Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234302e302f32322d3234203d3e203631333137.roa
File:                     34352e38392e3234302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          w21zsltwy/4F2au7OiV9dkUXIbgEdSXNUI4xkAWi4FQ=
Subject key identifier:   11:84:15:A4:B1:82:4D:8E:61:1C:D1:BF:A3:E8:09:2B:3B:5A:E0:AA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7DB50A098FABF50212B376331B1B8478998706D3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234302e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     61317
IP address blocks:        45.89.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b5:0a:09:8f:ab:f5:02:12:b3:76:33:1b:1b:84:78:99:87:06:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:61:f2:3d:cd:8f:58:c7:a0:30:57:01:18:
                    dd:07:ff:a9:70:3c:c9:75:56:c2:d2:49:10:b8:a5:
                    23:81:23:0e:3f:f2:3a:52:3e:d5:33:61:22:31:3f:
                    38:52:d6:6b:13:41:8f:cc:11:58:9f:2b:6f:cf:f7:
                    b1:d5:4c:2e:b6:75:18:03:f7:0f:c8:c2:39:24:ff:
                    da:cc:fd:69:52:aa:56:c3:0e:65:5b:84:87:8b:37:
                    41:b5:ab:d0:9c:2e:12:e0:b5:35:79:d9:2b:5a:5a:
                    0a:ad:e0:de:95:1b:86:0c:98:ca:a8:95:26:ba:b9:
                    d4:7b:26:6e:88:6e:7f:46:99:a6:1c:b3:45:65:73:
                    9a:d6:b7:cd:43:5c:cc:1b:05:42:4c:95:0f:31:d1:
                    ec:e3:e9:53:da:92:4f:80:67:a7:d9:da:78:9a:71:
                    4c:48:44:ca:ae:a9:83:d4:d0:40:1b:be:8a:b9:c5:
                    22:72:99:ea:05:a5:af:60:0e:ab:59:82:d6:34:3a:
                    8c:f4:b3:7d:74:66:dd:61:19:1f:6c:a7:f7:1c:14:
                    cc:c6:24:d8:3d:1f:d7:28:6b:2f:c4:3f:6f:ef:36:
                    f1:63:07:37:46:58:be:1f:25:ec:36:ae:55:f1:a7:
                    85:f7:05:f1:c7:f0:18:39:bb:37:38:c2:1d:6f:04:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:15:A4:B1:82:4D:8E:61:1C:D1:BF:A3:E8:09:2B:3B:5A:E0:AA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:7f:3e:21:59:7b:3c:ea:c5:73:ed:9a:7c:94:06:f1:05:
         10:b0:87:0e:e8:b0:ba:ff:d1:ba:9e:9e:7e:04:b8:7b:14:52:
         07:d7:1e:75:ce:b8:9f:f1:6a:e5:8e:32:be:c0:8f:d8:3c:37:
         22:72:7e:d4:58:af:41:19:81:bf:bb:5c:0d:76:71:90:57:90:
         6d:61:c3:82:e2:f2:1a:f6:16:47:ca:07:b1:19:89:af:17:d6:
         20:51:ed:fd:19:2e:54:cd:e3:5f:de:41:f1:5e:b4:1b:94:66:
         66:7c:ee:7d:3b:60:15:98:7c:52:65:5f:32:77:4c:15:bd:5a:
         c1:f2:e9:8b:e6:fa:74:cb:78:76:3b:9b:32:59:63:10:55:9c:
         b3:9f:1f:94:c1:11:7d:db:29:f4:53:ca:f1:d9:71:12:88:be:
         4e:aa:44:79:94:26:56:83:c9:ac:76:1d:ce:f0:33:e1:e5:51:
         6e:6d:3e:d5:3e:f0:a6:25:0b:ee:eb:79:99:c2:4a:cd:97:27:
         ac:fc:7f:48:c2:1d:98:03:88:95:0d:e4:b4:c1:af:ad:5f:42:
         3c:35:6e:7b:7c:07:0f:f1:8f:3e:31:3e:bd:e1:68:3a:63:09:
         de:82:24:b4:62:e3:7e:c1:15:bd:cf:ba:49:e2:40:c0:dd:b1:
         c4:71:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org