Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32342d3234203d3e203239383032.roa
File:                     36372e3231302e39362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          SFoH1nT1c38dBji+7iczgz/AuGOQHp3l2ss4Dtl4zJk=
Subject key identifier:   61:E4:3C:A7:35:02:04:22:5C:5B:3B:83:46:7B:CB:97:33:EA:D8:89
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       1DC4F883E1D1A7C4D21FDFB0CFDB8E373DDCBC33
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32342d3234203d3e203239383032.roa
Signing time:             Fri 24 Jun 2022 23:55:08 +0000
ROA not before:           Fri 24 Jun 2022 23:50:08 +0000
ROA not after:            Fri 23 Jun 2023 23:55:08 +0000
asID:                     29802
IP address blocks:        67.210.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c4:f8:83:e1:d1:a7:c4:d2:1f:df:b0:cf:db:8e:37:3d:dc:bc:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 24 23:50:08 2022 GMT
            Not After : Jun 23 23:55:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:dc:c7:7d:12:22:26:b0:8e:ac:2d:bf:14:
                    5e:f8:a0:41:b4:ff:d5:45:ad:36:98:9a:d6:7b:2e:
                    66:ee:dd:86:67:4d:0d:5d:3f:ea:9b:e6:59:f1:c7:
                    3d:3e:fe:52:4c:3d:fa:cb:37:aa:d4:59:d5:8e:51:
                    d4:1e:8b:73:48:24:52:ff:c8:8c:f6:21:4e:17:34:
                    09:e5:ef:fd:02:7c:2d:5c:80:d8:35:ee:d6:f2:8f:
                    26:63:26:82:f3:24:59:78:90:23:74:60:f1:38:cf:
                    5b:9e:73:e5:9c:59:04:09:a6:00:1f:88:de:d4:3a:
                    3a:bc:49:87:5b:e5:32:b4:12:a6:45:0a:64:7e:41:
                    95:3c:fd:f7:68:e0:ae:99:11:d3:cc:5c:fd:53:23:
                    85:26:ae:31:ec:c4:28:e6:15:b7:70:cf:71:f1:cd:
                    9a:7b:61:5a:81:8b:36:d2:62:37:5b:2c:98:5e:fb:
                    28:a7:cf:91:e0:30:bd:e2:35:ff:41:e6:ac:b2:f2:
                    e4:08:f1:62:62:24:11:9d:21:9d:6c:ce:83:7d:de:
                    f1:9f:a2:8e:48:ab:8e:69:8a:cb:d2:88:4d:50:04:
                    d3:d2:8b:8d:e0:b6:16:b8:fc:6d:1c:89:46:f2:a6:
                    6c:79:56:d8:01:b1:5f:e4:15:77:1d:89:e0:0d:4c:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E4:3C:A7:35:02:04:22:5C:5B:3B:83:46:7B:CB:97:33:EA:D8:89
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39362e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f8:3c:56:2b:e4:b5:af:36:c6:e3:14:17:94:4a:79:39:ef:
         ac:33:d5:11:5f:31:b3:9e:e8:6d:66:5f:11:c6:d8:11:a6:f1:
         3e:c8:df:ab:10:36:76:37:15:1a:96:e5:cd:d3:51:b4:0e:52:
         72:19:e0:1e:63:39:e3:fe:c6:6b:94:40:d4:29:30:93:d5:dc:
         94:18:3c:cf:da:9f:33:46:bc:85:7f:46:12:a4:36:d9:7b:cc:
         c1:56:71:dc:63:5d:5a:d5:88:6e:45:eb:7d:81:88:80:c2:ce:
         c8:b6:d2:2a:d8:15:1a:b1:af:aa:12:d9:83:a2:ab:2e:64:de:
         c2:d7:6e:62:07:36:00:a7:13:a5:45:3b:d1:59:99:49:22:6c:
         23:45:c4:76:0b:db:57:8b:95:60:eb:65:71:bd:d9:ea:98:d6:
         b1:e4:a2:93:fe:8d:f0:c6:a8:83:3c:a0:ec:2a:df:c3:24:27:
         80:f4:a0:6a:72:9b:d5:fc:c5:c0:3e:c2:09:d6:40:0d:27:e7:
         a0:d8:f0:41:ef:8c:0c:56:aa:80:f7:f8:f9:da:50:c1:dd:ac:
         f1:e3:15:be:e6:8e:e1:35:cf:6b:8e:9d:da:b4:2c:de:bc:48:
         88:82:f0:75:d7:c5:0f:01:fd:21:4f:16:0d:15:54:66:de:50:
         4e:c1:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org