Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33392e302f32342d3234203d3e203430363736.roa
File:                     352e34352e33392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          9k3tLpYhXus+8E8I3/qjIL4LMKlk1G5bS+L1edIZiV0=
Subject key identifier:   B3:41:DA:73:CF:AD:BC:39:94:0C:34:E7:B3:16:DF:1C:C0:A1:5D:1A
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       4BCD89BF4DC8E508A21BBAB8C92B8F4434EC3881
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33392e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     40676
IP address blocks:        5.45.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cd:89:bf:4d:c8:e5:08:a2:1b:ba:b8:c9:2b:8f:44:34:ec:38:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:b4:7c:5a:d4:c4:8b:5c:e1:97:b7:d2:c2:
                    2f:d9:3f:54:7a:55:08:b3:77:56:7b:90:b4:4e:b2:
                    4c:fc:df:ff:df:76:f0:08:43:08:af:98:de:62:e9:
                    8e:6c:53:cb:f7:f5:d7:76:6b:99:d1:c5:62:d0:30:
                    64:6b:c4:68:bc:05:45:43:97:35:b8:80:f5:6d:8c:
                    7a:1f:2a:6a:e2:93:49:e8:17:96:44:a5:7c:f2:17:
                    6e:84:1b:d6:52:ec:1e:83:ac:eb:ff:bc:67:7f:72:
                    db:9c:ce:58:3a:5f:d5:4b:f3:ab:ec:c2:54:48:79:
                    d8:50:32:19:dd:5a:b4:f0:c7:8a:59:c2:81:fd:3e:
                    24:a6:a4:1d:e7:93:32:e3:ab:8f:f2:c6:21:a0:6f:
                    48:9c:b8:83:30:f8:5d:34:5f:20:3f:0a:c1:c8:4f:
                    a0:8f:a5:73:e0:b7:ec:9a:af:9e:be:89:b8:27:a3:
                    de:17:1f:f4:91:ec:13:5d:2a:0c:11:c3:ac:83:de:
                    41:d8:67:a6:3b:ad:85:2d:b3:f6:8e:de:51:e4:20:
                    e6:b8:15:5e:a0:5e:cd:1c:43:f0:85:f5:12:45:b3:
                    45:b6:a0:60:e4:11:5d:ed:bf:c8:1e:dc:03:b3:d7:
                    a8:3f:c5:c4:08:20:79:db:7d:eb:47:e6:2d:a1:8f:
                    00:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:41:DA:73:CF:AD:BC:39:94:0C:34:E7:B3:16:DF:1C:C0:A1:5D:1A
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/352e34352e33392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:dd:b7:83:60:fa:59:92:28:09:c8:67:2d:89:8b:26:d8:
         c1:d4:6d:0f:ec:fd:26:d8:3e:2b:5e:80:ed:d8:f6:99:f0:00:
         db:fb:40:54:82:ab:7b:a5:1d:c0:57:99:a2:c6:d0:6c:2c:80:
         95:6d:83:c1:4a:81:c5:c8:25:f6:d0:46:78:bf:7f:7c:76:1d:
         a7:9d:02:09:da:f0:f1:fa:22:c5:86:c2:36:d0:e1:3f:25:33:
         8f:80:39:e7:1a:eb:f0:d3:39:67:8e:41:95:ec:da:38:6f:ee:
         7c:28:7a:a9:79:e1:e8:db:74:6c:67:43:7f:af:a1:37:c3:29:
         42:4e:78:7a:d6:d8:cf:af:bb:d5:3f:70:51:0c:cf:3f:30:43:
         d6:d6:dd:0b:ef:b5:a9:07:01:50:ee:d7:ce:94:3b:71:5e:53:
         63:41:be:ef:98:c3:3e:b7:47:53:02:e7:7e:a8:0c:d9:c9:c5:
         33:56:42:97:9a:d9:f3:52:0f:24:e5:26:aa:0b:78:9a:5c:1a:
         98:de:1c:df:7d:fe:29:f7:1f:3f:64:c2:53:84:54:ca:52:15:
         ce:2c:b3:00:f5:d1:9c:77:af:37:f1:ce:90:e0:c6:10:c0:44:
         b3:8d:d4:2a:9c:4f:6b:17:26:22:38:f8:4d:64:9f:17:8f:7b:
         ba:23:02:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org