Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa
File:                     3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          o+JX9M3RAbEyPng8rBnAw2znrDRMeadhlunHpnsRng8=
Subject key identifier:   6E:10:70:D9:DD:AB:AC:6F:AC:EC:A4:D3:47:DE:2B:C0:13:39:DB:6A
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       35EFAAC3DE1B0BF90A13E6C61AC2B3CFBAB02395
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 07 Jul 2022 22:32:59 +0000
ROA not before:           Thu 07 Jul 2022 22:27:59 +0000
ROA not after:            Thu 06 Jul 2023 22:32:59 +0000
asID:                     49999
IP address blocks:        216.227.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ef:aa:c3:de:1b:0b:f9:0a:13:e6:c6:1a:c2:b3:cf:ba:b0:23:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jul  7 22:27:59 2022 GMT
            Not After : Jul  6 22:32:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:08:4f:8c:f7:a4:e7:f1:41:cb:f7:ba:2b:
                    97:14:d1:4e:39:06:b9:cf:37:a3:1f:b2:f0:a5:8c:
                    23:ac:1d:19:69:51:d7:5d:7d:ba:85:7d:f9:25:d5:
                    a4:3f:67:d3:1c:49:0e:1b:f7:75:cf:4f:47:99:60:
                    d2:60:68:61:36:43:ee:76:4a:32:cf:6b:95:6e:11:
                    7e:47:ef:a2:59:08:6b:c4:a5:cb:da:3a:31:83:80:
                    9c:43:1f:de:f9:ec:69:75:4c:00:96:ed:67:5d:47:
                    32:58:71:49:24:31:a3:b8:4b:0a:ea:88:19:c0:3f:
                    bb:88:e2:b3:27:90:0f:9a:af:a7:bd:99:25:ef:ea:
                    0e:74:36:0d:cd:43:ea:49:c0:3d:f3:19:8e:6b:34:
                    6f:bc:21:19:3b:b0:3c:1d:2b:b4:bd:16:e2:6a:21:
                    66:cb:7f:db:fa:fa:61:0e:2a:e2:5b:7e:77:1c:1c:
                    11:02:a0:08:16:6e:31:f5:4e:44:b3:35:05:19:62:
                    6f:b0:a0:33:f3:9d:51:dd:e5:3c:ba:ff:2b:b6:d7:
                    03:7f:3d:7b:c0:b6:26:c8:9e:38:d1:fa:e5:66:06:
                    7e:5d:c3:18:ee:00:30:2d:24:8b:43:ba:4e:54:6c:
                    c2:2d:03:b1:4d:bf:0f:53:a8:7d:30:03:e1:52:11:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:70:D9:DD:AB:AC:6F:AC:EC:A4:D3:47:DE:2B:C0:13:39:DB:6A
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231332e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:01:ee:d6:5c:85:3f:73:0a:d0:bc:69:cd:2a:60:69:8a:53:
         ed:a2:d9:e7:26:b6:1a:92:fd:57:ac:ee:93:c5:f8:55:4d:56:
         ec:f3:9d:bf:8a:ee:85:06:39:71:1a:e6:37:73:38:cf:79:c0:
         fd:ca:f1:91:ca:d7:49:5d:66:a4:62:d8:76:a4:a4:41:78:91:
         5c:de:85:cf:5a:2e:dd:7d:1d:de:92:17:82:1e:c6:e0:d8:f6:
         c6:40:5a:5a:46:39:b3:a6:a8:d8:d0:73:b7:0e:0c:ad:7f:b8:
         ef:c6:2c:2a:9a:78:e9:05:73:b3:e0:37:7e:f1:08:af:50:b7:
         32:c3:42:46:7a:8a:18:a4:9e:96:77:dc:f9:cb:6e:f6:1c:79:
         81:e6:b1:4a:8e:8b:0d:59:ac:32:3e:27:60:af:99:5c:b3:7e:
         00:09:b4:22:79:7a:1f:0f:88:0d:6b:74:67:6a:b0:45:b0:5b:
         6b:a5:af:04:e6:46:ee:14:37:07:06:37:c0:cc:25:bc:52:58:
         7b:26:fb:d6:00:85:10:6b:55:57:bb:87:38:01:ec:4e:00:fe:
         fc:03:59:fe:6f:22:5f:a6:47:34:7d:70:b8:5c:35:0e:cc:d5:
         f2:b4:e8:b8:47:1f:18:6b:50:68:da:11:3d:1e:5d:02:90:29:
         54:23:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org