Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137392e302f32342d3234203d3e203333363936.roa
File:                     38352e3230392e3137392e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          B2GYRQbC6ZCF8htSeYXx5I0fOtqNDgGrmywG5xlPc3s=
Subject key identifier:   C2:5A:9E:24:5D:F1:8F:17:6A:61:47:23:34:C1:5C:FE:9F:A5:8C:40
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6E7B395C980EDD0EB953D4523ECC6928CC1533ED
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137392e302f32342d3234203d3e203333363936.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     33696
IP address blocks:        85.209.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:39:5c:98:0e:dd:0e:b9:53:d4:52:3e:cc:69:28:cc:15:33:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:bd:1f:96:21:a7:a0:98:d8:29:5c:bf:5a:
                    e0:f2:5d:89:0e:c7:2f:f7:c2:5b:7f:35:ed:1b:b6:
                    6e:14:c4:dc:2d:07:9a:de:98:4f:3c:4d:ad:cf:b6:
                    3c:9a:26:aa:2f:59:bb:ac:71:5b:f1:a2:62:0e:33:
                    fe:de:aa:bc:3c:41:04:f3:37:37:ec:43:f2:3a:af:
                    e2:ac:4d:b9:2c:d9:a3:8f:65:9d:71:9e:93:b2:1a:
                    62:72:aa:0b:88:83:a9:a7:30:8e:e6:1e:79:7e:b5:
                    0f:98:6d:1f:f9:cd:2d:ae:b2:38:f9:97:af:58:da:
                    5b:ce:c9:c3:5e:fd:db:da:3d:18:db:e7:90:b9:9f:
                    9b:aa:87:c9:1a:83:59:e6:9a:05:70:ce:37:05:6b:
                    be:31:4b:09:e4:45:8f:b8:05:ba:91:83:a4:e3:1e:
                    0a:b8:cc:9f:6e:82:d8:c6:06:cf:2c:21:ee:b5:6c:
                    68:f8:fa:63:bf:0f:6c:c8:dc:65:c8:2e:63:79:5a:
                    43:a0:f2:1d:43:0d:9c:4b:4f:df:8b:66:bd:b5:99:
                    6b:43:86:07:d0:44:94:73:ae:21:c9:a2:16:92:16:
                    01:2d:59:00:c2:93:eb:e4:29:b4:1d:0e:b9:44:7a:
                    12:17:21:c6:67:60:ff:0b:8a:5e:57:1f:63:b4:e6:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5A:9E:24:5D:F1:8F:17:6A:61:47:23:34:C1:5C:FE:9F:A5:8C:40
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38352e3230392e3137392e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:a6:84:86:6b:3f:1e:3e:e4:49:ff:0e:1c:dd:66:58:ec:a4:
         c1:10:f1:5b:6f:c0:b8:ea:68:8f:3d:a2:83:72:03:b8:c3:23:
         9e:19:72:f8:df:01:69:40:9b:09:17:ec:9f:3e:85:9a:4f:ca:
         6b:c1:5a:72:3c:04:b6:0e:68:34:69:03:dc:92:43:3e:eb:6d:
         8d:f3:d5:9d:31:46:f8:cc:10:e5:4a:82:54:9a:d9:c4:9c:b4:
         50:04:6d:72:2e:fc:d8:bf:e7:ad:b7:e8:54:b1:7f:89:86:c2:
         71:d4:cf:73:bd:03:5c:c0:52:10:41:30:87:d2:53:76:b7:6d:
         5e:9b:67:fe:f8:e5:08:f7:c3:ae:de:e1:e9:b5:1a:0c:e5:17:
         9e:00:8e:58:37:71:15:53:81:e8:a6:ee:e0:4a:da:c4:b5:38:
         70:84:e7:c8:52:f2:c3:6e:09:d6:6c:e8:ef:44:1f:e7:67:9e:
         10:14:92:fc:70:ab:d5:dd:2f:70:b8:d7:92:27:3a:d5:9c:01:
         24:4a:01:97:0b:f0:3d:05:ee:23:1c:25:dd:e8:0d:47:01:36:
         b8:0f:15:60:f9:20:a0:68:83:12:13:08:d7:bf:cb:1b:c5:6a:
         50:4c:79:34:51:50:8e:da:44:c8:4d:13:a9:65:32:30:71:8a:
         8c:27:1e:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org