Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
File:                     36372e3231302e39362e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          ceZf67rK/jtLZZQudoeiD+qWzNYbd3nqWCl8HZ55C1Q=
Subject key identifier:   48:26:22:5D:60:79:C2:F9:56:67:53:7A:C0:91:90:53:D2:80:81:6E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       20FE19829CD6CCDEAA85F3F4466E604CD7B66494
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa
Signing time:             Tue 12 Apr 2022 19:40:42 +0000
ROA not before:           Tue 12 Apr 2022 19:35:42 +0000
ROA not after:            Tue 11 Apr 2023 19:40:42 +0000
asID:                     49999
IP address blocks:        67.210.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fe:19:82:9c:d6:cc:de:aa:85:f3:f4:46:6e:60:4c:d7:b6:64:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr 12 19:35:42 2022 GMT
            Not After : Apr 11 19:40:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:d0:3e:a5:36:08:1d:b3:49:68:9d:78:16:
                    1a:c0:b1:76:45:c0:66:58:61:6c:98:8b:dc:cc:64:
                    0c:7b:a2:90:e0:47:bd:68:b7:53:b8:b6:59:90:9a:
                    23:2a:c3:88:5c:6c:21:98:30:c6:46:87:23:a3:44:
                    b9:2f:1c:02:dd:55:55:b2:8b:12:1d:4f:48:79:0d:
                    a9:b9:ba:94:a7:50:9b:51:30:ef:81:60:02:50:25:
                    4f:d3:0f:e2:12:0b:35:e3:6d:4c:72:44:99:44:e7:
                    91:36:c6:a1:fa:0f:aa:69:93:a7:74:47:68:ea:2a:
                    06:44:18:dc:87:6d:d8:d1:06:18:e4:d5:7c:53:52:
                    82:75:10:2d:53:6d:87:4c:02:93:4a:48:f7:12:3c:
                    1f:ca:67:c2:b6:aa:86:b4:72:8d:b3:c5:d9:df:9f:
                    aa:75:f4:d2:b7:21:8e:4e:51:61:ff:c9:4b:98:8c:
                    86:50:80:23:4e:4e:96:c1:cb:d9:02:8f:70:2c:1d:
                    1f:92:68:c2:cd:85:ae:ba:16:be:f3:fd:22:27:2f:
                    91:56:78:25:a6:9b:7c:c4:4a:9f:6f:d0:28:70:98:
                    ab:72:b2:a2:ac:86:05:bf:94:97:a0:6c:e1:f8:27:
                    19:da:de:e2:05:5f:36:b9:ec:9b:38:5e:d9:16:5e:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:22:5D:60:79:C2:F9:56:67:53:7A:C0:91:90:53:D2:80:81:6E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:7a:63:b5:f6:4f:95:54:19:69:19:31:b5:a2:68:16:7f:
         3d:2d:6b:7e:f5:7d:3a:4f:df:9f:f4:71:22:47:1c:39:ce:42:
         5a:5a:23:af:07:a5:ff:ad:3b:89:82:81:97:0e:b8:89:dc:93:
         34:17:18:93:8f:0c:02:0e:d5:9e:b6:a0:f0:ad:f0:e3:9c:ce:
         f5:e0:0d:81:85:f5:fb:dd:22:05:5f:e0:bb:ad:ca:93:79:a4:
         45:c0:19:e4:79:68:da:74:94:31:4c:d2:1c:03:1f:61:a7:56:
         7d:09:bb:a1:f4:fb:c5:84:33:75:85:3c:73:f4:e4:ca:ec:04:
         ed:27:ec:0f:b6:c8:49:78:c2:e8:2c:15:cf:75:45:5c:0f:aa:
         d9:f8:bb:0f:f4:46:88:f5:88:4a:8f:51:d9:80:ff:6f:c4:22:
         b8:33:f2:8a:86:6f:54:a9:31:15:e0:8b:8e:e6:c0:3a:e1:45:
         07:f8:1a:ab:82:42:98:f6:51:86:da:00:9c:00:71:82:77:54:
         be:49:5a:d1:76:00:b9:75:7b:63:93:68:43:c7:6c:f6:95:a5:
         0d:0b:eb:e0:fe:a2:db:6b:9a:49:e0:09:d2:86:be:4f:50:2d:
         c4:72:bd:27:c5:7d:57:af:07:de:9f:58:ed:fb:bf:34:7e:67:
         ec:73:a1:2b
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUIP4ZgpzWzN6qhfP0Rm5gTNe2ZJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA0MTIxOTM1NDJaFw0yMzA0MTExOTQwNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFGRkQwM0VBNTM2MDgxREIz
NDk2ODlENzgxNjFBQzBCMTc2NDVDMDY2NTg2MTZDOTg4QkRDQ0M2NDBDN0JBMjkw
RTA0N0JENjhCNzUzQjhCNjU5OTA5QTIzMkFDMzg4NUM2QzIxOTgzMEM2NDY4NzIz
QTM0NEI5MkYxQzAyREQ1NTU1QjI4QjEyMUQ0RjQ4NzkwREE5QjlCQTk0QTc1MDlC
NTEzMEVGODE2MDAyNTAyNTRGRDMwRkUyMTIwQjM1RTM2RDRDNzI0NDk5NDRFNzkx
MzZDNkExRkEwRkFBNjk5M0E3NzQ0NzY4RUEyQTA2NDQxOERDODc2REQ4RDEwNjE4
RTRENTdDNTM1MjgyNzUxMDJENTM2RDg3NEMwMjkzNEE0OEY3MTIzQzFGQ0E2N0My
QjZBQTg2QjQ3MjhEQjNDNUQ5REY5RkFBNzVGNEQyQjcyMThFNEU1MTYxRkZDOTRC
OTg4Qzg2NTA4MDIzNEU0RTk2QzFDQkQ5MDI4RjcwMkMxRDFGOTI2OEMyQ0Q4NUFF
QkExNkJFRjNGRDIyMjcyRjkxNTY3ODI1QTY5QjdDQzQ0QTlGNkZEMDI4NzA5OEFC
NzJCMkEyQUM4NjA1QkY5NDk3QTA2Q0UxRjgyNzE5REFERUUyMDU1RjM2QjlFQzlC
Mzg1RUQ5MTY1RTlGRjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuv/QPqU2CB2zSWideBYawLF2RcBmWGFsmIvczGQMe6KQ4Ee9aLdT
uLZZkJojKsOIXGwhmDDGRocjo0S5LxwC3VVVsosSHU9IeQ2pubqUp1CbUTDvgWAC
UCVP0w/iEgs1421MckSZROeRNsah+g+qaZOndEdo6ioGRBjch23Y0QYY5NV8U1KC
dRAtU22HTAKTSkj3EjwfymfCtqqGtHKNs8XZ35+qdfTStyGOTlFh/8lLmIyGUIAj
Tk6WwcvZAo9wLB0fkmjCzYWuuha+8/0iJy+RVnglppt8xEqfb9AocJircrKirIYF
v5SXoGzh+CcZ2t7iBV82ueybOF7ZFl6f9wIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FEgmIl1gecL5VmdTesCRkFPSgIFuMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNjM3MmUzMjMx
MzAyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM5MzkzOTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCQ9JgMA0GCSqGSIb3DQEBCwUAA4IBAQDCF3pjtfZPlVQZaRkxtaJoFn89
LWt+9X06T9+f9HEiRxw5zkJaWiOvB6X/rTuJgoGXDriJ3JM0FxiTjwwCDtWetqDw
rfDjnM714A2BhfX73SIFX+C7rcqTeaRFwBnkeWjadJQxTNIcAx9hp1Z9Cbuh9PvF
hDN1hTxz9OTK7ATtJ+wPtshJeMLoLBXPdUVcD6rZ+LsP9EaI9YhKj1HZgP9vxCK4
M/KKhm9UqTEV4IuO5sA64UUH+BqrgkKY9lGG2gCcAHGCd1S+SVrRdgC5dXtjk2hD
x2z2laUNC+vg/qLba5pJ4AnShr5PUC3Ecr0nxX1Xrwfen1jt+780fmfsc6Er
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org