Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203439393939.roa
File:                     3231362e39372e3232342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          05kr/n1XXumlxd+o5phRzwcur1RX9vldV7jwopiCNgM=
Subject key identifier:   DD:36:E8:99:B8:35:B7:D8:79:C0:58:45:D6:AF:BB:23:D3:8C:89:5C
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       493BE16B586815A3713C9FAF816784C6AA60062A
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203439393939.roa
Signing time:             Thu 24 Feb 2022 17:51:36 +0000
ROA not before:           Thu 24 Feb 2022 17:46:36 +0000
ROA not after:            Thu 23 Feb 2023 17:51:36 +0000
asID:                     49999
IP address blocks:        216.97.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:e1:6b:58:68:15:a3:71:3c:9f:af:81:67:84:c6:aa:60:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 24 17:46:36 2022 GMT
            Not After : Feb 23 17:51:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:5b:8b:ca:ad:9d:81:47:12:13:8c:f3:9a:
                    c3:c7:1c:41:aa:08:9a:49:a0:b9:d2:69:f2:11:7d:
                    82:2f:04:8f:e3:3c:00:94:b0:95:1b:a1:97:d0:78:
                    ab:c1:2f:fe:cf:9e:cb:21:c9:68:c6:ed:46:f9:46:
                    bc:96:74:6f:08:b6:40:0d:e2:7a:ed:32:4b:b6:f2:
                    c7:30:e8:09:ff:42:fc:94:ab:f1:c0:de:79:24:15:
                    2b:91:86:62:e7:9b:2f:2c:bc:5e:2a:99:40:44:dc:
                    2b:e6:de:43:94:fa:8b:80:7c:cc:c2:16:34:7b:3b:
                    47:b3:ed:7a:cb:d6:8f:0b:44:03:e3:ab:91:3a:56:
                    ca:19:04:c7:33:ef:e4:18:18:3c:56:09:fc:11:59:
                    ca:68:89:be:78:55:f5:6f:ca:a6:10:8d:24:78:41:
                    ea:80:be:1f:21:5a:dc:f3:f3:06:8e:64:fd:84:4b:
                    f6:cf:2a:96:7d:3c:9a:13:30:83:71:e6:6a:a2:41:
                    35:1b:a8:96:d9:ad:f6:cc:00:06:3b:b8:ac:6b:bd:
                    f0:85:0e:7e:a9:5c:07:5d:8b:1a:95:39:0d:09:06:
                    82:5c:ca:04:50:0e:8c:db:35:aa:1f:fb:82:f5:c9:
                    4c:aa:80:a7:e9:f7:e6:76:2c:cb:2b:5a:cb:5e:1d:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:36:E8:99:B8:35:B7:D8:79:C0:58:45:D6:AF:BB:23:D3:8C:89:5C
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:bf:8c:f8:89:22:9e:9b:18:da:2e:82:85:c0:43:08:a2:f5:
         c1:ae:90:35:08:6e:b1:c9:53:dd:24:6c:87:9c:a6:2f:d3:7a:
         74:b0:60:20:97:65:77:59:74:0e:b1:bf:fa:71:3b:10:6b:86:
         09:09:cd:33:be:2c:30:97:3c:9b:f7:08:fc:4a:a8:6a:6c:5b:
         da:3b:0a:ed:d3:8e:54:d3:e6:c1:5d:55:9e:10:68:11:8d:ec:
         17:d1:eb:4f:f2:0b:43:d2:82:0d:24:bd:6f:dc:08:38:5e:56:
         2f:3a:f9:f9:c8:19:74:59:e9:9b:5f:f1:f9:d3:7a:41:16:fd:
         96:84:24:4f:65:80:d2:97:0a:ef:3b:b0:be:6b:98:30:db:04:
         b9:f0:46:ad:31:5b:ca:be:75:84:e3:f3:47:27:f3:f4:e8:a6:
         04:38:30:77:72:bb:94:1a:0a:00:bc:a6:cf:13:a0:61:70:ad:
         86:c5:ae:b0:7a:af:88:7e:ee:a4:0a:1c:6b:1c:14:da:bc:80:
         a5:b8:1f:07:5e:82:48:d4:6b:30:24:79:5a:41:01:8b:3a:02:
         34:5d:07:cb:ad:14:71:31:54:14:b4:ab:b4:c0:87:b8:7d:53:
         16:4b:19:a3:5f:76:d0:38:0d:96:94:63:03:8c:69:07:dc:30:
         c4:11:25:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org