Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234302e302f32342d3234203d3e2031323339.roa
File:                     3230392e3230302e3234302e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          +XKDGKzVuOgz6UZ1wWOQbtbT1ET1IB4++T/v9Nu+IAc=
Subject key identifier:   92:E4:D8:DC:8C:2D:0F:74:B0:54:B1:04:C3:F3:B1:F5:EC:11:50:97
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       25601AA4DE9F69D1BFC4ACDA23B93FB5E3AFBB99
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234302e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:56:55 +0000
ROA not before:           Mon 25 Oct 2021 12:51:55 +0000
ROA not after:            Mon 24 Oct 2022 12:56:55 +0000
asID:                     1239
IP address blocks:        209.200.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:1a:a4:de:9f:69:d1:bf:c4:ac:da:23:b9:3f:b5:e3:af:bb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:51:55 2021 GMT
            Not After : Oct 24 12:56:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:c4:8c:73:b8:89:54:92:b7:79:f0:0c:d1:
                    b2:ca:1f:fd:3b:4d:ae:26:26:4d:d8:43:c9:58:84:
                    5c:19:bc:5a:35:e7:9f:65:36:b6:37:44:da:08:3c:
                    f5:ed:58:e5:56:f9:81:bb:3a:14:be:c7:33:79:ae:
                    c1:11:30:49:0c:82:b8:b9:eb:6d:75:ce:56:09:15:
                    79:7d:0b:25:c4:49:31:60:f6:a0:62:04:06:68:bc:
                    ef:9d:d4:3f:64:76:df:8f:6f:66:96:c8:4d:42:09:
                    6a:da:c6:7e:f3:99:86:15:75:9d:ec:56:2f:15:81:
                    50:e9:48:1d:ec:3f:fe:7d:b5:cd:b8:2a:64:f5:fb:
                    bf:2f:cc:28:18:78:b5:5f:44:4f:c4:ad:2b:d9:fb:
                    21:47:9c:d0:2f:49:90:98:6b:7c:7b:01:35:6c:c8:
                    1e:c3:c4:6b:c4:59:88:da:b7:ba:20:67:5f:ba:86:
                    3d:08:ee:64:71:5e:ec:fc:82:4b:e3:5e:3a:7a:21:
                    f9:ce:a7:be:55:e0:95:f2:67:58:99:1e:89:c5:5e:
                    43:82:d8:eb:8f:4c:d8:b6:18:57:2d:7b:8b:f1:5c:
                    83:c2:5c:aa:1d:6d:0a:4d:d2:06:b8:73:17:12:ec:
                    5f:69:33:72:55:7c:ae:ac:21:c3:fb:2f:9a:98:09:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E4:D8:DC:8C:2D:0F:74:B0:54:B1:04:C3:F3:B1:F5:EC:11:50:97
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234302e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:57:f1:e5:c1:0e:b2:df:ac:29:c3:f2:c2:7a:ad:92:2e:71:
         d9:80:c8:82:b5:bc:0c:ed:62:28:5a:c6:e5:f9:ed:a8:cd:37:
         f0:0b:f8:35:90:e4:a0:e5:dd:38:a8:dd:16:9c:91:61:6f:0a:
         9e:0d:a2:fa:6a:59:61:c4:98:ce:05:7d:d4:a7:70:8c:09:45:
         65:fa:66:b8:9b:64:f2:2a:99:6c:04:ce:64:97:e1:a2:b6:53:
         df:48:12:79:15:0e:b0:0a:a3:7c:13:5e:37:3c:97:21:b6:5e:
         bd:26:28:3d:d3:33:e7:0b:a5:0c:30:1b:82:22:68:49:d1:69:
         3a:44:6e:a2:ba:34:52:4e:22:f3:58:16:d1:26:a5:85:11:8f:
         b5:fe:bb:ea:8b:22:e5:7a:48:bb:d6:85:d1:98:d8:31:80:0c:
         67:fc:96:cb:b0:75:22:5c:42:79:03:38:f4:af:ee:73:d1:21:
         59:c4:9a:e4:cb:4b:b2:fb:28:b1:e4:3b:cd:2a:6d:29:1b:82:
         ed:2c:e2:7a:df:f5:97:bc:e9:63:d7:9d:80:32:1e:2d:02:70:
         23:ae:e3:cc:d1:47:39:74:56:1d:b9:98:0e:e8:f8:ea:a6:08:
         1a:e5:ce:52:8f:cf:59:65:63:bc:a6:97:f8:8c:f9:48:8b:8e:
         c3:d7:89:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org