Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa
File:                     38392e33352e39322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          7hi9H5tQAOZDhWz1mW102KMd5GLfYN4kQWdvM3Z+c30=
Subject key identifier:   7E:97:2B:9A:DB:CC:19:51:87:5F:C2:1E:7D:7D:4B:44:05:0B:21:F1
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       319EBD28F2A4F3D8096435A08DBF9ADCC50B6143
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa
Signing time:             Fri 06 May 2022 04:53:05 +0000
ROA not before:           Fri 06 May 2022 04:48:05 +0000
ROA not after:            Fri 05 May 2023 04:53:05 +0000
asID:                     7018
IP address blocks:        89.35.92.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9e:bd:28:f2:a4:f3:d8:09:64:35:a0:8d:bf:9a:dc:c5:0b:61:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May  6 04:48:05 2022 GMT
            Not After : May  5 04:53:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:43:66:c3:b5:d3:91:76:63:9b:60:e4:7d:23:
                    7e:68:75:c5:b1:d9:66:8e:9e:1c:fc:b2:7d:20:df:
                    5b:d7:fa:c7:15:a0:91:83:35:b0:45:f6:2e:36:a7:
                    1d:82:ff:7c:e1:91:04:4a:05:f8:00:cf:8a:fc:7f:
                    cf:da:cf:89:7c:c4:6e:84:93:d7:40:70:4f:6e:94:
                    6c:9a:c8:61:01:8d:ad:61:75:75:5f:6d:eb:3c:98:
                    59:8f:98:57:2d:ec:e4:af:15:98:69:9a:b8:29:53:
                    eb:75:c7:4a:cf:1a:32:95:21:9e:24:57:87:49:ec:
                    42:e5:c0:4a:f5:69:4b:c1:1b:3e:75:9c:8d:81:99:
                    b2:12:d4:f5:bf:f3:a8:33:80:24:c7:2a:6a:10:47:
                    a4:de:09:72:7e:df:d8:e0:1c:9b:7a:f3:ee:6a:f2:
                    79:96:79:fd:33:99:54:ca:2c:55:e7:18:db:14:ff:
                    81:f0:e8:38:e7:db:d2:b4:44:56:fe:b0:e2:cf:6e:
                    35:5e:e6:17:70:26:c9:f9:ec:7d:48:ad:98:0f:15:
                    1c:68:9e:3d:11:2d:d3:40:65:5f:1a:a8:5f:cf:68:
                    7f:d2:07:1e:f6:e0:6e:63:b8:25:f9:e2:dd:3d:31:
                    b9:78:72:ce:2f:d3:77:4c:b4:c2:21:c7:62:a7:64:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:2B:9A:DB:CC:19:51:87:5F:C2:1E:7D:7D:4B:44:05:0B:21:F1
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:8d:57:9c:37:c7:48:73:82:73:04:50:9c:4a:86:10:3c:21:
         2b:96:97:f5:8e:c9:0f:5e:a2:66:69:90:8d:61:60:1e:d0:7a:
         c1:cf:21:6f:84:a1:00:35:b8:d5:33:77:1f:aa:52:00:8d:83:
         ae:47:c5:74:18:f0:ef:f9:c3:16:14:6c:53:df:97:0f:b9:f9:
         e5:12:e4:0d:47:42:62:73:cd:07:3d:01:4a:06:a4:c4:30:07:
         ff:23:f6:17:6f:e2:87:43:3d:a7:31:f5:10:7d:ad:fb:b8:8a:
         68:81:b1:8a:81:f8:ee:fc:fa:3b:ff:84:5f:06:fb:a7:7d:11:
         dd:a3:1e:07:9e:8f:a9:9c:dc:30:88:eb:ab:c3:31:b0:4f:75:
         a3:16:49:ae:17:a7:d6:83:97:1a:52:39:0c:b4:82:7b:82:2a:
         30:4d:0e:23:1a:f0:26:6d:ee:44:9f:29:91:07:ce:66:c3:e6:
         f2:3e:13:7d:1c:9c:af:d0:a2:46:62:9e:04:9b:d8:ae:24:41:
         22:03:04:76:9e:1a:fa:30:1c:9e:45:5b:92:f7:92:5e:f7:6d:
         f2:6d:b8:0f:b6:29:46:36:32:d1:54:1f:99:33:6c:d7:d1:cc:
         c0:2e:a4:57:7b:91:e8:4a:db:9f:4b:25:ec:45:d9:bd:92:cd:
         24:97:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org