Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa
File:                     3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          sa8SDP7/jpkRmOIfiqTR9VeZZGEm3t4mOIu7oyyuApA=
Subject key identifier:   BA:2B:52:CA:90:F8:8B:C5:57:90:3A:10:8D:F6:03:91:B4:83:55:F8
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       4D727343575BDC73FB2A57EB80BF9B43432B34E5
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:50 +0000
ROA not before:           Mon 25 Oct 2021 12:52:50 +0000
ROA not after:            Mon 24 Oct 2022 12:57:50 +0000
asID:                     7029
IP address blocks:        209.200.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:72:73:43:57:5b:dc:73:fb:2a:57:eb:80:bf:9b:43:43:2b:34:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:50 2021 GMT
            Not After : Oct 24 12:57:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:79:90:62:c4:26:34:c3:33:b0:52:ed:e1:
                    40:c7:c9:97:f5:6b:5f:2b:9e:ec:da:5b:e2:8a:29:
                    0c:56:b3:6c:33:da:d8:b4:c8:b3:0e:97:e4:4e:b0:
                    a9:f4:87:84:98:e4:63:d3:a4:8d:fb:ad:91:76:91:
                    96:cf:62:fb:bc:50:ea:96:ec:8f:4d:7f:00:96:69:
                    7f:d7:d2:35:57:76:cb:16:b3:94:0a:50:8f:df:62:
                    8e:8d:03:0f:52:18:a2:5f:bd:10:ee:c1:8b:db:41:
                    c3:a7:fb:45:77:04:9e:e5:6d:93:90:fb:c7:76:00:
                    d4:4a:0b:79:14:5b:64:9e:ed:90:aa:57:df:d5:bb:
                    00:f0:d3:81:2b:e1:77:3f:b4:b5:38:1e:07:fb:68:
                    5c:ed:ed:4f:15:88:02:ea:5d:bf:fc:a2:71:a9:fa:
                    84:08:b8:85:fc:f3:95:ef:42:44:ca:38:2d:d8:04:
                    48:fc:20:ce:cf:1d:0c:38:97:b0:57:d6:32:95:f6:
                    9f:77:6c:67:83:9a:74:ee:3b:1b:69:16:e5:a4:33:
                    86:b6:4c:72:d2:d2:ba:64:49:13:f6:53:4c:c6:8b:
                    b2:c5:3e:0c:9a:17:35:ec:1e:a4:a2:1c:f6:78:6e:
                    74:ac:ba:98:61:7e:a4:35:80:a5:06:6d:fd:b4:d7:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2B:52:CA:90:F8:8B:C5:57:90:3A:10:8D:F6:03:91:B4:83:55:F8
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:ff:b0:56:6d:99:55:80:f0:30:19:d3:4c:8f:03:df:12:
         dd:12:8e:e1:02:21:49:6e:e2:fb:39:8b:9f:47:b5:44:2f:60:
         90:4a:99:26:e3:c4:59:9f:70:c0:ca:12:cc:e7:44:d6:4c:db:
         51:15:b2:ba:1d:4b:ac:01:57:0b:cc:8c:7a:1a:9a:cb:12:21:
         6d:7c:d7:8c:25:0d:92:dd:c3:30:81:4b:70:96:0c:c3:a0:ae:
         7a:d6:6e:77:28:3e:34:4f:1d:44:a6:90:fe:e5:89:45:3e:d1:
         95:e0:f8:63:6d:a7:f4:81:49:61:84:76:55:24:5f:24:ce:9e:
         3a:19:f3:90:a9:d5:4c:85:89:79:a5:3a:b8:59:35:1e:fb:6a:
         6e:74:fb:01:32:b4:84:e7:01:92:ae:02:d0:b5:bd:91:87:11:
         2b:45:1a:23:3e:9f:3b:fb:ac:6a:77:9f:3e:4a:bf:f4:3d:ed:
         9e:95:e6:18:e2:c2:c4:61:63:43:14:08:23:90:ea:d1:fd:16:
         dc:b6:54:ad:77:65:5c:83:c2:8f:b9:8b:4c:99:3c:cc:c8:9e:
         34:22:fb:0f:5c:46:68:b9:da:0c:1c:81:85:c5:36:36:49:c6:
         f4:5f:dc:85:c0:d5:21:3f:28:4f:8a:32:b6:34:60:8a:55:d5:
         c4:5a:2e:d2
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUTXJzQ1db3HP7KlfrgL+bQ0MrNOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMTEwMjUxMjUyNTBaFw0yMjEwMjQxMjU3NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTZCNDc5OTA2MkM0MjYzNEMz
MzNCMDUyRURFMTQwQzdDOTk3RjU2QjVGMkI5RUVDREE1QkUyOEEyOTBDNTZCMzZD
MzNEQUQ4QjRDOEIzMEU5N0U0NEVCMEE5RjQ4Nzg0OThFNDYzRDNBNDhERkJBRDkx
NzY5MTk2Q0Y2MkZCQkM1MEVBOTZFQzhGNEQ3RjAwOTY2OTdGRDdEMjM1NTc3NkNC
MTZCMzk0MEE1MDhGREY2MjhFOEQwMzBGNTIxOEEyNUZCRDEwRUVDMThCREI0MUMz
QTdGQjQ1NzcwNDlFRTU2RDkzOTBGQkM3NzYwMEQ0NEEwQjc5MTQ1QjY0OUVFRDkw
QUE1N0RGRDVCQjAwRjBEMzgxMkJFMTc3M0ZCNEI1MzgxRTA3RkI2ODVDRURFRDRG
MTU4ODAyRUE1REJGRkNBMjcxQTlGQTg0MDhCODg1RkNGMzk1RUY0MjQ0Q0EzODJE
RDgwNDQ4RkMyMENFQ0YxRDBDMzg5N0IwNTdENjMyOTVGNjlGNzc2QzY3ODM5QTc0
RUUzQjFCNjkxNkU1QTQzMzg2QjY0QzcyRDJEMkJBNjQ0OTEzRjY1MzRDQzY4QkIy
QzUzRTBDOUExNzM1RUMxRUE0QTIxQ0Y2Nzg2RTc0QUNCQTk4NjE3RUE0MzU4MEE1
MDY2REZEQjREN0REMjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAprR5kGLEJjTDM7BS7eFAx8mX9WtfK57s2lviiikMVrNsM9rYtMiz
DpfkTrCp9IeEmORj06SN+62RdpGWz2L7vFDqluyPTX8Alml/19I1V3bLFrOUClCP
32KOjQMPUhiiX70Q7sGL20HDp/tFdwSe5W2TkPvHdgDUSgt5FFtknu2Qqlff1bsA
8NOBK+F3P7S1OB4H+2hc7e1PFYgC6l2//KJxqfqECLiF/POV70JEyjgt2ARI/CDO
zx0MOJewV9Yylfafd2xng5p07jsbaRblpDOGtkxy0tK6ZEkT9lNMxouyxT4Mmhc1
7B6kohz2eG50rLqYYX6kNYClBm39tNfdJQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FLorUsqQ+IvFV5A6EI32A5G0g1X4MB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADRyPEwDQYJKoZIhvcNAQELBQADggEBAJXW/7BWbZlVgPAwGdNMjwPf
Et0SjuECIUlu4vs5i59HtUQvYJBKmSbjxFmfcMDKEsznRNZM21EVsrodS6wBVwvM
jHoamssSIW1814wlDZLdwzCBS3CWDMOgrnrWbncoPjRPHUSmkP7liUU+0ZXg+GNt
p/SBSWGEdlUkXyTOnjoZ85Cp1UyFiXmlOrhZNR77am50+wEytITnAZKuAtC1vZGH
EStFGiM+nzv7rGp3nz5Kv/Q97Z6V5hjiwsRhY0MUCCOQ6tH9Fty2VK13ZVyDwo+5
i0yZPMzInjQi+w9cRmi52gwcgYXFNjZJxvRf3IXA1SE/KE+KMrY0YIpV1cRaLtI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org