Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203134363138.roa
File:                     352e34352e33382e302f32332d3234203d3e203134363138.roa (raw, json)
Hash identifier:          NE4NPj5KNpVPrbnydDqQdZ77IPPwKhnqsx+NUNsequY=
Subject key identifier:   2F:BE:A5:CE:98:7D:36:C0:4C:4C:63:39:37:29:94:85:81:6A:AF:EA
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       12617B9B75F324DD950ACC92B00B156BE58A51C5
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203134363138.roa
Signing time:             Sat 28 May 2022 09:40:19 +0000
ROA not before:           Sat 28 May 2022 09:35:19 +0000
ROA not after:            Sat 27 May 2023 09:40:19 +0000
asID:                     14618
IP address blocks:        5.45.38.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:61:7b:9b:75:f3:24:dd:95:0a:cc:92:b0:0b:15:6b:e5:8a:51:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 28 09:35:19 2022 GMT
            Not After : May 27 09:40:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:97:84:a2:31:85:45:59:4d:f6:e9:18:de:
                    b6:26:83:19:8e:a3:9b:67:d2:59:7c:62:5c:57:f3:
                    93:4b:7f:b0:b3:34:0b:58:f6:0d:51:7a:ab:79:e4:
                    45:63:18:eb:dc:09:88:3e:d5:68:54:cf:07:47:f6:
                    1b:ed:a0:21:17:56:40:16:4e:11:b1:9f:b1:29:20:
                    e1:8a:d7:a3:2d:48:07:88:bf:03:37:d1:9f:51:ca:
                    96:5f:dc:2d:ca:3f:47:6f:ac:72:05:34:ab:18:b0:
                    a3:eb:cc:69:dc:11:46:75:38:4c:73:63:c8:96:fd:
                    98:1b:ad:67:b1:0e:6b:f8:d6:64:9c:23:42:2d:59:
                    ca:d5:95:88:60:70:8f:c9:74:46:dd:8b:77:e3:84:
                    17:ef:82:6c:81:f9:01:38:72:20:d4:7e:d5:2a:01:
                    40:b0:1e:bd:5a:6c:cf:a7:b9:30:eb:43:5f:b5:62:
                    81:cc:bc:8d:2d:40:5d:0e:de:8f:5f:32:25:ba:9f:
                    d2:b7:54:a4:54:87:30:35:9e:c6:5a:5d:ec:4b:b3:
                    4a:2d:c5:07:77:84:a2:38:b9:cb:28:eb:c8:eb:64:
                    e8:74:4b:55:52:d4:2f:75:ac:3c:29:5c:cd:17:f5:
                    ba:55:20:c7:41:ff:6f:93:0b:8d:d7:84:65:ee:85:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BE:A5:CE:98:7D:36:C0:4C:4C:63:39:37:29:94:85:81:6A:AF:EA
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:6d:e8:9e:96:a2:98:dd:87:79:72:c1:b3:ba:bd:53:60:25:
         32:e2:b1:af:31:87:98:38:53:a5:51:c2:16:15:1d:60:44:a5:
         59:8a:3e:cc:ae:04:1f:c6:9e:2a:84:9a:bd:65:d1:48:d0:83:
         50:94:aa:23:af:8e:67:bf:51:f3:10:12:94:45:aa:e4:0a:68:
         5a:d1:2b:16:a5:1c:ff:78:1a:77:da:d6:e3:5a:0d:87:59:3e:
         02:2a:cb:27:8a:16:a3:ea:d5:db:32:67:30:3e:75:73:ad:14:
         19:e7:2b:1e:ca:5e:11:c7:d8:1c:26:79:8f:41:ba:39:59:ec:
         ba:3d:c1:f9:67:0b:99:f5:3f:73:2f:b8:8d:9c:7e:1e:6d:2f:
         27:52:70:9e:ee:c9:6a:1b:a6:f5:80:48:8d:25:7a:c4:cf:0a:
         26:94:69:4b:05:58:77:b6:f3:42:96:00:ec:7d:07:d9:8e:7b:
         f6:59:3f:a9:d3:ad:c3:3e:58:39:df:3f:5e:8e:8d:ea:dc:04:
         5c:97:b4:45:df:5c:45:85:ca:04:aa:3a:b5:81:ae:66:b2:15:
         da:40:ec:ab:c8:48:39:a4:78:c7:52:c5:e7:ed:7a:06:98:e2:
         58:d4:20:8f:17:53:cd:61:be:26:c1:b7:e1:d7:95:ae:44:bf:
         52:74:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org