Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa
File:                     38392e33352e39322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TZf6OwPvaFL/nPhy+/KOVU54obttmvMGdovJ3G3iLfU=
Subject key identifier:   3A:86:10:35:6E:6F:5B:0C:43:8C:BD:9B:E5:75:50:7A:1B:33:E1:D1
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       3679D52AEC2E71775106D0CDAC14CA6018478ADB
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 12:59:12 +0000
ROA not before:           Mon 25 Oct 2021 12:54:12 +0000
ROA not after:            Mon 24 Oct 2022 12:59:12 +0000
asID:                     61317
IP address blocks:        89.35.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:d5:2a:ec:2e:71:77:51:06:d0:cd:ac:14:ca:60:18:47:8a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:54:12 2021 GMT
            Not After : Oct 24 12:59:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:06:a5:04:69:42:eb:9c:d5:14:dd:ae:56:
                    ff:6a:52:da:92:25:90:e0:20:2d:5d:70:94:1a:01:
                    80:2b:ae:bb:b7:cc:d3:bc:c5:15:46:4a:db:03:9c:
                    9b:03:d8:03:02:b8:22:65:b6:67:fd:ad:83:84:41:
                    f3:b4:9f:21:0a:28:95:c4:20:8b:bf:cb:fd:8d:66:
                    a8:cd:c5:2e:69:7a:c3:d5:06:60:ed:5a:d6:b2:97:
                    1c:b9:f5:a5:4f:52:6c:94:73:3c:13:22:99:a9:e2:
                    df:da:6d:34:f2:34:c3:6b:00:b0:67:fc:8f:b6:3d:
                    3c:b0:c3:82:38:e4:e7:9a:a9:f7:91:16:cc:2b:fc:
                    88:84:18:41:b2:57:2a:1f:0c:2a:9e:99:5f:d1:c4:
                    cf:45:98:98:70:2e:86:7b:ab:d5:81:aa:41:5f:fe:
                    f8:cf:33:14:a9:ec:3d:b1:47:a7:07:b2:19:65:33:
                    5d:f3:06:2e:c8:f8:b5:68:cb:28:92:ca:cd:f9:b6:
                    75:25:85:ea:30:01:c4:57:f4:e0:bb:a9:7c:6d:6c:
                    aa:48:53:5d:55:9c:4e:27:b0:41:c5:0d:38:e6:0b:
                    94:71:42:94:88:4a:39:dd:f0:bc:57:1c:35:ee:b0:
                    a8:23:68:e2:d3:60:da:79:54:dd:75:cb:48:53:13:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:10:35:6E:6F:5B:0C:43:8C:BD:9B:E5:75:50:7A:1B:33:E1:D1
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:10:5f:d9:58:33:bf:8a:b2:cb:4f:9d:68:39:b5:1d:b8:b2:
         9d:d3:1f:07:2e:59:2e:98:62:bb:48:c4:0b:32:58:b5:ec:44:
         25:c2:5e:83:a8:f7:5a:59:2c:57:e2:57:a4:32:76:5b:0b:39:
         eb:bb:92:ed:af:b3:43:51:4d:e3:43:a1:5e:93:9c:6e:68:2b:
         74:91:1e:b0:b8:1c:74:8a:da:6c:5c:9c:68:f4:2a:ee:55:f2:
         5d:be:83:ab:0f:76:be:48:d1:70:b8:c6:7e:06:45:aa:94:ed:
         a6:33:d0:c7:67:47:bc:fa:3d:f2:12:23:20:3f:d6:44:0c:32:
         0c:92:71:1a:24:6f:34:e7:45:79:f6:f0:39:54:a5:01:39:ee:
         c4:fc:e7:31:c4:a2:aa:1f:22:29:8f:bf:49:2e:64:01:7f:79:
         ee:fc:1e:e5:52:dc:e3:92:0f:df:f7:9e:9c:23:73:00:c6:d1:
         17:8d:6b:7b:d9:47:5a:46:0f:17:b0:47:85:f7:af:ca:d3:7f:
         00:98:2f:7c:15:0f:bb:17:f7:5f:fe:cb:94:94:db:5f:69:b7:
         88:2e:7d:34:5e:cd:20:51:8b:b4:c1:38:16:d6:82:97:4b:7e:
         a7:81:f0:24:5f:03:5a:51:52:a1:b7:c0:58:16:86:a0:f3:07:
         42:c9:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org