Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399045.roa
File:                     AS399045.roa (raw, json)
Hash identifier:          Cm9jy4qRMF03Ra9sZc91fIazppOHYFpmc0zhcllmxzg=
Subject key identifier:   E4:F7:AB:64:DA:7D:9C:56:36:ED:21:39:01:8F:4C:B9:CC:62:25:63
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       52D249E6988EA732CCBD77E52F6D719E0E29DEE5
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399045.roa
Signing time:             Thu 10 Mar 2022 07:30:10 +0000
ROA not before:           Thu 10 Mar 2022 07:25:10 +0000
ROA not after:            Thu 09 Mar 2023 07:30:10 +0000
asID:                     399045
IP address blocks:        191.96.1.0/24 maxlen: 24
                          191.96.2.0/24 maxlen: 24
                          191.96.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:49:e6:98:8e:a7:32:cc:bd:77:e5:2f:6d:71:9e:0e:29:de:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar 10 07:25:10 2022 GMT
            Not After : Mar  9 07:30:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:98:0e:a4:e7:03:5b:2e:e6:88:fb:50:69:3b:
                    16:e1:73:1e:ac:25:7b:2a:f6:c7:eb:f6:6e:b1:84:
                    22:84:6c:0b:36:70:d6:6a:4f:32:2c:b8:fe:a5:48:
                    64:38:05:20:08:1e:5e:52:48:33:90:a0:bb:17:c0:
                    50:ef:b1:cf:af:3b:53:44:d8:10:52:4b:f2:35:f3:
                    e8:8b:32:d1:d0:49:29:5a:3f:a0:e7:6f:55:59:94:
                    17:82:08:35:b0:d7:db:14:c2:40:60:6f:1c:56:84:
                    de:50:8b:9f:05:e1:49:ef:bd:26:a5:22:8c:86:a5:
                    58:8d:8b:18:c5:e8:7c:de:e3:68:6e:49:f2:a2:08:
                    36:79:d0:7e:a8:92:8b:04:ab:e7:8a:61:da:f7:26:
                    35:eb:53:cb:c2:d8:09:c4:67:dd:46:b8:1b:c3:30:
                    04:ac:c3:bf:3c:4c:58:ed:c9:26:9d:11:13:e4:f2:
                    db:d6:ea:99:41:90:ea:ca:55:c2:42:a3:b9:3c:bc:
                    af:ac:b2:64:05:e9:c6:5d:9b:75:66:05:8e:3c:f4:
                    57:03:e6:77:5e:4d:ae:4d:42:70:bf:8e:b4:26:9b:
                    71:72:c9:a1:7a:59:3b:fa:e5:87:af:6a:a2:94:38:
                    47:20:60:08:9c:47:16:3c:4a:49:c2:7e:f1:29:d7:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:AB:64:DA:7D:9C:56:36:ED:21:39:01:8F:4C:B9:CC:62:25:63
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.1.0-191.96.2.255
                  191.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:fc:e9:63:66:98:41:d0:2c:78:57:4d:97:5f:cf:a7:5c:
         90:7a:0b:b6:16:5a:2e:af:32:a2:71:e2:18:fe:ac:5e:a2:17:
         83:b4:91:d7:a9:dc:aa:cd:6a:c5:3b:fd:f6:78:b8:27:e1:69:
         6c:4a:5e:63:ff:83:91:2e:e1:0e:ba:e1:30:88:24:2b:4b:9a:
         ce:b0:35:79:29:1b:0f:b9:ac:7e:af:a5:0e:b6:df:08:fb:fb:
         0a:45:f5:ea:7a:64:7e:b4:54:83:b8:b5:a6:d6:2d:02:40:66:
         69:c0:52:b3:59:02:32:53:86:45:9c:6a:aa:41:03:07:16:0a:
         eb:96:f8:70:14:a6:50:56:53:4a:80:c6:9e:ad:46:3d:ab:15:
         52:a2:b7:69:62:fd:b0:72:3e:77:ee:fe:df:a0:83:99:c2:19:
         08:1a:a5:75:d8:41:3e:02:ee:5a:d6:d6:0a:71:38:bd:ef:38:
         34:c2:8b:bd:38:f1:22:33:49:07:e5:db:81:57:6e:24:56:63:
         67:84:a9:0e:e3:99:36:89:07:89:2c:2e:33:49:fe:c3:3f:51:
         27:b2:ac:fa:79:22:dd:e4:4d:3e:a1:74:ba:e4:e8:24:d6:8c:
         15:8e:3a:bd:c4:84:64:04:4f:80:ed:ad:79:00:de:b3:90:d7:
         73:3f:89:6b
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUUtJJ5piOpzLMvXflL21xng4p3uUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMTAwNzI1MTBaFw0yMzAzMDkwNzMwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ5ODBFQTRFNzAzNUIyRUU2
ODhGQjUwNjkzQjE2RTE3MzFFQUMyNTdCMkFGNkM3RUJGNjZFQjE4NDIyODQ2QzBC
MzY3MEQ2NkE0RjMyMkNCOEZFQTU0ODY0MzgwNTIwMDgxRTVFNTI0ODMzOTBBMEJC
MTdDMDUwRUZCMUNGQUYzQjUzNDREODEwNTI0QkYyMzVGM0U4OEIzMkQxRDA0OTI5
NUEzRkEwRTc2RjU1NTk5NDE3ODIwODM1QjBEN0RCMTRDMjQwNjA2RjFDNTY4NERF
NTA4QjlGMDVFMTQ5RUZCRDI2QTUyMjhDODZBNTU4OEQ4QjE4QzVFODdDREVFMzY4
NkU0OUYyQTIwODM2NzlEMDdFQTg5MjhCMDRBQkU3OEE2MURBRjcyNjM1RUI1M0NC
QzJEODA5QzQ2N0RENDZCODFCQzMzMDA0QUNDM0JGM0M0QzU4RURDOTI2OUQxMTEz
RTRGMkRCRDZFQTk5NDE5MEVBQ0E1NUMyNDJBM0I5M0NCQ0FGQUNCMjY0MDVFOUM2
NUQ5Qjc1NjYwNThFM0NGNDU3MDNFNjc3NUU0REFFNEQ0MjcwQkY4RUI0MjY5Qjcx
NzJDOUExN0E1OTNCRkFFNTg3QUY2QUEyOTQzODQ3MjA2MDA4OUM0NzE2M0M0QTQ5
QzI3RUYxMjlEN0I2MTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxJgOpOcDWy7miPtQaTsW4XMerCV7KvbH6/ZusYQihGwLNnDWak8y
LLj+pUhkOAUgCB5eUkgzkKC7F8BQ77HPrztTRNgQUkvyNfPoizLR0EkpWj+g529V
WZQXggg1sNfbFMJAYG8cVoTeUIufBeFJ770mpSKMhqVYjYsYxeh83uNobknyogg2
edB+qJKLBKvnimHa9yY161PLwtgJxGfdRrgbwzAErMO/PExY7ckmnRET5PLb1uqZ
QZDqylXCQqO5PLyvrLJkBenGXZt1ZgWOPPRXA+Z3Xk2uTUJwv460Jptxcsmhelk7
+uWHr2qilDhHIGAInEcWPEpJwn7xKde2FQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FOT3q2TafZxWNu0hOQGPTLnMYiVjMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMzOTkwNDUucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgAB
MBQwDAMEAL9gAQMEAL9gAgMEAL9gJTANBgkqhkiG9w0BAQsFAAOCAQEAH8/86WNm
mEHQLHhXTZdfz6dckHoLthZaLq8yonHiGP6sXqIXg7SR16ncqs1qxTv99ni4J+Fp
bEpeY/+DkS7hDrrhMIgkK0uazrA1eSkbD7msfq+lDrbfCPv7CkX16npkfrRUg7i1
ptYtAkBmacBSs1kCMlOGRZxqqkEDBxYK65b4cBSmUFZTSoDGnq1GPasVUqK3aWL9
sHI+d+7+36CDmcIZCBqlddhBPgLuWtbWCnE4ve84NMKLvTjxIjNJB+XbgVduJFZj
Z4SpDuOZNokHiSwuM0n+wz9RJ7Ks+nki3eRNPqF0uuToJNaMFY46vcSEZARPgO2t
eQDes5DXcz+Jaw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org