Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e203631333137.roa
File:                     34352e38382e39372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          wJqAlJQEOqf6zSOZkJjhJIkpHsdrlTqENPXUJwUkVgE=
Subject key identifier:   19:14:3A:62:4F:DB:E7:08:CF:1C:DF:94:C1:47:13:B4:11:F4:FA:EF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       13ADE23BFDC0A506DA9BD21DCC361989E31E20B1
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 24 Dec 2021 17:07:47 +0000
ROA not before:           Fri 24 Dec 2021 17:02:47 +0000
ROA not after:            Fri 23 Dec 2022 17:07:47 +0000
asID:                     61317
IP address blocks:        45.88.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ad:e2:3b:fd:c0:a5:06:da:9b:d2:1d:cc:36:19:89:e3:1e:20:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 24 17:02:47 2021 GMT
            Not After : Dec 23 17:07:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:af:6b:75:c9:ba:a0:4b:ef:5f:d6:92:9a:
                    45:8d:c8:2d:d3:1f:eb:98:99:56:96:b2:18:34:90:
                    09:8b:24:60:8b:65:c3:fb:33:e2:49:5c:08:90:2c:
                    2e:d0:1b:ad:99:41:d7:2f:8f:40:3b:8f:fc:84:dd:
                    b4:d5:4f:c4:9d:9b:67:a3:ab:f2:23:d1:7c:34:f6:
                    2d:43:26:66:cf:6d:9c:1a:7a:14:78:16:9c:da:60:
                    9b:d5:22:14:1b:cd:4e:cf:ba:14:eb:10:8a:f3:27:
                    0c:db:e0:cb:79:01:43:48:e2:91:5f:83:a8:6f:07:
                    d2:be:50:c2:98:73:50:b5:b8:1b:f3:07:cc:68:2b:
                    56:c1:83:54:45:4b:5b:ef:84:ea:74:07:e3:54:8f:
                    05:b3:bb:05:41:c8:7e:90:93:9d:2c:3b:7c:53:69:
                    19:06:00:a0:65:a1:64:a9:28:54:e1:74:23:ec:a7:
                    cf:29:cc:e7:30:d4:cd:b4:c6:5a:8f:6e:a4:a6:c9:
                    bd:45:ae:82:10:f5:3d:d8:15:01:18:a0:43:3a:f9:
                    d6:7c:1c:73:1f:52:82:b7:69:6a:7d:b1:a2:1c:d2:
                    52:bf:c3:63:4d:92:30:b5:10:ea:a5:87:c5:ef:bf:
                    e4:dc:13:b6:85:38:ea:45:c7:7c:18:ef:62:16:49:
                    f2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:3A:62:4F:DB:E7:08:CF:1C:DF:94:C1:47:13:B4:11:F4:FA:EF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:2c:0b:c9:21:d3:7f:59:ad:f8:31:15:33:0f:2a:36:70:69:
         d1:35:56:d1:43:ac:66:8a:30:3a:d2:4c:aa:32:1f:11:07:55:
         ab:86:06:c6:d2:54:64:be:0d:f0:5a:ed:a5:cb:ca:69:ea:ba:
         0f:43:af:87:4a:67:d0:f2:b1:e2:5e:46:22:af:78:0c:4b:0f:
         f7:dd:51:8b:93:15:1c:f4:6b:07:e4:12:18:c7:1b:c6:4c:ef:
         4a:78:d1:7a:e0:d7:ea:60:bd:33:b6:ad:be:3e:82:cc:e7:fe:
         42:81:b5:a6:3d:2b:3a:63:ca:e0:d6:70:52:96:dd:e5:e4:6b:
         c5:66:ee:07:55:49:65:a8:66:43:1a:2c:e4:d2:8f:12:58:ea:
         7b:82:a4:0f:21:5a:55:da:f3:67:9f:43:57:1c:70:7a:1b:8d:
         a9:bd:b7:f3:ce:f2:f8:c6:c7:62:c4:4a:34:e6:b5:aa:88:ed:
         88:5d:84:ce:a8:0b:93:4e:cc:01:8f:ce:a8:3c:15:90:70:6d:
         b7:43:47:b7:f7:6a:35:89:41:e1:ad:ac:97:55:76:b7:cc:d2:
         eb:92:59:a5:3d:3b:fa:ec:ae:d7:f9:8c:b6:19:79:c3:59:50:
         44:a0:0d:cc:9d:b8:a7:46:c5:f0:82:6f:79:a7:99:9a:f7:92:
         3e:8a:8b:46
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUE63iO/3ApQbam9IdzDYZieMeILEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTEyMjQxNzAyNDdaFw0yMjEyMjMxNzA3NDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE2REFGNkI3NUM5QkFBMDRC
RUY1RkQ2OTI5QTQ1OERDODJERDMxRkVCOTg5OTU2OTZCMjE4MzQ5MDA5OEIyNDYw
OEI2NUMzRkIzM0UyNDk1QzA4OTAyQzJFRDAxQkFEOTk0MUQ3MkY4RjQwM0I4RkZD
ODREREI0RDU0RkM0OUQ5QjY3QTNBQkYyMjNEMTdDMzRGNjJENDMyNjY2Q0Y2RDlD
MUE3QTE0NzgxNjlDREE2MDlCRDUyMjE0MUJDRDRFQ0ZCQTE0RUIxMDhBRjMyNzBD
REJFMENCNzkwMTQzNDhFMjkxNUY4M0E4NkYwN0QyQkU1MEMyOTg3MzUwQjVCODFC
RjMwN0NDNjgyQjU2QzE4MzU0NDU0QjVCRUY4NEVBNzQwN0UzNTQ4RjA1QjNCQjA1
NDFDODdFOTA5MzlEMkMzQjdDNTM2OTE5MDYwMEEwNjVBMTY0QTkyODU0RTE3NDIz
RUNBN0NGMjlDQ0U3MzBENENEQjRDNjVBOEY2RUE0QTZDOUJENDVBRTgyMTBGNTNE
RDgxNTAxMThBMDQzM0FGOUQ2N0MxQzczMUY1MjgyQjc2OTZBN0RCMUEyMUNEMjUy
QkZDMzYzNEQ5MjMwQjUxMEVBQTU4N0M1RUZCRkU0REMxM0I2ODUzOEVBNDVDNzdD
MThFRjYyMTY0OUYyQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0W2va3XJuqBL71/WkppFjcgt0x/rmJlWlrIYNJAJiyRgi2XD+zPi
SVwIkCwu0ButmUHXL49AO4/8hN201U/EnZtno6vyI9F8NPYtQyZmz22cGnoUeBac
2mCb1SIUG81Oz7oU6xCK8ycM2+DLeQFDSOKRX4OobwfSvlDCmHNQtbgb8wfMaCtW
wYNURUtb74TqdAfjVI8Fs7sFQch+kJOdLDt8U2kZBgCgZaFkqShU4XQj7KfPKczn
MNTNtMZaj26kpsm9Ra6CEPU92BUBGKBDOvnWfBxzH1KCt2lqfbGiHNJSv8NjTZIw
tRDqpYfF77/k3BO2hTjqRcd8GO9iFknyvwIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FBkUOmJP2+cIzxzflMFHE7QR9PrvMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zNDM1MmUzODM4
MmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC1YYTANBgkqhkiG9w0BAQsFAAOCAQEANCwLySHTf1mt+DEVMw8qNnBp0TVW
0UOsZoowOtJMqjIfEQdVq4YGxtJUZL4N8FrtpcvKaeq6D0Ovh0pn0PKx4l5GIq94
DEsP991Ri5MVHPRrB+QSGMcbxkzvSnjReuDX6mC9M7atvj6CzOf+QoG1pj0rOmPK
4NZwUpbd5eRrxWbuB1VJZahmQxos5NKPEljqe4KkDyFaVdrzZ59DVxxwehuNqb23
887y+MbHYsRKNOa1qojtiF2EzqgLk07MAY/OqDwVkHBtt0NHt/dqNYlB4a2sl1V2
t8zS65JZpT07+uyu1/mMthl5w1lQRKANzJ24p0bF8IJveaeZmveSPoqLRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org