Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203136353039.roa
File:                     352e34352e33382e302f32332d3234203d3e203136353039.roa (raw, json)
Hash identifier:          xbj1VpKCnWsSCHQYgWs0GxRBwPvk2wrflRETwPyarHk=
Subject key identifier:   F9:CE:8A:CF:F2:13:9E:69:EE:CD:12:36:29:D2:0A:FF:DD:9B:7D:75
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1EB0416EA6448DD63BFA5844C7C552E41FA59E27
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203136353039.roa
Signing time:             Sat 28 May 2022 09:40:33 +0000
ROA not before:           Sat 28 May 2022 09:35:33 +0000
ROA not after:            Sat 27 May 2023 09:40:33 +0000
asID:                     16509
IP address blocks:        5.45.38.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b0:41:6e:a6:44:8d:d6:3b:fa:58:44:c7:c5:52:e4:1f:a5:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 28 09:35:33 2022 GMT
            Not After : May 27 09:40:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:41:14:da:6e:7b:29:00:5d:42:ad:bf:9a:
                    aa:ec:eb:af:15:41:a4:f6:e5:bc:73:21:6d:23:b2:
                    dc:d2:c9:21:06:20:57:e8:f0:a2:b5:33:79:dd:c8:
                    89:dd:eb:96:ac:40:04:70:82:60:0e:ec:84:6c:e6:
                    95:2f:cd:81:03:bb:d8:6e:1e:cf:99:da:fd:e5:3c:
                    69:c9:2a:14:9b:12:fd:a8:e6:aa:a5:01:c5:d5:ec:
                    29:68:ad:af:54:6b:29:74:aa:9d:92:e9:c3:7d:e9:
                    25:07:f9:60:76:e2:5e:20:ef:e4:cc:dc:4d:df:a0:
                    76:7c:86:70:57:09:bb:50:66:75:a8:de:bc:fb:bf:
                    b5:a0:72:98:6e:c2:fd:2c:9f:c1:84:44:93:dd:18:
                    1c:f4:03:39:48:b2:62:77:c1:1c:7e:85:94:59:b5:
                    20:47:9f:e6:79:ee:5d:ed:a9:2f:06:64:5b:8a:9c:
                    c8:48:9d:13:30:e7:9c:59:e2:4f:dc:85:89:6d:8e:
                    75:46:7e:20:eb:9c:2e:3d:3e:57:17:2b:4b:6a:35:
                    a2:9c:64:d5:4a:04:a8:48:c2:47:8e:5e:84:b6:45:
                    5e:4c:9b:00:02:2f:a8:7b:de:0d:63:73:e7:d0:f3:
                    79:f9:01:68:60:d4:27:bc:3e:a5:76:1b:a5:44:b6:
                    b9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:8A:CF:F2:13:9E:69:EE:CD:12:36:29:D2:0A:FF:DD:9B:7D:75
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33382e302f32332d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:f1:92:01:e6:7f:e6:07:bc:c8:63:2b:0a:57:9c:a5:ed:
         df:1e:15:54:6f:97:0a:1f:38:0f:d8:ad:78:44:40:97:3c:d2:
         cd:af:3e:a8:83:bc:e7:04:de:d7:31:b5:98:fe:74:e9:49:44:
         df:13:a7:d5:e0:55:ef:fe:60:fd:d0:92:d1:c1:19:09:71:ac:
         73:44:24:48:4f:73:e5:63:16:dd:d9:2b:3c:51:92:c5:bf:ed:
         99:70:a4:75:51:23:3a:76:84:c8:f3:ec:c5:df:b7:5b:ef:e0:
         2a:49:14:a2:ad:60:20:82:92:d5:64:7d:b4:57:5a:b3:4d:4f:
         f8:85:2f:3a:56:b3:4f:4c:46:c2:51:eb:85:3a:6e:47:87:4d:
         b1:b2:7e:5d:be:69:95:a5:fa:21:86:35:20:79:55:38:e1:fc:
         c1:4d:13:c6:67:b9:c8:15:df:43:32:f8:9d:31:e3:eb:ff:39:
         1b:d1:12:e0:b1:7a:ee:88:6c:77:1e:98:43:21:d5:62:e0:81:
         d2:e5:e6:9d:bf:2a:1f:e6:cd:fc:70:a9:92:87:8e:b1:7d:59:
         93:9e:6b:a9:e7:5c:6a:ba:8e:59:b4:17:3d:72:d8:d4:0a:c8:
         a5:cd:4a:d0:1b:5a:1e:15:ea:7a:07:67:dd:b5:43:79:15:87:
         e6:d9:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org