Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136302e302f32342d3234203d3e20323039313831.roa
File:                     352e3235322e3136302e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          VrKvobENrw9zI1tfqXBOcp0Nts93k6Zjql3uPD/wYnc=
Subject key identifier:   C3:47:BB:6C:28:6B:59:04:35:31:F7:5F:77:F6:09:0C:8E:6A:0D:B3
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       10278E6F83BF5B89D59EC5C9696890569D9F8FE5
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136302e302f32342d3234203d3e20323039313831.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     209181
IP address blocks:        5.252.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:27:8e:6f:83:bf:5b:89:d5:9e:c5:c9:69:68:90:56:9d:9f:8f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:bf:22:0c:52:2e:61:e7:04:50:68:e6:be:
                    8a:84:18:5d:ad:8c:d7:d9:66:7b:cb:36:26:3b:eb:
                    46:18:a6:6d:ba:de:08:66:47:e9:d6:3f:d1:92:75:
                    39:d0:7b:3a:6f:2d:96:5c:6b:6a:2e:97:3d:c7:0c:
                    7f:c0:a2:6f:fc:fb:40:ee:e4:c2:4c:60:09:d6:59:
                    7d:f3:be:96:76:9a:cd:d4:6e:4a:52:be:f2:64:9a:
                    b7:62:34:88:43:61:65:fe:d1:6d:2c:95:75:c2:cb:
                    6d:2a:a7:85:8f:07:c3:a9:71:67:ee:61:14:70:c7:
                    c2:fb:a8:5a:de:7c:3c:16:67:30:51:d6:0d:79:68:
                    26:a1:79:36:ec:3a:4f:27:60:39:36:5b:27:a7:35:
                    89:95:22:56:73:69:10:ee:ac:6f:13:45:5e:e0:ad:
                    c2:24:06:5a:28:07:60:55:03:fa:90:1e:ae:83:66:
                    c9:42:21:05:dc:96:e9:4b:26:99:ec:3c:cb:1c:a2:
                    a8:63:f4:96:9d:ae:ab:73:c8:77:8a:b2:e9:23:83:
                    02:80:0c:1b:1f:4d:b2:97:a5:7f:49:be:3a:8c:70:
                    ab:10:2a:15:be:fc:5d:8b:a3:b2:b4:fe:9e:bf:f1:
                    8b:a2:e1:5a:09:ca:1d:80:81:c5:3d:63:2f:b3:3b:
                    10:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:47:BB:6C:28:6B:59:04:35:31:F7:5F:77:F6:09:0C:8E:6A:0D:B3
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136302e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:39:ab:ac:bb:c8:d0:9c:48:74:1e:03:15:0a:f5:a7:05:82:
         47:ae:8d:06:e2:83:06:26:22:fc:17:ef:84:c4:78:de:c5:26:
         b9:e3:61:17:e1:90:2b:cf:7e:59:6c:9a:e5:fb:f8:99:38:a2:
         1c:0b:7d:c9:77:13:b4:6d:64:db:a6:44:e7:21:26:e8:72:fb:
         4e:2b:bc:95:3c:d8:1e:07:df:2b:03:ef:f3:b3:42:4c:e6:fd:
         78:54:62:cf:0f:37:ca:50:eb:ff:db:e1:22:06:8a:b3:f2:a7:
         6e:1e:f5:39:90:02:67:3e:04:1b:b2:c1:07:09:8a:0a:13:b9:
         7e:0a:87:c9:9c:bc:5e:d2:6e:1f:ce:75:71:fd:7d:f7:53:25:
         d9:24:b0:b1:46:be:ce:27:6e:bd:35:c9:36:9b:2a:b7:b6:00:
         6a:5e:7c:44:44:da:de:d9:37:e0:15:07:6e:55:47:51:25:80:
         d0:65:5e:d9:45:59:a8:db:1d:f5:10:63:98:95:21:41:e4:90:
         31:4e:66:d4:ad:51:a2:bd:bb:d5:ad:0d:5f:d6:16:67:4f:67:
         d5:a7:d7:f2:1f:1d:aa:90:fc:10:c8:51:6d:c3:a7:a2:8a:66:
         8c:a8:81:34:e9:e9:af:63:00:b5:8e:78:e7:2b:05:3c:df:be:
         06:42:0e:4e
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUECeOb4O/W4nVnsXJaWiQVp2fj+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwNzU4NDRaFw0yMjExMjgwODAzNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0VBMEJGMjIwQzUyMkU2MUU3
MDQ1MDY4RTZCRThBODQxODVEQUQ4Q0Q3RDk2NjdCQ0IzNjI2M0JFQjQ2MThBNjZE
QkFERTA4NjY0N0U5RDYzRkQxOTI3NTM5RDA3QjNBNkYyRDk2NUM2QjZBMkU5NzNE
QzcwQzdGQzBBMjZGRkNGQjQwRUVFNEMyNEM2MDA5RDY1OTdERjNCRTk2NzY5QUNE
RDQ2RTRBNTJCRUYyNjQ5QUI3NjIzNDg4NDM2MTY1RkVEMTZEMkM5NTc1QzJDQjZE
MkFBNzg1OEYwN0MzQTk3MTY3RUU2MTE0NzBDN0MyRkJBODVBREU3QzNDMTY2NzMw
NTFENjBENzk2ODI2QTE3OTM2RUMzQTRGMjc2MDM5MzY1QjI3QTczNTg5OTUyMjU2
NzM2OTEwRUVBQzZGMTM0NTVFRTBBREMyMjQwNjVBMjgwNzYwNTUwM0ZBOTAxRUFF
ODM2NkM5NDIyMTA1REM5NkU5NEIyNjk5RUMzQ0NCMUNBMkE4NjNGNDk2OURBRUFC
NzNDODc3OEFCMkU5MjM4MzAyODAwQzFCMUY0REIyOTdBNTdGNDlCRTNBOEM3MEFC
MTAyQTE1QkVGQzVEOEJBM0IyQjRGRTlFQkZGMThCQTJFMTVBMDlDQTFEODA4MUM1
M0Q2MzJGQjMzQjEwMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzqC/IgxSLmHnBFBo5r6KhBhdrYzX2WZ7yzYmO+tGGKZtut4IZkfp
1j/RknU50Hs6by2WXGtqLpc9xwx/wKJv/PtA7uTCTGAJ1ll9876WdprN1G5KUr7y
ZJq3YjSIQ2Fl/tFtLJV1wsttKqeFjwfDqXFn7mEUcMfC+6ha3nw8FmcwUdYNeWgm
oXk27DpPJ2A5NlsnpzWJlSJWc2kQ7qxvE0Ve4K3CJAZaKAdgVQP6kB6ug2bJQiEF
3JbpSyaZ7DzLHKKoY/SWna6rc8h3irLpI4MCgAwbH02yl6V/Sb46jHCrECoVvvxd
i6OytP6ev/GLouFaCcodgIHFPWMvszsQDQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FMNHu2woa1kENTH3X3f2CQyOag2zMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zNTJlMzIzNTMy
MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMTM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAF/KAwDQYJKoZIhvcNAQELBQADggEBAHw5q6y7yNCcSHQeAxUK9acF
gkeujQbigwYmIvwX74TEeN7FJrnjYRfhkCvPfllsmuX7+Jk4ohwLfcl3E7RtZNum
ROchJuhy+04rvJU82B4H3ysD7/OzQkzm/XhUYs8PN8pQ6//b4SIGirPyp24e9TmQ
Amc+BBuywQcJigoTuX4Kh8mcvF7Sbh/OdXH9ffdTJdkksLFGvs4nbr01yTabKre2
AGpefERE2t7ZN+AVB25VR1ElgNBlXtlFWajbHfUQY5iVIUHkkDFOZtStUaK9u9Wt
DV/WFmdPZ9Wn1/IfHaqQ/BDIUW3Dp6KKZoyogTTp6a9jALWOeOcrBTzfvgZCDk4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org