Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33392e302f32342d3234203d3e203430363736.roa
File:                     352e34352e33392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          PpfJEORBO+GG7xMqXcg950OLJ7K45umSsWfBxU9ci1o=
Subject key identifier:   84:E9:F5:55:46:65:70:6C:76:91:7B:7D:5C:90:A7:7F:EC:DB:66:54
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       6E32020E8BD05792FDE2BBA279C5192D48B723EB
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33392e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 25 Oct 2021 08:31:06 +0000
ROA not before:           Mon 25 Oct 2021 08:26:06 +0000
ROA not after:            Mon 24 Oct 2022 08:31:06 +0000
asID:                     40676
IP address blocks:        5.45.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:32:02:0e:8b:d0:57:92:fd:e2:bb:a2:79:c5:19:2d:48:b7:23:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:26:06 2021 GMT
            Not After : Oct 24 08:31:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:b1:b1:bb:f0:8c:fb:c1:2c:d2:91:d6:03:
                    e4:f3:61:df:b9:54:37:38:24:81:cb:cc:41:f8:3e:
                    80:5d:03:65:8e:0b:57:a8:86:dd:f8:7f:78:8b:bf:
                    0b:14:34:ff:a5:2c:a3:38:9e:f1:84:69:35:39:99:
                    98:ac:27:76:42:1f:0b:57:9b:31:e4:0e:83:8f:cd:
                    48:1f:b9:eb:9b:d7:00:96:0a:b0:1c:41:46:36:e8:
                    12:94:42:c3:7c:86:bc:07:32:76:8f:4e:dc:82:1b:
                    aa:79:f2:21:44:4e:80:d4:8a:ec:81:38:de:de:72:
                    63:a0:bf:c4:04:74:ea:74:51:89:e2:01:8c:a2:02:
                    ef:3c:9e:d3:50:e1:38:86:5e:08:e7:7a:5f:e4:3b:
                    74:47:f1:92:2a:89:2a:0e:b8:4b:7f:ad:49:9b:bf:
                    28:fc:f1:84:b2:97:c4:62:f1:06:94:96:ef:fb:57:
                    ff:3b:13:17:c8:7b:47:59:90:53:5e:98:cd:12:29:
                    68:f1:59:91:af:50:71:3d:ac:33:dd:f3:fa:1d:bd:
                    53:2b:a7:a8:75:89:84:04:12:c2:76:1a:32:c2:f8:
                    d6:c8:66:f7:4d:07:99:2f:ae:74:56:ed:2d:50:d8:
                    bf:29:e6:33:bc:93:43:dd:84:46:01:be:c6:df:aa:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:F5:55:46:65:70:6C:76:91:7B:7D:5C:90:A7:7F:EC:DB:66:54
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/352e34352e33392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:30:4d:68:0c:eb:12:cb:fc:db:c5:a5:0b:e6:43:ed:bc:c2:
         aa:c5:74:e1:0c:02:11:5d:56:30:99:b7:e6:8d:77:f9:c4:81:
         f8:52:90:a6:74:db:33:b1:dd:6b:de:b8:b0:50:36:d3:ec:12:
         6b:f4:34:31:cd:db:27:71:5d:15:b5:c2:93:52:e7:0c:63:e9:
         8f:09:b0:fa:cb:7b:e3:7f:d1:ba:c7:f4:02:31:16:ab:12:a6:
         37:ca:cb:53:31:97:17:10:bb:c1:33:7e:7b:fa:4c:c9:92:1f:
         f3:bf:eb:be:a6:39:80:3a:80:f1:70:df:b8:a1:6b:7d:a5:30:
         84:15:38:c0:52:60:1b:96:d1:6a:0b:d1:0c:e1:cd:c4:fe:82:
         65:b2:b0:d4:ac:f3:af:cf:bd:bd:09:40:30:13:ec:60:cc:6a:
         04:7e:63:f3:7e:1a:21:33:53:ff:a7:10:1c:39:7a:d7:b2:1f:
         b6:9a:6e:7c:eb:99:5c:d3:34:4f:35:99:4e:ca:7b:69:04:f7:
         27:ff:e5:75:26:26:03:b6:67:fe:aa:52:d0:62:85:92:35:ce:
         90:1e:58:a2:8f:eb:ed:05:1e:15:30:01:f2:66:2c:d0:38:d3:
         ec:33:f8:87:d1:ab:54:35:a4:64:58:90:65:0c:82:c2:6d:5e:
         7c:0a:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org