Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323039313831.roa
File:                     38352e3230392e3137362e302f32342d3234203d3e20323039313831.roa (raw, json)
Hash identifier:          hsNMcUk8WCUjATSlAVHEldSB53apRyv4fQNi54CPjZg=
Subject key identifier:   60:63:74:7C:4A:14:6C:D7:B9:06:8B:07:4B:DE:33:70:0B:EC:CD:B0
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7CD3F701685BA1665461801D75BFC354E80861CA
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323039313831.roa
Signing time:             Mon 21 Feb 2022 12:40:44 +0000
ROA not before:           Mon 21 Feb 2022 12:35:44 +0000
ROA not after:            Mon 20 Feb 2023 12:40:44 +0000
asID:                     209181
IP address blocks:        85.209.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d3:f7:01:68:5b:a1:66:54:61:80:1d:75:bf:c3:54:e8:08:61:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 21 12:35:44 2022 GMT
            Not After : Feb 20 12:40:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:6f:19:58:f0:6d:38:d5:d8:0f:81:c0:49:
                    66:ee:4e:f1:16:bf:66:85:ff:a3:f7:88:b4:a6:ba:
                    56:eb:d2:d0:70:13:71:f0:8d:80:4e:be:90:45:6d:
                    5a:40:f8:e6:99:c5:f1:78:51:af:a4:15:7f:91:74:
                    c8:86:60:5e:17:80:d8:86:93:60:aa:84:3b:59:a2:
                    4e:cc:ba:51:54:e0:fd:01:11:0c:d4:48:53:45:70:
                    88:fe:39:9b:0b:f4:19:88:f3:c7:42:9f:60:1d:b5:
                    23:e1:f2:3d:87:7e:60:d6:48:25:27:fb:99:3b:2f:
                    54:94:91:17:7d:28:df:59:a7:d5:b7:5d:59:83:92:
                    75:f9:77:aa:cf:21:e4:61:04:90:f7:ab:c1:2f:55:
                    5a:ac:1d:7e:5f:4a:94:a2:3b:8f:1e:de:f2:b9:33:
                    a2:35:9d:ab:46:fc:e7:c9:10:5d:91:85:1b:bf:2c:
                    84:14:7c:b9:f0:26:48:9d:f5:b3:84:53:01:bf:a7:
                    e1:c3:3c:2c:44:cf:47:b4:96:27:50:7e:fa:9d:3d:
                    0a:a4:3e:cf:55:e5:95:a3:e9:70:0b:dd:82:26:3b:
                    69:6d:bf:3a:4e:9d:f7:0d:4c:13:f3:88:e8:71:57:
                    5a:92:e8:98:75:4c:48:87:bd:77:94:b1:45:c0:ab:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:74:7C:4A:14:6C:D7:B9:06:8B:07:4B:DE:33:70:0B:EC:CD:B0
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137362e302f32342d3234203d3e20323039313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:60:5a:a1:a4:e7:8c:4f:e9:2c:c7:a9:ec:eb:60:cd:87:
         ea:63:a0:e6:62:b3:d1:f3:07:ef:50:89:ef:e2:0a:00:88:4a:
         20:cf:69:b1:8c:26:c4:f6:52:cc:fd:73:a5:71:e3:bb:8b:15:
         02:fa:57:40:10:a0:c4:13:f3:67:3d:0a:28:19:79:26:e2:34:
         e3:b5:e4:41:c9:47:fa:a9:f4:61:ef:f8:99:60:54:96:73:90:
         be:09:91:fc:45:7c:61:a9:22:65:c3:ae:54:0b:3d:f8:fc:8e:
         0f:b1:59:c1:3b:fc:5e:b3:35:4f:3d:1e:ae:08:b0:51:49:88:
         1e:8b:d1:22:17:ad:aa:db:4f:11:dc:0e:25:ab:3a:25:76:33:
         5e:fd:ba:63:bb:f0:8e:00:e7:75:e7:c9:1c:a3:7e:32:6f:e0:
         a3:58:4f:37:ae:8c:57:d9:0f:bb:db:87:1d:20:f2:ab:a0:84:
         23:52:73:74:b6:a9:21:c0:0b:94:16:ff:ae:b3:fa:8a:c4:75:
         b8:be:85:42:2e:b7:c5:9b:25:17:45:d7:8f:cd:18:0d:52:91:
         a2:67:d5:86:df:36:ca:8c:c4:b4:ec:cf:8e:17:85:23:b4:5c:
         a0:0b:7d:0b:79:ea:fb:fb:7f:a7:76:4d:47:20:26:47:3b:45:
         fd:5d:d6:4e
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUfNP3AWhboWZUYYAddb/DVOgIYcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAyMjExMjM1NDRaFw0yMzAyMjAxMjQwNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE4MzZGMTk1OEYwNkQzOEQ1
RDgwRjgxQzA0OTY2RUU0RUYxMTZCRjY2ODVGRkEzRjc4OEI0QTZCQTU2RUJEMkQw
NzAxMzcxRjA4RDgwNEVCRTkwNDU2RDVBNDBGOEU2OTlDNUYxNzg1MUFGQTQxNTdG
OTE3NEM4ODY2MDVFMTc4MEQ4ODY5MzYwQUE4NDNCNTlBMjRFQ0NCQTUxNTRFMEZE
MDExMTBDRDQ0ODUzNDU3MDg4RkUzOTlCMEJGNDE5ODhGM0M3NDI5RjYwMURCNTIz
RTFGMjNEODc3RTYwRDY0ODI1MjdGQjk5M0IyRjU0OTQ5MTE3N0QyOERGNTlBN0Q1
Qjc1RDU5ODM5Mjc1Rjk3N0FBQ0YyMUU0NjEwNDkwRjdBQkMxMkY1NTVBQUMxRDdF
NUY0QTk0QTIzQjhGMUVERUYyQjkzM0EyMzU5REFCNDZGQ0U3QzkxMDVEOTE4NTFC
QkYyQzg0MTQ3Q0I5RjAyNjQ4OURGNUIzODQ1MzAxQkZBN0UxQzMzQzJDNDRDRjQ3
QjQ5NjI3NTA3RUZBOUQzRDBBQTQzRUNGNTVFNTk1QTNFOTcwMEJERDgyMjYzQjY5
NkRCRjNBNEU5REY3MEQ0QzEzRjM4OEU4NzE1NzVBOTJFODk4NzU0QzQ4ODdCRDc3
OTRCMTQ1QzBBQkQ0RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0YNvGVjwbTjV2A+BwElm7k7xFr9mhf+j94i0prpW69LQcBNx8I2A
Tr6QRW1aQPjmmcXxeFGvpBV/kXTIhmBeF4DYhpNgqoQ7WaJOzLpRVOD9AREM1EhT
RXCI/jmbC/QZiPPHQp9gHbUj4fI9h35g1kglJ/uZOy9UlJEXfSjfWafVt11Zg5J1
+XeqzyHkYQSQ96vBL1VarB1+X0qUojuPHt7yuTOiNZ2rRvznyRBdkYUbvyyEFHy5
8CZInfWzhFMBv6fhwzwsRM9HtJYnUH76nT0KpD7PVeWVo+lwC92CJjtpbb86Tp33
DUwT84jocVdakuiYdUxIh713lLFFwKvU1wIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FGBjdHxKFGzXuQaLB0veM3AL7M2wMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zODM1MmUzMjMw
MzkyZTMxMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMxMzgzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAFXRsDANBgkqhkiG9w0BAQsFAAOCAQEAW/9gWqGk54xP6SzHqezr
YM2H6mOg5mKz0fMH71CJ7+IKAIhKIM9psYwmxPZSzP1zpXHju4sVAvpXQBCgxBPz
Zz0KKBl5JuI047XkQclH+qn0Ye/4mWBUlnOQvgmR/EV8YakiZcOuVAs9+PyOD7FZ
wTv8XrM1Tz0ergiwUUmIHovRIhetqttPEdwOJas6JXYzXv26Y7vwjgDndefJHKN+
Mm/go1hPN66MV9kPu9uHHSDyq6CEI1JzdLapIcALlBb/rrP6isR1uL6FQi63xZsl
F0XXj80YDVKRomfVht82yozEtOzPjheFI7RcoAt9C3nq+/t/p3ZNRyAmRztF/V3W
Tg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org