Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa
File:                     3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          CIIXta2a2txkmBZXSeQNSAtK92SFDqEUXO0ol9m3jQ4=
Subject key identifier:   C2:6F:D5:D6:24:D0:57:C5:05:E0:90:09:14:DF:D8:E5:14:D3:CB:FC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       44945AF08EC10CEEC380A0E40A12CAB1E3F88172
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa
Signing time:             Wed 09 Mar 2022 00:18:46 +0000
ROA not before:           Wed 09 Mar 2022 00:13:46 +0000
ROA not after:            Wed 08 Mar 2023 00:18:46 +0000
asID:                     1239
IP address blocks:        209.200.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:94:5a:f0:8e:c1:0c:ee:c3:80:a0:e4:0a:12:ca:b1:e3:f8:81:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  9 00:13:46 2022 GMT
            Not After : Mar  8 00:18:46 2023 GMT
        Subject: CN=3082010A0282010100C0B6B4B2A697514AEEDAF5BCB85BC43C2D098223A500F7C21AB301C63A040C10240BC986391D85D3EC280EA7CB2C25E117D052FDB4233D93C146D0AE8968D439881446CB71547CEA5A2A6258D9493231796147341E76462FC111FE1BFD5F9E1E9522A62C61F8D5270CDF950DD5E6A287E6654F6B0D487D6267C23201E280A9AB287D59E610733EFD2FBDD094018E3E9638530D6D67F4F46E0820639F6F701915722AFFBE73470409300918C8D2192CEC3F45B4E459586C340CB40EE7D1B2054AEB6BD2AB21832BFD2F31F6DA6A56CE757398AB52F36C3AF9C3D64E3D759891836E55413747A0D46CA202DCB72EFA38CDD04300D6AEC55DD43A6B51A71C0E5F310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:b4:b2:a6:97:51:4a:ee:da:f5:bc:b8:5b:
                    c4:3c:2d:09:82:23:a5:00:f7:c2:1a:b3:01:c6:3a:
                    04:0c:10:24:0b:c9:86:39:1d:85:d3:ec:28:0e:a7:
                    cb:2c:25:e1:17:d0:52:fd:b4:23:3d:93:c1:46:d0:
                    ae:89:68:d4:39:88:14:46:cb:71:54:7c:ea:5a:2a:
                    62:58:d9:49:32:31:79:61:47:34:1e:76:46:2f:c1:
                    11:fe:1b:fd:5f:9e:1e:95:22:a6:2c:61:f8:d5:27:
                    0c:df:95:0d:d5:e6:a2:87:e6:65:4f:6b:0d:48:7d:
                    62:67:c2:32:01:e2:80:a9:ab:28:7d:59:e6:10:73:
                    3e:fd:2f:bd:d0:94:01:8e:3e:96:38:53:0d:6d:67:
                    f4:f4:6e:08:20:63:9f:6f:70:19:15:72:2a:ff:be:
                    73:47:04:09:30:09:18:c8:d2:19:2c:ec:3f:45:b4:
                    e4:59:58:6c:34:0c:b4:0e:e7:d1:b2:05:4a:eb:6b:
                    d2:ab:21:83:2b:fd:2f:31:f6:da:6a:56:ce:75:73:
                    98:ab:52:f3:6c:3a:f9:c3:d6:4e:3d:75:98:91:83:
                    6e:55:41:37:47:a0:d4:6c:a2:02:dc:b7:2e:fa:38:
                    cd:d0:43:00:d6:ae:c5:5d:d4:3a:6b:51:a7:1c:0e:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6F:D5:D6:24:D0:57:C5:05:E0:90:09:14:DF:D8:E5:14:D3:CB:FC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:1d:a0:a0:9b:4f:e8:42:60:4e:87:1d:5b:eb:8b:0a:1b:
         74:c2:41:6c:af:bf:c3:e5:4c:26:41:e0:a5:4c:8f:49:fe:9f:
         77:70:1f:fb:59:35:21:9f:75:df:44:46:72:46:6c:26:8b:6e:
         3a:01:0a:a1:1c:3a:28:26:fe:55:68:32:ec:30:71:a5:df:f7:
         16:ce:4e:4a:a3:67:b0:2b:2c:c7:c1:aa:62:47:54:d2:09:db:
         c7:2e:4c:b1:c4:af:83:2d:27:5f:90:41:c7:6b:ee:d3:68:cf:
         a1:a1:1a:e9:dc:66:d1:ad:15:10:bb:86:07:4c:45:6c:29:fc:
         33:a3:7a:3d:4f:1c:76:da:0b:1c:a5:42:d4:e8:81:30:76:69:
         63:f5:98:50:3f:92:ff:10:88:a5:2d:a3:2c:c0:a8:0d:9d:c2:
         6e:b9:3a:70:ce:fd:32:39:86:33:28:98:49:5f:05:bb:d0:ae:
         2d:85:bb:d3:11:27:ec:e5:c1:51:ba:d8:90:9f:68:a7:79:b6:
         fc:d6:9f:e2:87:fe:51:93:4c:24:c1:a4:31:bc:87:01:83:df:
         8e:aa:d6:7f:00:6e:ff:b0:67:1e:fe:0a:8a:b1:62:b0:91:5d:
         e0:72:9c:be:9d:89:b3:90:87:bf:3e:88:48:28:9f:25:07:ff:
         d2:68:97:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org