Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38392e31392e34342e302f32322d3234203d3e203631333137.roa
File:                     38392e31392e34342e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          MSVL3CGX7yszAYLFbmHnPaDCiFUEQb+Yodym73i+wRg=
Subject key identifier:   00:B4:21:D1:97:3B:0B:C9:C7:4C:48:70:1D:C0:35:C5:31:03:05:29
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4D9E6800D56EEBC190D4AD9022BF99AC818518E3
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38392e31392e34342e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     61317
IP address blocks:        89.19.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9e:68:00:d5:6e:eb:c1:90:d4:ad:90:22:bf:99:ac:81:85:18:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:12:f6:da:78:9d:13:d7:cd:57:7d:fc:39:10:
                    07:c1:96:02:6b:ae:42:1e:d1:fb:0a:cf:17:06:85:
                    ad:dc:e7:b7:05:cf:40:0b:2d:4f:fb:31:8f:10:a2:
                    6b:a2:d7:51:b3:11:a7:0b:98:cb:87:e0:0c:b7:c0:
                    30:f4:8b:b8:8f:1a:93:02:d2:75:c0:2b:af:16:87:
                    78:34:b8:d4:6f:22:b1:90:60:2b:44:55:f1:10:c6:
                    23:41:1b:a6:74:59:09:ee:16:40:6f:13:3f:38:b5:
                    8f:6c:bc:8c:ad:6e:7f:14:5d:32:fc:e2:4e:36:5a:
                    59:fc:ab:37:4b:ab:81:cc:dc:dd:bf:79:e1:dc:f8:
                    a5:6f:53:dd:c5:0b:e9:ea:83:8f:06:b5:b9:4e:da:
                    5a:d5:ad:5f:d5:be:25:e1:ca:38:98:32:b3:82:66:
                    ce:93:4c:65:ec:76:c6:bd:13:4a:59:15:4e:08:90:
                    03:6a:55:d2:49:26:e2:c9:03:34:be:96:93:41:5c:
                    b4:31:af:57:f5:17:d1:f6:38:79:30:cc:ac:5a:ae:
                    c8:41:58:05:5e:0b:5d:15:c3:33:9a:f8:26:bc:84:
                    79:8d:ff:3a:5f:0e:d6:ae:85:0e:26:ae:cb:39:21:
                    0b:ec:cf:6e:83:20:99:f1:d0:16:3e:93:d3:69:dc:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:21:D1:97:3B:0B:C9:C7:4C:48:70:1D:C0:35:C5:31:03:05:29
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/38392e31392e34342e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.19.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:97:6c:3e:55:71:f2:74:51:62:29:f9:56:49:c5:7f:a7:
         73:59:ca:10:fb:6c:8d:29:f1:5a:13:5b:01:3f:80:f6:50:8d:
         b4:0d:b6:46:2c:16:a8:fe:2e:6c:6b:f1:a2:d1:80:df:a1:c3:
         c5:18:93:c9:d8:c7:11:09:e2:c3:86:e0:a8:95:84:20:54:e8:
         32:bb:9c:51:6b:b6:fe:7e:78:cf:ad:f8:52:4f:7e:f0:40:e5:
         eb:ab:1e:4a:da:cd:e0:e7:7e:c0:34:f0:a3:2b:60:b8:58:63:
         7b:ec:4e:dc:da:72:58:39:dd:b4:d8:97:53:8d:7b:21:b2:85:
         0a:54:d2:c6:72:02:e7:42:ef:79:8f:4f:bf:7d:3a:23:0b:59:
         2c:9b:13:60:4f:01:d6:3a:47:04:9e:0d:6f:03:25:fc:9e:5d:
         cc:eb:02:41:55:4f:5b:0a:de:44:65:23:89:0c:65:b8:0f:e1:
         47:c6:19:fc:75:87:85:0a:e9:f8:25:56:08:2b:54:1d:0a:4d:
         bc:8c:bd:4f:89:f9:55:9f:4c:12:66:1a:52:5d:a3:e4:ad:00:
         dc:66:71:39:84:84:ef:5a:9c:81:bf:e2:21:00:82:52:1f:6c:
         9d:1c:cb:f3:a9:0e:70:18:19:58:7c:82:5d:24:2d:26:b6:fd:
         f8:4f:ae:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org