Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203436353733.roa (raw, json)
Hash identifier:          ERQZgsBIaeKcnC6+aNHZaurf+rUlw0+aC2L96A/fLD0=
Subject key identifier:   76:9B:9C:0F:80:9B:0D:D3:4D:BD:35:B6:33:52:79:E0:D1:27:05:44
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       26252A657C8D067268ACFBB9009D09E85F6985CE
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa
Signing time:             Thu 09 Jun 2022 21:10:31 +0000
ROA not before:           Thu 09 Jun 2022 21:05:31 +0000
ROA not after:            Thu 08 Jun 2023 21:10:31 +0000
asID:                     46573
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:25:2a:65:7c:8d:06:72:68:ac:fb:b9:00:9d:09:e8:5f:69:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  9 21:05:31 2022 GMT
            Not After : Jun  8 21:10:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:74:b8:a5:a3:c0:2b:dd:c2:1b:d3:4a:76:
                    41:a9:e8:51:e0:6b:11:4f:47:77:ed:1c:4c:ce:e2:
                    34:cf:aa:0b:ab:f4:e4:f5:e7:38:47:34:6a:16:1b:
                    fb:73:27:69:1e:33:d1:14:17:b3:d5:c2:7e:44:24:
                    50:57:4f:c5:c9:ad:33:d6:16:b4:16:1f:c6:5d:69:
                    3b:63:e7:a0:92:6c:2b:7b:15:00:d5:fb:4f:11:3a:
                    47:31:87:44:61:11:1e:45:92:b2:d0:a9:66:10:10:
                    b1:1c:89:79:b6:7d:38:af:14:c1:d0:e8:4f:83:5a:
                    ed:0d:4f:4c:9f:06:2d:b9:f4:05:55:7d:ad:b2:65:
                    de:bb:6f:0e:d4:f9:2e:ba:f2:c8:01:38:db:71:81:
                    d9:03:f0:bb:09:97:c4:f7:06:36:68:7b:a3:7c:9e:
                    c6:25:e2:5f:98:dd:6d:d5:cc:4a:c9:c9:b1:42:96:
                    34:2e:b5:d2:ce:ea:da:87:e8:6d:2d:c6:1b:0e:5e:
                    a8:bf:8d:99:ec:9b:26:bc:1f:e4:a4:8f:e2:b5:59:
                    36:35:a8:c7:19:90:2c:aa:5f:2f:3f:12:01:06:8d:
                    91:57:ee:88:cf:39:9c:ca:98:db:fa:70:ab:f6:4d:
                    4f:66:b7:3f:41:41:ae:79:f0:a9:52:35:22:c6:4d:
                    4b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9B:9C:0F:80:9B:0D:D3:4D:BD:35:B6:33:52:79:E0:D1:27:05:44
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/34352e3133352e3136312e302f32342d3234203d3e203436353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:5b:c1:8f:56:91:c4:9f:17:39:70:42:d9:fa:85:92:94:
         af:47:6c:c6:d3:a7:bf:e5:76:28:99:44:7b:93:f4:d2:54:16:
         fa:18:97:65:aa:29:6f:50:68:3d:81:9c:2e:5d:7b:60:37:0b:
         55:a5:29:31:f0:f8:ef:f5:a6:f1:94:55:2d:cb:96:7a:d8:27:
         ec:4e:1d:5c:05:98:e0:81:e2:b6:70:0c:92:e1:76:27:e4:4b:
         36:3d:05:41:a0:1a:7f:e9:06:7d:8b:2a:09:3a:f1:0c:dc:ec:
         75:52:28:4c:e3:5a:fd:c3:bf:bf:0c:59:90:58:cd:5b:63:bd:
         6f:5f:c2:1d:00:9a:0a:d3:2b:10:97:b6:02:b1:3b:67:42:eb:
         77:f5:24:e3:c1:a5:3d:c5:8a:57:df:cc:c1:b6:52:aa:bb:ac:
         6f:e2:18:88:8e:fc:42:96:9f:bf:d2:8b:5c:76:0d:9b:7d:fe:
         cc:29:7b:50:77:8c:69:1a:27:b0:e1:d5:2e:ac:2c:27:9e:07:
         c3:77:a3:8c:e9:1f:18:6b:4f:81:c5:c7:ec:5d:44:f8:3e:0a:
         69:05:24:8b:b7:68:d2:4c:bf:89:c2:d7:ad:f4:47:86:c3:3e:
         6d:e4:7d:6c:fc:18:a8:b3:90:cd:75:2b:d0:6d:28:01:e9:f3:
         92:b8:a8:80
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUJiUqZXyNBnJorPu5AJ0J6F9phc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURBNTZBMjA3
QkZEMTlGRDAeFw0yMjA2MDkyMTA1MzFaFw0yMzA2MDgyMTEwMzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDI0Qzc0QjhBNUEzQzAyQkRE
QzIxQkQzNEE3NjQxQTlFODUxRTA2QjExNEY0Nzc3RUQxQzRDQ0VFMjM0Q0ZBQTBC
QUJGNEU0RjVFNzM4NDczNDZBMTYxQkZCNzMyNzY5MUUzM0QxMTQxN0IzRDVDMjdF
NDQyNDUwNTc0RkM1QzlBRDMzRDYxNkI0MTYxRkM2NUQ2OTNCNjNFN0EwOTI2QzJC
N0IxNTAwRDVGQjRGMTEzQTQ3MzE4NzQ0NjExMTFFNDU5MkIyRDBBOTY2MTAxMEIx
MUM4OTc5QjY3RDM4QUYxNEMxRDBFODRGODM1QUVEMEQ0RjRDOUYwNjJEQjlGNDA1
NTU3REFEQjI2NURFQkI2RjBFRDRGOTJFQkFGMkM4MDEzOERCNzE4MUQ5MDNGMEJC
MDk5N0M0RjcwNjM2Njg3QkEzN0M5RUM2MjVFMjVGOThERDZERDVDQzRBQzlDOUIx
NDI5NjM0MkVCNUQyQ0VFQURBODdFODZEMkRDNjFCMEU1RUE4QkY4RDk5RUM5QjI2
QkMxRkU0QTQ4RkUyQjU1OTM2MzVBOEM3MTk5MDJDQUE1RjJGM0YxMjAxMDY4RDkx
NTdFRTg4Q0YzOTlDQ0E5OERCRkE3MEFCRjY0RDRGNjZCNzNGNDE0MUFFNzlGMEE5
NTIzNTIyQzY0RDRCMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0kx0uKWjwCvdwhvTSnZBqehR4GsRT0d37RxMzuI0z6oLq/Tk9ec4
RzRqFhv7cydpHjPRFBez1cJ+RCRQV0/Fya0z1ha0Fh/GXWk7Y+egkmwrexUA1ftP
ETpHMYdEYREeRZKy0KlmEBCxHIl5tn04rxTB0OhPg1rtDU9MnwYtufQFVX2tsmXe
u28O1PkuuvLIATjbcYHZA/C7CZfE9wY2aHujfJ7GJeJfmN1t1cxKycmxQpY0LrXS
zurah+htLcYbDl6ov42Z7JsmvB/kpI/itVk2NajHGZAsql8vPxIBBo2RV+6Izzmc
ypjb+nCr9k1PZrc/QUGuefCpUjUixk1LDQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FHabnA+Amw3TTb01tjNSeeDRJwVEMB8GA1UdIwQYMBaAFJSyUBwVETSiAf2HFF2l
aiB7/Rn9MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RhZWUxOGE0LTg0NzQtNGMwMi05
YWMzLTUxODgzNjdmZGExNi02LzEvOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURB
NTZBMjA3QkZEMTlGRC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFlZTE4YTQtODQ3
NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTkvMC85NEIyNTAxQzE1MTEzNEEyMDFG
RDg3MTQ1REE1NkEyMDdCRkQxOUZELmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFl
ZTE4YTQtODQ3NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTYvMS8zNDM1MmUzMTMz
MzUyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzYzNTM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAth6EwDQYJKoZIhvcNAQELBQADggEBACtQW8GPVpHEnxc5cELZ+oWS
lK9HbMbTp7/ldiiZRHuT9NJUFvoYl2WqKW9QaD2BnC5de2A3C1WlKTHw+O/1pvGU
VS3LlnrYJ+xOHVwFmOCB4rZwDJLhdifkSzY9BUGgGn/pBn2LKgk68Qzc7HVSKEzj
Wv3Dv78MWZBYzVtjvW9fwh0AmgrTKxCXtgKxO2dC63f1JOPBpT3FilffzMG2Uqq7
rG/iGIiO/EKWn7/Si1x2DZt9/swpe1B3jGkaJ7Dh1S6sLCeeB8N3o4zpHxhrT4HF
x+xdRPg+CmkFJIu3aNJMv4nC1630R4bDPm3kfWz8GKizkM11K9BtKAHp85K4qIA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org