Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133372e3132342e302f32342d3234203d3e2039303039.roa
File:                     34352e3133372e3132342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          laOmrvW2wYgheHIe7W+bT6EZtzWfelkignR16wT83Ho=
Subject key identifier:   64:35:4E:28:C0:25:67:F9:53:81:0E:53:62:D7:73:27:75:A2:A4:9C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1BAC58935BC94F1D26A7D1462DE4A1D6A5DC0F8D
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133372e3132342e302f32342d3234203d3e2039303039.roa
Signing time:             Mon 29 Nov 2021 08:24:19 +0000
ROA not before:           Mon 29 Nov 2021 08:19:19 +0000
ROA not after:            Mon 28 Nov 2022 08:24:19 +0000
asID:                     9009
IP address blocks:        45.137.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:58:93:5b:c9:4f:1d:26:a7:d1:46:2d:e4:a1:d6:a5:dc:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:19:19 2021 GMT
            Not After : Nov 28 08:24:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:95:cb:8b:c7:41:1a:de:91:8b:7a:36:7b:
                    f6:a3:1b:ce:d7:ac:1b:47:37:be:c3:e9:dd:94:53:
                    e4:d1:70:26:c8:79:b4:65:5a:47:76:ef:8f:19:ff:
                    39:09:92:4c:fa:0f:6e:67:63:e8:c4:4c:51:d3:ca:
                    26:a6:6a:48:b3:f5:cf:a0:f1:f4:54:ea:3b:40:6b:
                    c2:44:54:eb:8d:f5:1a:fa:88:b0:8f:d3:04:2d:55:
                    f0:8f:33:ff:49:cb:e5:00:94:17:26:82:b1:9e:df:
                    6a:70:41:7e:a0:8e:28:1b:2d:c2:e9:2a:a8:85:a4:
                    31:b0:76:79:b1:9f:8f:86:27:9b:7a:63:1f:7b:3d:
                    28:7f:33:ef:db:81:ab:d6:bc:bd:23:53:d3:8f:56:
                    ff:e4:de:51:05:be:b5:71:e8:9c:3f:a0:63:c8:70:
                    04:59:ed:a3:e2:be:80:6b:8e:ad:b5:82:88:4d:bd:
                    e5:6f:7b:07:ca:72:1f:c9:54:90:c1:c7:af:ff:85:
                    06:cb:f3:1f:0e:5a:66:5b:a5:5b:d9:5b:58:f3:95:
                    65:6a:e6:e5:73:61:13:b7:5e:54:0e:8b:42:1e:40:
                    e8:fc:99:80:79:f5:a5:22:68:fb:0f:9d:03:5a:0a:
                    36:04:9b:d2:41:85:7b:10:e9:4d:4b:ca:87:00:b3:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:35:4E:28:C0:25:67:F9:53:81:0E:53:62:D7:73:27:75:A2:A4:9C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e3133372e3132342e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:26:2a:7d:b0:be:88:97:1b:e3:92:d1:d6:60:c4:68:cf:
         5f:d0:10:5c:5f:17:c7:fc:75:d5:62:37:7d:1e:06:5a:88:80:
         16:2d:ff:c3:cd:f5:a0:91:57:65:68:61:1e:2e:ad:f1:9d:ca:
         07:0d:b5:ef:f2:5d:2e:24:30:ba:65:66:f2:3d:7e:1f:9c:aa:
         83:b4:25:b4:cf:d5:5e:c3:a0:be:66:9f:58:fb:f2:a7:2b:e5:
         2e:80:e5:33:a6:3e:a5:06:0e:a8:a4:fb:7e:54:d1:1b:a9:02:
         a1:22:5c:10:d8:35:34:fc:d3:e8:d4:43:2a:10:5d:68:7d:f7:
         c4:11:07:9b:16:c9:72:09:29:37:6e:1f:3f:95:e6:09:95:87:
         1b:e5:b3:14:67:9d:c4:2a:7d:dc:74:a4:e3:4e:12:d5:08:75:
         0e:1f:c5:ad:b5:8c:c1:a8:4a:ca:27:10:9f:fe:97:4c:2c:e7:
         49:ea:25:09:51:26:54:6b:9c:e7:15:50:07:30:f4:44:40:9c:
         3c:82:7d:d1:23:cf:73:8e:8f:2d:3d:78:b5:a0:85:ed:bc:61:
         4f:1a:0f:b5:8c:32:04:25:3f:e0:90:7b:98:68:4c:da:29:a9:
         4d:72:42:32:bc:2d:40:4c:24:87:d7:d6:47:f3:53:3c:5a:3f:
         12:c4:f7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org