Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          nwqzWUje9wVyeV4Xng/TM+jxsgPOHSNKr5Fp/YygITk=
Subject key identifier:   2C:88:9C:B3:DA:C9:79:CC:EF:76:75:B5:D0:4B:9A:AA:39:68:0A:A0
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       7725C4DF008DD14EBF8DFD3D44D5AB9511776715
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa
Signing time:             Tue 07 Jun 2022 09:00:58 +0000
ROA not before:           Tue 07 Jun 2022 08:55:58 +0000
ROA not after:            Tue 06 Jun 2023 09:00:58 +0000
asID:                     398465
IP address blocks:        216.247.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:25:c4:df:00:8d:d1:4e:bf:8d:fd:3d:44:d5:ab:95:11:77:67:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  7 08:55:58 2022 GMT
            Not After : Jun  6 09:00:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:48:f8:2b:dd:19:72:13:77:14:0e:d1:3d:
                    51:79:17:f7:8b:97:2e:04:a5:0e:f6:3b:76:21:a3:
                    e3:0a:20:bf:83:ba:7e:dc:a9:a1:a2:96:de:0e:42:
                    66:42:2b:7c:1f:aa:41:07:54:dd:ea:e8:03:8c:a0:
                    f3:6e:3a:87:4a:75:10:56:ca:51:17:e8:87:57:f5:
                    3b:da:0a:1d:37:32:67:a3:54:ec:b0:92:b0:66:f2:
                    4d:2c:6f:b0:7b:94:a3:77:b4:25:f7:fc:74:f0:d5:
                    63:85:ff:cb:3c:c1:b7:63:3d:3e:0b:93:de:01:74:
                    ba:86:8f:a0:e0:b1:a7:d2:2f:60:27:d8:b4:4d:fc:
                    48:35:5f:08:d3:f1:8f:17:6e:d7:e7:b3:af:f1:e4:
                    cc:10:b6:d6:dd:4e:7d:46:d4:a7:4c:cc:98:85:a1:
                    d0:f9:5f:bb:26:ed:aa:2c:be:e8:6c:72:48:71:1a:
                    9c:0d:30:a8:2d:35:0a:2d:89:10:cc:b4:6b:5d:e7:
                    fe:d6:92:88:d2:57:d1:96:f3:38:95:c0:5d:fe:df:
                    dc:2f:fa:41:a7:f1:f2:c7:6c:1d:74:30:ff:70:74:
                    d4:20:17:b8:13:a9:35:8a:e6:08:96:7d:91:43:7a:
                    b5:1e:bc:cc:d2:cb:da:99:a9:3b:db:95:6b:aa:61:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:9C:B3:DA:C9:79:CC:EF:76:75:B5:D0:4B:9A:AA:39:68:0A:A0
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:87:1d:e2:ac:40:c6:00:06:5f:98:53:b9:e1:03:8a:78:fa:
         26:70:11:4c:20:23:8a:eb:11:e4:fd:db:a5:5b:16:9e:1c:fc:
         44:3b:dd:b4:88:00:24:92:09:10:f1:52:e9:f8:53:9c:ea:f6:
         6c:41:7e:1a:7d:d9:0b:47:53:fd:d4:86:8d:df:93:5f:24:10:
         79:97:18:c7:ec:60:25:43:68:e1:33:0f:7a:9a:5f:fa:25:7b:
         46:d1:e4:a8:0d:da:77:95:8e:04:fe:34:96:f4:0b:ec:bb:4c:
         88:f7:81:6f:42:ce:8a:d6:42:42:15:60:9b:af:8d:2f:65:17:
         b7:46:eb:9b:f3:00:6f:c7:df:f8:49:b7:1d:a6:55:42:2c:84:
         a1:df:a6:fd:2f:0d:e9:46:5a:8f:30:00:5c:a6:3b:e2:dd:a0:
         e8:12:e6:b3:0d:cc:19:6f:a6:eb:c2:e1:c6:1b:a1:79:77:3f:
         f0:d2:f3:aa:8b:61:8f:a4:d2:4f:06:64:49:ea:2b:32:97:20:
         dc:f8:91:ea:a1:2a:d6:b3:2e:69:9e:9a:62:d2:38:98:8b:67:
         70:f6:9a:ee:df:40:0c:0e:43:bb:d9:71:63:c9:ae:14:68:0c:
         e5:44:51:3d:91:b8:97:d6:8d:77:87:fb:d7:eb:9a:12:e9:10:
         5a:1a:4e:3e
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUdyXE3wCN0U6/jf09RNWrlRF3ZxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURBNTZBMjA3
QkZEMTlGRDAeFw0yMjA2MDcwODU1NThaFw0yMzA2MDYwOTAwNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY5MDQ4RjgyQkREMTk3MjEz
NzcxNDBFRDEzRDUxNzkxN0Y3OEI5NzJFMDRBNTBFRjYzQjc2MjFBM0UzMEEyMEJG
ODNCQTdFRENBOUExQTI5NkRFMEU0MjY2NDIyQjdDMUZBQTQxMDc1NERERUFFODAz
OENBMEYzNkUzQTg3NEE3NTEwNTZDQTUxMTdFODg3NTdGNTNCREEwQTFEMzczMjY3
QTM1NEVDQjA5MkIwNjZGMjREMkM2RkIwN0I5NEEzNzdCNDI1RjdGQzc0RjBENTYz
ODVGRkNCM0NDMUI3NjMzRDNFMEI5M0RFMDE3NEJBODY4RkEwRTBCMUE3RDIyRjYw
MjdEOEI0NERGQzQ4MzU1RjA4RDNGMThGMTc2RUQ3RTdCM0FGRjFFNENDMTBCNkQ2
REQ0RTdENDZENEE3NENDQzk4ODVBMUQwRjk1RkJCMjZFREFBMkNCRUU4NkM3MjQ4
NzExQTlDMEQzMEE4MkQzNTBBMkQ4OTEwQ0NCNDZCNURFN0ZFRDY5Mjg4RDI1N0Qx
OTZGMzM4OTVDMDVERkVERkRDMkZGQTQxQTdGMUYyQzc2QzFENzQzMEZGNzA3NEQ0
MjAxN0I4MTNBOTM1OEFFNjA4OTY3RDkxNDM3QUI1MUVCQ0NDRDJDQkRBOTlBOTNC
REI5NTZCQUE2MURFODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr5BI+CvdGXITdxQO0T1ReRf3i5cuBKUO9jt2IaPjCiC/g7p+3Kmh
opbeDkJmQit8H6pBB1Td6ugDjKDzbjqHSnUQVspRF+iHV/U72godNzJno1TssJKw
ZvJNLG+we5Sjd7Ql9/x08NVjhf/LPMG3Yz0+C5PeAXS6ho+g4LGn0i9gJ9i0TfxI
NV8I0/GPF27X57Ov8eTMELbW3U59RtSnTMyYhaHQ+V+7Ju2qLL7obHJIcRqcDTCo
LTUKLYkQzLRrXef+1pKI0lfRlvM4lcBd/t/cL/pBp/Hyx2wddDD/cHTUIBe4E6k1
iuYIln2RQ3q1HrzM0svamak725VrqmHehwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FCyInLPayXnM73Z1tdBLmqo5aAqgMB8GA1UdIwQYMBaAFJSyUBwVETSiAf2HFF2l
aiB7/Rn9MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RhZWUxOGE0LTg0NzQtNGMwMi05
YWMzLTUxODgzNjdmZGExNi02LzEvOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURB
NTZBMjA3QkZEMTlGRC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFlZTE4YTQtODQ3
NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTkvMC85NEIyNTAxQzE1MTEzNEEyMDFG
RDg3MTQ1REE1NkEyMDdCRkQxOUZELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFl
ZTE4YTQtODQ3NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTYvMS8zMjMxMzYyZTMy
MzQzNzJlMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM0MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANj3YDANBgkqhkiG9w0BAQsFAAOCAQEAl4cd4qxAxgAGX5hTueED
inj6JnARTCAjiusR5P3bpVsWnhz8RDvdtIgAJJIJEPFS6fhTnOr2bEF+Gn3ZC0dT
/dSGjd+TXyQQeZcYx+xgJUNo4TMPeppf+iV7RtHkqA3ad5WOBP40lvQL7LtMiPeB
b0LOitZCQhVgm6+NL2UXt0brm/MAb8ff+Em3HaZVQiyEod+m/S8N6UZajzAAXKY7
4t2g6BLmsw3MGW+m68LhxhuheXc/8NLzqothj6TSTwZkSeorMpcg3PiR6qEq1rMu
aZ6aYtI4mItncPaa7t9ADA5Du9lxY8muFGgM5URRPZG4l9aNd4f71+uaEukQWhpO
Pg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org