Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33392e302f32342d3234203d3e203430363736.roa
File:                     352e34352e33392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          WhuVPw3u2qqgzz7TkWOb6hreCrg1MobNUX9rGXNSt54=
Subject key identifier:   BE:F0:89:4F:83:B8:26:D7:39:B7:76:6F:49:2F:77:13:01:1F:F7:1D
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       1B8386BEAF22FF1D3D554DEDBA21D1EDC383B4F1
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33392e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     40676
IP address blocks:        5.45.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:83:86:be:af:22:ff:1d:3d:55:4d:ed:ba:21:d1:ed:c3:83:b4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:11:48:0f:a6:a3:00:d0:78:57:65:5a:37:
                    80:84:f1:bd:17:a6:02:0e:68:ad:7f:87:5e:19:9f:
                    fd:94:7c:9f:8b:4f:6a:b6:d3:b2:86:aa:d9:f3:f6:
                    0b:0d:c0:e3:0f:14:a7:b2:d3:fc:54:aa:68:33:5c:
                    64:92:87:32:1d:18:66:cc:76:91:50:d1:99:83:f9:
                    e9:b6:9d:87:31:a0:8d:a9:10:05:44:a5:fc:31:fb:
                    8d:ba:45:44:f5:b9:5b:59:24:b1:93:76:76:bc:1a:
                    8f:0f:2d:a6:0d:e4:7f:2a:a6:83:73:42:93:ab:c4:
                    dc:6e:52:3f:83:4d:bb:98:5e:a7:4e:0d:c3:a7:e3:
                    4e:3c:46:fa:1d:34:67:fd:9f:b4:b1:28:f6:4b:1d:
                    d2:ee:4d:e4:b8:50:ac:34:72:57:f3:c8:22:71:81:
                    6c:f9:b7:de:80:8c:68:a1:36:8a:80:3b:4e:e2:2a:
                    c6:f7:44:d5:1e:ea:31:cb:16:1b:f9:0e:1c:d0:dd:
                    fc:47:a8:30:29:8b:aa:f2:e1:71:d6:eb:bb:0a:f6:
                    13:d7:30:f2:49:ec:b0:58:38:f9:c9:2e:d9:2d:d7:
                    0f:65:47:0b:a8:18:3c:0e:5a:73:f3:30:7b:ba:d3:
                    4a:b1:df:83:fe:4e:14:b1:15:ba:45:7b:cc:48:cc:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F0:89:4F:83:B8:26:D7:39:B7:76:6F:49:2F:77:13:01:1F:F7:1D
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:99:44:3c:dc:d8:08:50:72:a2:b0:2f:7b:6d:5f:34:c1:40:
         fa:44:ec:72:4d:bf:49:58:a2:5d:c8:2d:37:32:a1:1d:a8:e9:
         e1:5b:66:0c:95:c3:d3:55:96:fb:47:71:2c:6a:7f:f0:80:15:
         e9:ee:f2:ef:74:9c:a5:ca:0a:4a:4a:89:60:51:82:ed:d0:5e:
         5e:01:db:00:36:8c:b9:fc:46:3b:b8:04:ad:d8:53:90:27:6e:
         f4:db:ff:0e:b7:0a:0b:f7:42:13:f7:73:2b:d1:84:89:dd:08:
         40:70:78:81:38:a5:41:df:48:3c:36:e3:88:b9:2f:d9:11:4c:
         16:eb:cd:0d:37:b4:de:7f:b8:9a:ce:6b:44:9d:1b:73:c8:c4:
         69:15:0c:2f:55:ac:37:da:39:0e:df:76:3a:6c:37:ac:4b:b4:
         83:6e:11:a4:7c:0a:db:6d:45:8b:9a:25:3e:06:38:95:a0:25:
         6d:d2:b7:d4:fe:1d:2b:cd:16:31:4a:cd:55:6b:4e:83:f8:9c:
         79:f0:fe:dd:05:2e:2d:62:13:dd:f3:a1:dc:64:08:1e:ec:93:
         03:c8:f6:5a:cc:7e:0b:d7:df:b6:0e:57:eb:32:83:ae:d5:d4:
         41:4c:16:79:dd:40:74:53:1c:d7:2c:01:ba:06:1c:a5:f4:a2:
         72:15:ec:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org