95:a6:ec:7a:15:ac:87:c2:58:c3:
         29:f5:68:67:b6:8a:e2:81:af:a6:cd:d9:fb:80:ac:85:12:9c:
         4c:a5:96:21:00:de:f7:e4:20:9f:db:29:06:90:66:87:1e:85:
         e1:4a:53:fe:8c:e3:a9:18:a4:e8:fd:64:f8:b4:a3:58:b4:9b:
         6e:76:a3:b7:ee:2c:cc:53:0f:65:ee:90:25:2a:e9:45:b4:44:
         81:8f:55:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org