Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
File:                     3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa (raw, json)
Hash identifier:          jxV9qypvA2hR19MgtRRzRkZR5+GMb745IgUvahWmQQE=
Subject key identifier:   9A:BA:B4:9A:E6:97:68:C7:F9:E1:C7:5D:4C:B2:9F:C8:15:6E:AF:CE
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       08E384C523CE9BECA17F1902BAA17FA748D01196
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa
Signing time:             Sat 12 Mar 2022 08:15:43 +0000
ROA not before:           Sat 12 Mar 2022 08:10:43 +0000
ROA not after:            Sat 11 Mar 2023 08:15:43 +0000
asID:                     210654
IP address blocks:        216.97.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e3:84:c5:23:ce:9b:ec:a1:7f:19:02:ba:a1:7f:a7:48:d0:11:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 12 08:10:43 2022 GMT
            Not After : Mar 11 08:15:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:54:5e:66:6e:bb:03:27:70:fd:f7:de:d4:
                    a5:4b:32:ce:b0:68:58:1e:d1:53:f9:f3:15:d4:8b:
                    76:f5:f8:04:72:45:a5:64:23:b1:df:1b:d4:74:1e:
                    66:7f:c4:7b:14:c5:5c:ad:c9:34:e5:73:61:5f:c9:
                    f7:c0:1a:cf:e0:d0:5e:a0:e8:28:17:44:d5:56:34:
                    b2:15:01:e2:ff:0c:30:f4:66:6e:68:14:b3:7e:dc:
                    cb:4b:ba:ad:af:fc:f1:8b:d7:e6:7f:d1:2e:73:34:
                    ef:d6:4c:31:84:e1:f9:40:18:06:45:09:aa:f5:ac:
                    44:b0:48:26:3c:9e:61:f8:97:b5:c4:b8:41:90:55:
                    dd:bf:9e:b5:c9:14:7e:90:3c:06:b1:b8:39:27:61:
                    b5:33:3c:5e:6b:44:a1:10:9e:3c:96:00:1b:26:41:
                    0c:63:fe:82:68:96:a2:99:7d:47:ef:f4:b8:14:c5:
                    6a:77:af:2c:a6:55:75:75:35:b8:88:71:77:78:41:
                    b3:bc:5b:f8:74:50:a2:2d:1c:41:39:11:c9:e1:4a:
                    4f:b7:88:22:1d:e7:a8:84:f2:88:60:8c:d4:e1:07:
                    92:dc:dc:94:41:8c:37:01:d9:8f:fb:70:d3:3a:6d:
                    1e:37:41:9a:5c:5f:9e:15:06:33:83:6e:5c:41:e7:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:B4:9A:E6:97:68:C7:F9:E1:C7:5D:4C:B2:9F:C8:15:6E:AF:CE
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232382e302f32342d3234203d3e20323130363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:2a:01:ef:c6:31:01:e5:70:e5:95:3a:95:41:5f:3d:eb:f5:
         2f:47:fd:07:23:79:4c:6a:c6:26:9f:52:f4:55:16:23:ed:ca:
         8b:66:f9:72:86:72:17:b5:9d:66:00:d5:aa:d8:40:d4:9b:79:
         99:1d:ed:73:91:2a:15:56:57:2d:f5:e1:e1:a1:b2:76:63:2e:
         5a:59:d0:e4:89:df:48:51:de:08:4c:4f:42:47:c9:bf:c1:8c:
         24:5e:f5:b0:78:da:27:d5:73:3f:e7:80:ec:de:c6:5d:af:48:
         37:b6:0c:d4:ed:fb:4e:bb:4f:59:69:c4:0c:02:74:9b:ac:15:
         6e:e5:90:7e:ed:0d:e8:df:d9:77:cc:24:00:f4:66:cd:5a:1a:
         a3:35:44:53:3f:51:f7:08:1d:59:dd:92:cc:3d:f5:c1:7b:55:
         dc:e0:94:2e:ad:fb:69:c0:7c:74:ee:b7:c2:1d:ba:92:08:2a:
         a2:9c:40:e9:f8:ce:a9:7d:a6:47:69:ba:46:91:7b:4e:a2:9e:
         8a:c2:e7:9c:ae:17:71:ee:9b:07:3f:e0:07:d1:b4:fc:c8:56:
         02:5e:42:fe:8d:18:04:03:8d:4e:04:a9:5b:6d:42:20:be:21:
         9f:be:5c:19:58:0c:63:84:76:0e:2f:5f:25:7b:da:e4:60:8f:
         2a:aa:e6:e0
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUCOOExSPOm+yhfxkCuqF/p0jQEZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAzMTIwODEwNDNaFw0yMzAzMTEwODE1NDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RCMTU0NUU2NjZFQkIwMzI3
NzBGREY3REVENEE1NEIzMkNFQjA2ODU4MUVEMTUzRjlGMzE1RDQ4Qjc2RjVGODA0
NzI0NUE1NjQyM0IxREYxQkQ0NzQxRTY2N0ZDNDdCMTRDNTVDQURDOTM0RTU3MzYx
NUZDOUY3QzAxQUNGRTBEMDVFQTBFODI4MTc0NEQ1NTYzNEIyMTUwMUUyRkYwQzMw
RjQ2NjZFNjgxNEIzN0VEQ0NCNEJCQUFEQUZGQ0YxOEJEN0U2N0ZEMTJFNzMzNEVG
RDY0QzMxODRFMUY5NDAxODA2NDUwOUFBRjVBQzQ0QjA0ODI2M0M5RTYxRjg5N0I1
QzRCODQxOTA1NUREQkY5RUI1QzkxNDdFOTAzQzA2QjFCODM5Mjc2MUI1MzMzQzVF
NkI0NEExMTA5RTNDOTYwMDFCMjY0MTBDNjNGRTgyNjg5NkEyOTk3RDQ3RUZGNEI4
MTRDNTZBNzdBRjJDQTY1NTc1NzUzNUI4ODg3MTc3Nzg0MUIzQkM1QkY4NzQ1MEEy
MkQxQzQxMzkxMUM5RTE0QTRGQjc4ODIyMURFN0E4ODRGMjg4NjA4Q0Q0RTEwNzky
RENEQzk0NDE4QzM3MDFEOThGRkI3MEQzM0E2RDFFMzc0MTlBNUM1RjlFMTUwNjMz
ODM2RTVDNDFFNzk4OTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzbFUXmZuuwMncP333tSlSzLOsGhYHtFT+fMV1It29fgEckWlZCOx
3xvUdB5mf8R7FMVcrck05XNhX8n3wBrP4NBeoOgoF0TVVjSyFQHi/www9GZuaBSz
ftzLS7qtr/zxi9fmf9EuczTv1kwxhOH5QBgGRQmq9axEsEgmPJ5h+Je1xLhBkFXd
v561yRR+kDwGsbg5J2G1Mzxea0ShEJ48lgAbJkEMY/6CaJaimX1H7/S4FMVqd68s
plV1dTW4iHF3eEGzvFv4dFCiLRxBORHJ4UpPt4giHeeohPKIYIzU4QeS3NyUQYw3
AdmP+3DTOm0eN0GaXF+eFQYzg25cQeeYkQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FJq6tJrml2jH+eHHXUyyn8gVbq/OMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMxMzYyZTM5
MzcyZTMyMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDM2MzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANhh5DANBgkqhkiG9w0BAQsFAAOCAQEA0yoB78YxAeVw5ZU6lUFf
Pev1L0f9ByN5TGrGJp9S9FUWI+3Ki2b5coZyF7WdZgDVqthA1Jt5mR3tc5EqFVZX
LfXh4aGydmMuWlnQ5InfSFHeCExPQkfJv8GMJF71sHjaJ9VzP+eA7N7GXa9IN7YM
1O37TrtPWWnEDAJ0m6wVbuWQfu0N6N/Zd8wkAPRmzVoaozVEUz9R9wgdWd2SzD31
wXtV3OCULq37acB8dO63wh26kggqopxA6fjOqX2mR2m6RpF7TqKeisLnnK4Xce6b
Bz/gB9G0/MhWAl5C/o0YBAONTgSpW21CIL4hn75cGVgMY4R2Di9fJXva5GCPKqrm
4A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org