Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e203439393939.roa
File:                     3230392e3230302e3233362e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          DEVLfh8I+MMLE+FlwRt2A+fNb/6pz3cLPArmwSKxKGo=
Subject key identifier:   E0:5E:28:BF:FE:74:34:BD:72:C2:06:89:48:12:07:B2:F4:02:E4:C0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       60A9FE97DD5BB2E32374E379FD474F4C26B3CDB8
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e203439393939.roa
Signing time:             Wed 23 Feb 2022 14:09:24 +0000
ROA not before:           Wed 23 Feb 2022 14:04:24 +0000
ROA not after:            Wed 22 Feb 2023 14:09:24 +0000
asID:                     49999
IP address blocks:        209.200.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a9:fe:97:dd:5b:b2:e3:23:74:e3:79:fd:47:4f:4c:26:b3:cd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 23 14:04:24 2022 GMT
            Not After : Feb 22 14:09:24 2023 GMT
        Subject: CN=3082010A0282010100D928B066FD5EBB4CE45A0916A7CA64D2E571EAA5C18A47CE272DDDC1DF5C887CEA377E361C352611CF6BA5E38235B07AC1B79043E07C974CD3C19044CF280CF37536C0305B14B339088C53CDAA29EDEDC8C4A26CF32AED44A22B1EF857E4DE84C0EB5ABA30762B40441E5E82239A13747F1980D908913F24F8230469472CD9DC065FE2F68D54B440348FFC2423230A5F6FFF7741E9E500DD9C284402387EFE8D43A2CA927A5318F9B61A2C70E71719AD64DD86411CB3EF2738B0797B11423AE91C1990B0B53C91CF1E2DB35A0D9A66475A2448946D37D2F7DC09C1648A329B63D3D58E8ADD9D453984E293E520055ED99D318C415C4D167950B80B435AB1C7CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:b0:66:fd:5e:bb:4c:e4:5a:09:16:a7:ca:
                    64:d2:e5:71:ea:a5:c1:8a:47:ce:27:2d:dd:c1:df:
                    5c:88:7c:ea:37:7e:36:1c:35:26:11:cf:6b:a5:e3:
                    82:35:b0:7a:c1:b7:90:43:e0:7c:97:4c:d3:c1:90:
                    44:cf:28:0c:f3:75:36:c0:30:5b:14:b3:39:08:8c:
                    53:cd:aa:29:ed:ed:c8:c4:a2:6c:f3:2a:ed:44:a2:
                    2b:1e:f8:57:e4:de:84:c0:eb:5a:ba:30:76:2b:40:
                    44:1e:5e:82:23:9a:13:74:7f:19:80:d9:08:91:3f:
                    24:f8:23:04:69:47:2c:d9:dc:06:5f:e2:f6:8d:54:
                    b4:40:34:8f:fc:24:23:23:0a:5f:6f:ff:77:41:e9:
                    e5:00:dd:9c:28:44:02:38:7e:fe:8d:43:a2:ca:92:
                    7a:53:18:f9:b6:1a:2c:70:e7:17:19:ad:64:dd:86:
                    41:1c:b3:ef:27:38:b0:79:7b:11:42:3a:e9:1c:19:
                    90:b0:b5:3c:91:cf:1e:2d:b3:5a:0d:9a:66:47:5a:
                    24:48:94:6d:37:d2:f7:dc:09:c1:64:8a:32:9b:63:
                    d3:d5:8e:8a:dd:9d:45:39:84:e2:93:e5:20:05:5e:
                    d9:9d:31:8c:41:5c:4d:16:79:50:b8:0b:43:5a:b1:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:28:BF:FE:74:34:BD:72:C2:06:89:48:12:07:B2:F4:02:E4:C0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:24:ad:a7:7f:7f:88:5e:6e:f5:9d:a2:8b:6a:6f:8a:98:d2:
         a6:72:4d:53:3d:1c:6f:bf:56:93:b5:68:5b:cc:57:07:a7:9a:
         14:ec:53:9c:36:ad:c5:83:6f:9e:4c:f2:3c:d0:46:b8:04:c0:
         c9:0d:39:95:5f:a9:97:7f:7e:bc:36:12:21:1b:11:4b:fc:7a:
         3c:7d:97:b2:5a:40:db:a1:6d:be:57:b0:19:a3:98:c5:ec:c1:
         bc:35:d1:da:ed:d9:28:1c:3e:07:f3:94:fa:35:13:ec:b9:18:
         c3:1c:df:47:e6:fe:c7:73:ce:16:e4:cf:20:b9:93:2e:03:1a:
         9b:0e:67:6d:09:88:7a:ee:01:60:2c:0e:b4:d5:aa:80:57:07:
         9c:40:a3:f4:76:36:64:f8:82:64:f9:d9:3a:2b:23:00:bc:65:
         80:f1:f6:3b:17:d7:0f:48:5c:4e:a1:4c:1f:bd:63:d1:b3:b3:
         3e:65:39:30:2f:60:94:ec:ec:dd:71:2f:1f:47:c9:f4:8e:56:
         46:89:99:a1:42:91:03:15:45:e9:9b:80:8e:ef:de:ca:af:5b:
         40:a7:2c:6d:71:35:ce:8c:84:81:b0:13:dc:b5:0b:3d:4a:88:
         60:6d:a9:32:0c:ce:d4:cc:30:a9:64:c5:0b:9d:8a:9e:7a:09:
         e1:ad:e0:7f
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUYKn+l91bsuMjdON5/UdPTCazzbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAyMjMxNDA0MjRaFw0yMzAyMjIxNDA5MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDkyOEIwNjZGRDVFQkI0Q0U0
NUEwOTE2QTdDQTY0RDJFNTcxRUFBNUMxOEE0N0NFMjcyREREQzFERjVDODg3Q0VB
Mzc3RTM2MUMzNTI2MTFDRjZCQTVFMzgyMzVCMDdBQzFCNzkwNDNFMDdDOTc0Q0Qz
QzE5MDQ0Q0YyODBDRjM3NTM2QzAzMDVCMTRCMzM5MDg4QzUzQ0RBQTI5RURFREM4
QzRBMjZDRjMyQUVENDRBMjJCMUVGODU3RTRERTg0QzBFQjVBQkEzMDc2MkI0MDQ0
MUU1RTgyMjM5QTEzNzQ3RjE5ODBEOTA4OTEzRjI0RjgyMzA0Njk0NzJDRDlEQzA2
NUZFMkY2OEQ1NEI0NDAzNDhGRkMyNDIzMjMwQTVGNkZGRjc3NDFFOUU1MDBERDlD
Mjg0NDAyMzg3RUZFOEQ0M0EyQ0E5MjdBNTMxOEY5QjYxQTJDNzBFNzE3MTlBRDY0
REQ4NjQxMUNCM0VGMjczOEIwNzk3QjExNDIzQUU5MUMxOTkwQjBCNTNDOTFDRjFF
MkRCMzVBMEQ5QTY2NDc1QTI0NDg5NDZEMzdEMkY3REMwOUMxNjQ4QTMyOUI2M0Qz
RDU4RThBREQ5RDQ1Mzk4NEUyOTNFNTIwMDU1RUQ5OUQzMThDNDE1QzREMTY3OTUw
QjgwQjQzNUFCMUM3Q0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2SiwZv1eu0zkWgkWp8pk0uVx6qXBikfOJy3dwd9ciHzqN342HDUm
Ec9rpeOCNbB6wbeQQ+B8l0zTwZBEzygM83U2wDBbFLM5CIxTzaop7e3IxKJs8yrt
RKIrHvhX5N6EwOtaujB2K0BEHl6CI5oTdH8ZgNkIkT8k+CMEaUcs2dwGX+L2jVS0
QDSP/CQjIwpfb/93QenlAN2cKEQCOH7+jUOiypJ6Uxj5thoscOcXGa1k3YZBHLPv
JziweXsRQjrpHBmQsLU8kc8eLbNaDZpmR1okSJRtN9L33AnBZIoym2PT1Y6K3Z1F
OYTik+UgBV7ZnTGMQVxNFnlQuAtDWrHHzQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOBeKL/+dDS9csIGiUgSB7L0AuTAMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzOTM5MzkzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtHI7DANBgkqhkiG9w0BAQsFAAOCAQEAQiStp39/iF5u9Z2ii2pv
ipjSpnJNUz0cb79Wk7VoW8xXB6eaFOxTnDatxYNvnkzyPNBGuATAyQ05lV+pl39+
vDYSIRsRS/x6PH2XslpA26FtvlewGaOYxezBvDXR2u3ZKBw+B/OU+jUT7LkYwxzf
R+b+x3POFuTPILmTLgMamw5nbQmIeu4BYCwOtNWqgFcHnECj9HY2ZPiCZPnZOisj
ALxlgPH2OxfXD0hcTqFMH71j0bOzPmU5MC9glOzs3XEvH0fJ9I5WRomZoUKRAxVF
6ZuAju/eyq9bQKcsbXE1zoyEgbAT3LULPUqIYG2pMgzO1MwwqWTFC52KnnoJ4a3g
fw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org