Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323131313933.roa
File:                     34352e3135362e3131392e302f32342d3234203d3e20323131313933.roa (raw, json)
Hash identifier:          2eIPpY5faEcdctUoJfIvZCviqlzQvYlDMv7RYppNhG8=
Subject key identifier:   46:0E:AA:59:E3:28:06:76:10:B2:EA:2C:B0:65:CA:76:BD:56:98:61
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       355CCD5D72E28B481525F65B20126C51C1018981
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323131313933.roa
Signing time:             Fri 21 Oct 2022 06:35:20 +0000
ROA not before:           Fri 21 Oct 2022 06:30:20 +0000
ROA not after:            Fri 20 Oct 2023 06:35:20 +0000
asID:                     211193
IP address blocks:        45.156.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5c:cd:5d:72:e2:8b:48:15:25:f6:5b:20:12:6c:51:c1:01:89:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Oct 21 06:30:20 2022 GMT
            Not After : Oct 20 06:35:20 2023 GMT
        Subject: CN=460EAA59E328067610B2EA2CB065CA76BD569861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:cc:05:81:48:65:bb:48:67:72:e2:65:8e:
                    21:39:45:9a:30:d5:b4:16:b1:fe:0c:19:fc:80:eb:
                    ae:e8:d8:f2:b0:ec:5c:87:ae:b1:fe:78:56:96:8b:
                    b0:ed:58:ec:d5:33:30:93:fc:c3:a8:c6:f2:b4:67:
                    db:81:e0:c8:cc:d5:68:51:2f:12:3b:ef:ef:a3:9f:
                    63:da:e8:10:5c:8c:eb:d6:9f:b3:7c:44:f8:bf:51:
                    15:eb:9f:b8:1a:8b:63:ad:0d:50:95:59:ef:37:eb:
                    b5:29:96:d3:64:17:97:45:07:8b:89:42:8b:b5:cf:
                    c9:cd:90:0b:27:9a:7d:70:f7:3b:bc:13:5b:46:5b:
                    d6:ed:1d:bb:88:68:23:fa:87:de:f7:7f:d1:60:ec:
                    1b:28:1b:da:5a:7e:96:73:ee:9b:43:12:34:b9:b7:
                    61:cd:25:08:2f:99:0e:08:d3:8a:ca:f2:2b:b3:e9:
                    0a:76:07:72:f6:0e:f4:35:15:14:64:d2:75:5a:1b:
                    a3:85:a3:b9:e4:3a:39:55:33:61:bb:07:5c:75:47:
                    84:da:66:ef:f6:f9:82:2e:bf:da:a6:35:fa:11:d3:
                    da:42:ae:9e:6e:54:62:8b:67:88:dc:10:70:6c:bc:
                    41:3e:b2:9c:9f:1b:52:a0:f8:9f:09:83:32:60:ce:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:AA:59:E3:28:06:76:10:B2:EA:2C:B0:65:CA:76:BD:56:98:61
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131392e302f32342d3234203d3e20323131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:71:3b:73:05:ac:ef:a1:2a:61:b2:df:9f:86:ee:86:f6:8c:
         8d:15:69:5d:1f:69:48:91:d9:29:a3:d4:42:c7:5d:18:ce:a1:
         54:c0:99:a8:1e:50:66:07:ca:5f:f2:08:a8:55:6f:4f:9d:3a:
         fb:ed:4e:92:99:ad:99:57:8f:30:87:32:0e:c1:1e:22:86:7a:
         1e:1d:a0:ae:b6:0c:be:33:09:ef:fb:86:4e:03:4c:f9:38:bf:
         24:59:40:39:17:70:b0:d1:b5:98:26:c8:65:0f:4c:98:65:3d:
         78:94:d2:43:db:89:93:fe:61:6a:ee:5f:5e:09:1b:e8:26:4a:
         00:a5:da:89:67:62:a0:e1:1e:1b:6d:88:f1:cd:f6:4f:96:40:
         36:4f:b8:d6:e6:38:d6:a6:e0:c2:19:14:6e:36:42:11:da:d2:
         c7:78:2f:ec:8a:87:22:94:c0:dd:71:43:3a:80:ca:d2:c8:04:
         31:96:87:fd:15:63:10:1f:49:0c:af:9e:a0:19:5f:fe:12:b0:
         fd:e7:a8:cd:68:ac:e8:1b:b8:54:53:26:b9:a3:33:f6:63:40:
         9d:95:4a:4c:86:bc:ac:ff:7c:9e:4d:e2:b2:dc:80:7c:09:4e:
         96:12:42:2d:01:e9:93:7c:50:b4:3b:61:34:53:f6:40:4c:96:
         c2:20:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org