Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234362e302f32342d3234203d3e20323037333236.roa
File:                     3230392e3230302e3234362e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          FMDkZHSeG/rAZ7gRFrPmSKrqnaPwHWF66s2HuNO+j4s=
Subject key identifier:   CC:49:53:35:F8:05:8E:F1:E8:D9:43:28:7C:55:10:D7:D8:E6:F1:9C
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       2F58C5F13C14C160B125186FD068AC2033C4203B
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234362e302f32342d3234203d3e20323037333236.roa
Signing time:             Mon 11 Apr 2022 18:27:08 +0000
ROA not before:           Mon 11 Apr 2022 18:22:08 +0000
ROA not after:            Mon 10 Apr 2023 18:27:08 +0000
asID:                     207326
IP address blocks:        209.200.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:58:c5:f1:3c:14:c1:60:b1:25:18:6f:d0:68:ac:20:33:c4:20:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr 11 18:22:08 2022 GMT
            Not After : Apr 10 18:27:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:bc:db:de:82:ff:95:e6:4d:b3:ed:cd:c4:
                    73:37:21:c4:aa:7d:df:ef:ef:35:8b:af:b9:0b:56:
                    80:5c:bc:6c:c7:1c:27:d9:15:1e:06:50:fc:b7:29:
                    4e:63:1e:eb:c8:af:f5:6c:8c:82:b6:d9:f7:98:87:
                    80:3f:43:4d:23:b0:72:43:22:1f:be:69:0d:ba:93:
                    63:e4:32:a1:01:e0:c2:44:a8:ab:06:92:6b:de:6b:
                    30:02:36:68:4a:74:c0:e7:3c:5c:40:54:5f:e7:bb:
                    76:f0:7d:7a:95:d6:5f:ad:1f:6d:c6:f6:ec:33:82:
                    4b:21:2c:33:80:d4:9e:e1:59:b7:40:22:e9:a2:5c:
                    3e:17:42:94:b7:89:ec:5c:6d:57:69:42:cb:61:87:
                    17:1b:5a:e3:43:91:b0:b3:6a:9e:49:0b:e4:5f:4d:
                    c6:c6:5d:b9:39:f3:7a:8d:00:70:96:39:eb:71:1f:
                    00:fc:17:fe:82:0e:99:e5:ef:0d:66:d5:6f:b1:f0:
                    a9:3b:16:ba:e5:7b:f2:26:35:f3:0f:35:6e:bf:19:
                    67:74:e4:49:94:f0:36:46:82:95:4a:21:48:f1:89:
                    6e:00:0e:90:79:ad:77:a8:2c:88:cc:b2:ee:64:51:
                    b8:0e:af:92:52:d4:8a:37:b7:27:e6:82:4d:47:2a:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:49:53:35:F8:05:8E:F1:E8:D9:43:28:7C:55:10:D7:D8:E6:F1:9C
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234362e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:22:23:7e:b8:fc:5a:db:e8:27:a0:40:34:c9:92:36:dd:
         92:ac:fe:b3:5b:cc:18:4b:87:b4:1f:75:a5:d5:53:41:f7:2d:
         76:d0:e7:d9:ef:48:94:43:5d:fc:c1:a9:68:ec:f6:ea:a1:0a:
         30:ee:4d:33:a3:85:f8:27:77:13:c9:44:25:7b:3f:97:7e:3c:
         49:1d:99:4a:95:de:72:de:40:aa:cf:58:37:d4:54:93:e8:55:
         e3:4a:18:0c:3f:7e:fe:3e:ff:96:a4:85:91:a7:fb:eb:41:b0:
         be:11:df:fa:fe:0d:ed:b7:18:26:4a:21:19:e1:98:e3:14:46:
         50:8e:c2:a2:07:d4:b4:00:b9:6a:9a:da:70:c4:a7:f6:16:0e:
         eb:44:f3:a0:e3:d6:1c:17:a9:ea:4e:1d:2c:b9:18:7f:ab:04:
         53:59:31:41:37:e2:78:4d:ca:fe:59:3a:02:ae:00:b6:6d:27:
         7f:0f:5e:07:88:85:2c:8b:e7:ba:45:d2:18:d0:fb:cb:d2:6e:
         a1:6f:ae:18:43:90:75:53:12:5f:31:76:6c:8e:65:8c:ca:fb:
         a4:c9:b3:61:4a:f9:a8:a4:32:6a:d5:e3:16:f2:b1:3f:82:0a:
         ae:17:d3:3a:cf:6b:d3:21:9b:69:4e:ac:1a:dd:34:ba:51:3b:
         d6:11:32:71
-----BEGIN CERTIFICATE-----
MIIHTzCCBjegAwIBAgIUL1jF8TwUwWCxJRhv0GisIDPEIDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA0MTExODIyMDhaFw0yMzA0MTAxODI3MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFEQkJDREJERTgyRkY5NUU2
NERCM0VEQ0RDNDczMzcyMUM0QUE3RERGRUZFRjM1OEJBRkI5MEI1NjgwNUNCQzZD
QzcxQzI3RDkxNTFFMDY1MEZDQjcyOTRFNjMxRUVCQzhBRkY1NkM4QzgyQjZEOUY3
OTg4NzgwM0Y0MzREMjNCMDcyNDMyMjFGQkU2OTBEQkE5MzYzRTQzMkExMDFFMEMy
NDRBOEFCMDY5MjZCREU2QjMwMDIzNjY4NEE3NEMwRTczQzVDNDA1NDVGRTdCQjc2
RjA3RDdBOTVENjVGQUQxRjZEQzZGNkVDMzM4MjRCMjEyQzMzODBENDlFRTE1OUI3
NDAyMkU5QTI1QzNFMTc0Mjk0Qjc4OUVDNUM2RDU3Njk0MkNCNjE4NzE3MUI1QUUz
NDM5MUIwQjM2QTlFNDkwQkU0NUY0REM2QzY1REI5MzlGMzdBOEQwMDcwOTYzOUVC
NzExRjAwRkMxN0ZFODIwRTk5RTVFRjBENjZENTZGQjFGMEE5M0IxNkJBRTU3QkYy
MjYzNUYzMEYzNTZFQkYxOTY3NzRFNDQ5OTRGMDM2NDY4Mjk1NEEyMTQ4RjE4OTZF
MDAwRTkwNzlBRDc3QTgyQzg4Q0NCMkVFNjQ1MUI4MEVBRjkyNTJENDhBMzdCNzI3
RTY4MjRENDcyQTM0MjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwdu8296C/5XmTbPtzcRzNyHEqn3f7+81i6+5C1aAXLxsxxwn2RUe
BlD8tylOYx7ryK/1bIyCttn3mIeAP0NNI7ByQyIfvmkNupNj5DKhAeDCRKirBpJr
3mswAjZoSnTA5zxcQFRf57t28H16ldZfrR9txvbsM4JLISwzgNSe4Vm3QCLpolw+
F0KUt4nsXG1XaULLYYcXG1rjQ5Gws2qeSQvkX03Gxl25OfN6jQBwljnrcR8A/Bf+
gg6Z5e8NZtVvsfCpOxa65XvyJjXzDzVuvxlndORJlPA2RoKVSiFI8YluAA6Qea13
qCyIzLLuZFG4Dq+SUtSKN7cn5oJNRyo0JwIDAQABo4ICXTCCAlkwHQYDVR0OBBYE
FMxJUzX4BY7x6NlDKHxVENfY5vGcMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUG
CCsGAQUFBzALhoGIcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzMzMjM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQA0cj2MA0GCSqGSIb3DQEBCwUAA4IBAQBODCIjfrj8WtvoJ6BA
NMmSNt2SrP6zW8wYS4e0H3Wl1VNB9y120OfZ70iUQ138walo7PbqoQow7k0zo4X4
J3cTyUQlez+XfjxJHZlKld5y3kCqz1g31FST6FXjShgMP37+Pv+WpIWRp/vrQbC+
Ed/6/g3ttxgmSiEZ4ZjjFEZQjsKiB9S0ALlqmtpwxKf2Fg7rRPOg49YcF6nqTh0s
uRh/qwRTWTFBN+J4Tcr+WToCrgC2bSd/D14HiIUsi+e6RdIY0PvL0m6hb64YQ5B1
UxJfMXZsjmWMyvukybNhSvmopDJq1eMW8rE/ggquF9M6z2vTIZtpTqwa3TS6UTvW
ETJx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org