Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37342e302f32332d3234203d3e203631333137.roa
File:                     38352e3230382e37342e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          p90OEGk+nYqJv6gm65MPUfEvZEaRII0eQgrk0RmY6Ck=
Subject key identifier:   D4:0B:37:87:19:97:90:43:6A:BD:30:68:1D:F0:45:0D:BE:CB:74:2B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       55E8059326542C28A8BDE367DF6A05E50DA0EFF3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37342e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     61317
IP address blocks:        85.208.74.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e8:05:93:26:54:2c:28:a8:bd:e3:67:df:6a:05:e5:0d:a0:ef:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject: CN=3082010A0282010100A70C5FE0EC0B4181AA4AF17631C24B11D0AF9FFC9A04F7041F443077FA386BB085F4B7A6B2171373889B48A9EA8B5E8F82728642FDB60D16BD7209251BFD2E7E515DDBE20EE11EBC3BE8C608FC3D5BE71004641725D5761087446511892DBEDA9D4F5F81CCF8F65073FD85ACCC7111BA50BACC7CE17E9474036B47B36CEFF9CE9A64C2DD9A72B9708B6CC04698AA13D472F002619EDA6704A1C33173AB336DAB2C7C421CD6FED1A49F358D301596F0A61C12BA7602AAD960A54B94F44E189CBA9A66D33DDBB9BE1750F495B300127FE6038AB456BA257EF26E1ABBEA107C697DC1025A1DD47E883CBFEB9AF45C79DD455E0FB12D39355626F654F3B4D28996430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:5f:e0:ec:0b:41:81:aa:4a:f1:76:31:c2:
                    4b:11:d0:af:9f:fc:9a:04:f7:04:1f:44:30:77:fa:
                    38:6b:b0:85:f4:b7:a6:b2:17:13:73:88:9b:48:a9:
                    ea:8b:5e:8f:82:72:86:42:fd:b6:0d:16:bd:72:09:
                    25:1b:fd:2e:7e:51:5d:db:e2:0e:e1:1e:bc:3b:e8:
                    c6:08:fc:3d:5b:e7:10:04:64:17:25:d5:76:10:87:
                    44:65:11:89:2d:be:da:9d:4f:5f:81:cc:f8:f6:50:
                    73:fd:85:ac:cc:71:11:ba:50:ba:cc:7c:e1:7e:94:
                    74:03:6b:47:b3:6c:ef:f9:ce:9a:64:c2:dd:9a:72:
                    b9:70:8b:6c:c0:46:98:aa:13:d4:72:f0:02:61:9e:
                    da:67:04:a1:c3:31:73:ab:33:6d:ab:2c:7c:42:1c:
                    d6:fe:d1:a4:9f:35:8d:30:15:96:f0:a6:1c:12:ba:
                    76:02:aa:d9:60:a5:4b:94:f4:4e:18:9c:ba:9a:66:
                    d3:3d:db:b9:be:17:50:f4:95:b3:00:12:7f:e6:03:
                    8a:b4:56:ba:25:7e:f2:6e:1a:bb:ea:10:7c:69:7d:
                    c1:02:5a:1d:d4:7e:88:3c:bf:eb:9a:f4:5c:79:dd:
                    45:5e:0f:b1:2d:39:35:56:26:f6:54:f3:b4:d2:89:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:37:87:19:97:90:43:6A:BD:30:68:1D:F0:45:0D:BE:CB:74:2B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230382e37342e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:c6:43:90:ff:c5:8c:5d:08:bb:5e:9b:cb:00:48:dd:82:e5:
         e0:02:7e:75:ad:af:14:be:1e:0f:3d:69:4e:9a:eb:8d:86:2f:
         09:1b:82:26:6d:f3:d9:36:1e:99:3d:17:d1:cb:d5:d4:c9:98:
         54:5c:f2:64:17:7c:17:57:85:f7:f8:94:16:b4:24:b1:98:d0:
         ce:6e:c8:e2:8c:ca:19:60:f3:aa:16:85:a4:c4:39:1e:08:da:
         d9:12:6e:ef:cb:9a:26:6a:53:07:ba:44:15:40:f3:30:4d:e1:
         2b:4b:7b:dd:45:e5:f8:de:1f:af:1a:7b:38:d5:eb:ac:13:a9:
         f4:bb:72:1d:78:26:bf:67:fe:46:df:40:f6:8c:ab:12:fd:f7:
         d2:49:eb:43:9e:b5:76:b1:be:86:50:41:78:e6:51:d0:53:b7:
         6e:60:78:8e:b1:40:12:4e:a8:5d:58:5c:11:c5:e2:80:57:5a:
         69:36:bc:fd:ba:d0:42:fd:26:00:e3:65:15:9f:b1:46:4e:be:
         36:a1:3f:d7:32:49:47:48:cb:1d:73:5b:e7:b2:63:14:83:8a:
         1c:b3:b9:89:34:af:3c:b0:07:af:2c:17:2f:60:4a:e0:95:a0:
         20:93:0c:ae:6b:21:60:e3:6f:03:9d:b8:3e:91:9f:f8:34:ae:
         c7:76:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org