Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137382e302f32342d3234203d3e203135383330.roa
File:                     38352e3230392e3137382e302f32342d3234203d3e203135383330.roa (raw, json)
Hash identifier:          B1h1K4fZVUhsWXp7DGuwIY/J8tA4EVQ/XkBKDYUMCBo=
Subject key identifier:   4E:0B:88:D5:79:0D:2D:59:E0:F1:0A:6B:2C:14:B5:DD:64:42:B3:7F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       57BE2EAD1A40B0DF008E68276F0525889BB5FC24
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137382e302f32342d3234203d3e203135383330.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     15830
IP address blocks:        85.209.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:be:2e:ad:1a:40:b0:df:00:8e:68:27:6f:05:25:88:9b:b5:fc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:78:96:9d:96:6f:22:15:35:0a:e7:2c:9c:
                    0f:ca:0a:65:04:d1:2c:12:ed:8c:6e:16:73:8c:9a:
                    1b:7a:8d:15:73:d4:9d:6a:23:f9:c3:04:7a:ac:31:
                    ea:28:50:32:57:34:1d:cd:32:99:4a:64:e1:bf:13:
                    b2:95:32:b1:71:ef:09:31:c8:4c:a8:29:18:e2:27:
                    86:82:48:a0:c3:39:29:c3:6c:ce:8f:e8:08:46:ab:
                    6b:fb:84:4e:33:1e:82:e9:83:22:6b:f4:9d:8f:37:
                    eb:8f:4e:36:8d:3f:b7:03:6b:71:97:32:46:42:e4:
                    7b:26:23:8c:41:b7:bc:af:c3:d0:30:98:f6:f3:d8:
                    84:a2:bc:bf:fd:f6:83:f5:62:68:b7:50:c6:95:a2:
                    83:b6:32:3f:fb:f7:9b:5f:6b:8a:24:8f:63:5b:aa:
                    c3:63:1d:6d:f2:ee:ab:7c:46:3b:5b:34:ce:cd:0a:
                    3d:8a:b8:20:dc:b5:7f:4d:67:98:fe:73:56:a5:74:
                    c6:4e:1f:c4:5c:b2:64:e9:74:aa:8a:59:37:32:5d:
                    76:9d:e7:e6:fd:23:bc:9e:98:e9:88:87:da:ec:42:
                    fa:ac:3a:24:25:40:37:c3:97:db:b1:33:64:ce:3b:
                    d8:84:a0:03:1a:8c:9e:67:1e:ed:d7:df:33:94:c1:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0B:88:D5:79:0D:2D:59:E0:F1:0A:6B:2C:14:B5:DD:64:42:B3:7F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137382e302f32342d3234203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f5:04:ee:ae:5a:29:76:eb:5e:03:e0:51:2f:a9:2c:75:64:
         22:c5:1f:c7:b1:eb:9c:0e:bc:29:fa:83:93:b5:4b:1b:0b:17:
         27:da:24:05:ae:f1:9b:6e:1e:81:79:f2:0e:5f:88:81:c2:4d:
         df:73:43:cf:fc:bf:46:e1:fa:6e:7a:36:fc:f0:0f:0e:ed:3e:
         b5:fb:05:3c:c5:a2:63:5c:24:91:74:f2:e7:93:e9:47:76:15:
         19:13:40:dc:dd:eb:92:75:fe:8c:52:8b:97:68:55:01:b6:07:
         7d:9a:1d:90:e6:41:77:2c:39:ef:a5:e3:06:44:87:63:b4:0c:
         8d:ff:01:65:7a:2a:2a:1e:38:61:6d:e1:9c:7e:be:a4:1d:4e:
         e3:0e:59:dd:83:a4:a8:dd:5e:27:9c:da:ad:06:85:23:7c:8f:
         a8:6d:67:8e:4d:ff:2d:2c:88:65:fc:37:8b:21:8b:ce:19:99:
         2e:43:d3:32:12:82:a6:fe:f1:8b:3b:11:02:3d:b4:81:11:7c:
         1c:ec:7e:be:e8:c9:f4:4f:a1:23:cf:02:07:5f:24:4f:3b:20:
         eb:af:d8:04:d3:dc:d2:44:36:19:96:40:6f:a7:83:3e:d4:14:
         bf:d6:45:20:3c:55:c6:17:16:44:46:58:7c:82:d5:ba:56:ef:
         8a:2f:68:50
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUV74urRpAsN8AjmgnbwUliJu1/CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwNzU4NDNaFw0yMjExMjgwODAzNDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTZGNzc4OTY5RDk2NkYyMjE1
MzUwQUU3MkM5QzBGQ0EwQTY1MDREMTJDMTJFRDhDNkUxNjczOEM5QTFCN0E4RDE1
NzNENDlENkEyM0Y5QzMwNDdBQUMzMUVBMjg1MDMyNTczNDFEQ0QzMjk5NEE2NEUx
QkYxM0IyOTUzMkIxNzFFRjA5MzFDODRDQTgyOTE4RTIyNzg2ODI0OEEwQzMzOTI5
QzM2Q0NFOEZFODA4NDZBQjZCRkI4NDRFMzMxRTgyRTk4MzIyNkJGNDlEOEYzN0VC
OEY0RTM2OEQzRkI3MDM2QjcxOTczMjQ2NDJFNDdCMjYyMzhDNDFCN0JDQUZDM0Qw
MzA5OEY2RjNEODg0QTJCQ0JGRkRGNjgzRjU2MjY4Qjc1MEM2OTVBMjgzQjYzMjNG
RkJGNzlCNUY2QjhBMjQ4RjYzNUJBQUMzNjMxRDZERjJFRUFCN0M0NjNCNUIzNENF
Q0QwQTNEOEFCODIwRENCNTdGNEQ2Nzk4RkU3MzU2QTU3NEM2NEUxRkM0NUNCMjY0
RTk3NEFBOEE1OTM3MzI1RDc2OURFN0U2RkQyM0JDOUU5OEU5ODg4N0RBRUM0MkZB
QUMzQTI0MjU0MDM3QzM5N0RCQjEzMzY0Q0UzQkQ4ODRBMDAzMUE4QzlFNjcxRUVE
RDdERjMzOTRDMUNGRTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlvd4lp2WbyIVNQrnLJwPygplBNEsEu2MbhZzjJobeo0Vc9SdaiP5
wwR6rDHqKFAyVzQdzTKZSmThvxOylTKxce8JMchMqCkY4ieGgkigwzkpw2zOj+gI
Rqtr+4ROMx6C6YMia/Sdjzfrj042jT+3A2txlzJGQuR7JiOMQbe8r8PQMJj289iE
ory//faD9WJot1DGlaKDtjI/+/ebX2uKJI9jW6rDYx1t8u6rfEY7WzTOzQo9irgg
3LV/TWeY/nNWpXTGTh/EXLJk6XSqilk3Ml12nefm/SO8npjpiIfa7EL6rDokJUA3
w5fbsTNkzjvYhKADGoyeZx7t198zlMHP6QIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FE4LiNV5DS1Z4PEKaywUtd1kQrN/MB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zODM1MmUzMjMw
MzkyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzODMzMzAucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABV0bIwDQYJKoZIhvcNAQELBQADggEBAI71BO6uWil2614D4FEvqSx1
ZCLFH8ex65wOvCn6g5O1SxsLFyfaJAWu8ZtuHoF58g5fiIHCTd9zQ8/8v0bh+m56
NvzwDw7tPrX7BTzFomNcJJF08ueT6Ud2FRkTQNzd65J1/oxSi5doVQG2B32aHZDm
QXcsOe+l4wZEh2O0DI3/AWV6KioeOGFt4Zx+vqQdTuMOWd2DpKjdXiec2q0GhSN8
j6htZ45N/y0siGX8N4shi84ZmS5D0zISgqb+8Ys7EQI9tIERfBzsfr7oyfRPoSPP
AgdfJE87IOuv2ATT3NJENhmWQG+ngz7UFL/WRSA8VcYXFkRGWHyC1bpW74ovaFA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org