Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa
File:                     3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          vcHAbDbuejaQI3SA/pIbsQnvtIkiXBeKW5iBEZY+0hk=
Subject key identifier:   36:91:D6:D5:DE:F3:19:92:79:D0:13:46:80:DA:45:81:0D:01:AA:B0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       4327C6D4D24940446C0536B0D4098450D24A7303
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa
Signing time:             Thu 31 Mar 2022 16:07:08 +0000
ROA not before:           Thu 31 Mar 2022 16:02:08 +0000
ROA not after:            Thu 30 Mar 2023 16:07:08 +0000
asID:                     1239
IP address blocks:        216.227.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:c6:d4:d2:49:40:44:6c:05:36:b0:d4:09:84:50:d2:4a:73:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 31 16:02:08 2022 GMT
            Not After : Mar 30 16:07:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:ed:68:8d:f3:a6:d0:85:de:f1:d9:e6:c8:
                    8f:78:13:f2:62:37:b4:28:cf:8a:5c:d3:8f:bf:76:
                    b7:f2:d2:69:bf:2a:54:e7:1d:1d:72:6f:9a:d9:e5:
                    bc:f9:0c:5e:ba:6a:7a:4f:35:89:0e:96:43:8a:bf:
                    21:ff:12:5d:b6:60:40:12:3c:45:8b:03:f0:5f:5c:
                    15:60:37:94:63:2e:c0:5c:2d:bb:4a:63:d8:58:26:
                    cd:b1:64:fc:b0:bf:fd:23:b8:9b:a1:17:aa:f3:e2:
                    f5:3f:89:43:c0:8d:5a:83:74:89:d8:a2:5b:f1:46:
                    2f:a9:73:70:0c:ac:74:08:bf:cf:19:74:75:27:53:
                    70:2f:50:e2:c7:22:f9:ac:c6:f1:4a:91:85:29:47:
                    01:16:8c:9d:48:a4:5a:f3:84:20:56:73:72:6e:0c:
                    29:d0:5b:99:bb:8a:98:21:6c:67:fa:ad:f4:a2:49:
                    5e:f0:8c:95:7e:29:7d:1f:a2:55:62:9c:86:81:63:
                    d2:2a:ac:d9:62:59:4b:ea:22:58:65:95:1f:ae:c6:
                    e3:27:8e:c6:83:ee:cf:03:29:54:be:37:50:7a:4f:
                    f9:40:5d:47:a8:a9:0b:35:cb:45:dd:e3:18:91:20:
                    46:29:55:ed:d1:99:0c:1a:ad:44:eb:ef:67:95:da:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:D6:D5:DE:F3:19:92:79:D0:13:46:80:DA:45:81:0D:01:AA:B0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3232302e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:51:d8:8d:1a:cf:df:eb:78:c5:2a:a1:85:34:3d:32:16:
         27:a1:fe:79:8e:b3:90:1d:40:22:e9:48:c8:55:d4:c6:9b:af:
         39:08:3a:d0:f1:4d:af:07:c7:b9:b9:50:1e:6a:90:47:b8:d5:
         23:36:2f:b3:71:11:0e:bc:17:f5:12:e6:61:6b:cb:f8:3c:94:
         99:44:bd:54:e8:c5:21:47:61:53:01:63:1b:2a:0f:ce:89:38:
         6e:9b:cc:59:0a:05:88:b4:2e:8a:77:4a:25:40:d6:cb:89:fd:
         45:e4:20:2d:60:44:7a:58:ba:b0:b6:f8:80:78:51:56:ae:64:
         09:24:8d:00:38:4a:d9:ea:47:27:56:5d:75:2e:16:25:6e:90:
         d1:e4:0e:93:f0:ef:10:73:bf:aa:b6:60:49:59:54:7a:3f:77:
         e4:88:3c:01:c7:17:2b:e1:c0:a8:4f:f4:fc:d6:cd:1d:78:e4:
         f4:38:36:ce:51:aa:b4:da:05:cb:24:b4:f7:35:c8:31:d0:4a:
         5d:45:22:fe:5a:cf:62:fb:1c:fd:f9:d8:90:70:4b:50:c6:77:
         97:85:da:e5:97:17:66:24:8f:8b:da:76:93:c2:30:d3:d6:15:
         b4:6f:86:71:08:2e:41:81:81:ec:ac:ab:bd:c3:de:2a:3e:fa:
         3e:45:e4:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org