Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203630373231.roa
File:                     3138352e3137362e39332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          Scr8iv4JkpPkZEWJJkmHpJIz2XgqiiTvCjIfTjXi5LY=
Subject key identifier:   D7:2C:33:10:DC:BF:AD:DA:F4:9E:03:C1:48:72:D8:82:AC:AA:ED:2A
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       4C9479DCD38CAC2A04B009B95C164392F1EBA2A1
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203630373231.roa
Signing time:             Mon 26 Sep 2022 14:48:41 +0000
ROA not before:           Mon 26 Sep 2022 14:43:41 +0000
ROA not after:            Mon 25 Sep 2023 14:48:41 +0000
asID:                     60721
IP address blocks:        185.176.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:79:dc:d3:8c:ac:2a:04:b0:09:b9:5c:16:43:92:f1:eb:a2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:43:41 2022 GMT
            Not After : Sep 25 14:48:41 2023 GMT
        Subject: CN=D72C3310DCBFADDAF49E03C14872D882ACAAED2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:db:c1:ef:5a:ce:e8:a9:a6:3c:ce:40:4f:
                    9e:b9:c7:f6:44:89:80:aa:00:12:49:aa:ee:a0:47:
                    e7:4a:ea:0d:63:ba:dc:42:fa:c4:03:08:c7:9d:86:
                    b5:32:7c:aa:d4:8d:36:2d:8e:bb:c8:11:2b:69:70:
                    22:5d:2e:c5:89:f6:45:da:c7:c9:8e:04:cf:07:9b:
                    25:7e:71:d9:6b:37:87:86:7a:3e:fb:ee:69:d1:91:
                    54:ea:f9:ce:c0:1f:49:e9:82:5f:45:78:59:ac:9e:
                    35:7b:06:27:c9:4b:67:29:c6:21:cc:79:b2:68:e2:
                    cd:c1:0b:5f:39:08:88:38:29:63:1e:31:da:a0:e5:
                    a8:85:ba:d1:b6:4f:98:8b:19:18:16:03:de:0e:38:
                    48:4d:15:38:b4:2a:3a:af:b5:7d:79:2b:38:b5:cd:
                    46:41:1c:1c:78:dd:81:d9:ae:f2:97:6b:14:6d:9e:
                    11:c6:0c:a6:92:17:dd:29:0e:52:a2:7f:81:6f:94:
                    ac:52:00:9b:1b:ee:40:18:34:52:2e:9f:cd:d9:6f:
                    df:a8:69:67:dd:f0:42:db:ca:cd:e1:e4:30:45:ff:
                    10:d1:a0:0b:37:a2:c0:f9:a2:c8:d1:9b:91:16:e2:
                    9e:33:cf:20:b5:ec:df:30:1b:11:5c:b6:f2:63:76:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:33:10:DC:BF:AD:DA:F4:9E:03:C1:48:72:D8:82:AC:AA:ED:2A
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:f2:5b:70:54:b7:45:60:1c:5d:0c:b5:36:23:25:4d:ea:
         62:1c:c7:ac:76:94:f0:a3:d9:40:b3:1f:cf:c6:27:6f:6b:e2:
         09:ab:72:9f:68:52:69:e1:5b:d3:3f:d4:29:d3:d4:dc:a9:a9:
         1a:fe:f7:a1:03:2f:e8:3c:77:94:7c:d5:36:61:53:5e:9e:3c:
         2e:ed:d1:f1:4d:d8:f7:94:ac:41:69:36:c3:7b:e1:26:eb:96:
         07:7a:7c:0b:0b:a8:de:34:47:fc:36:c3:2f:3e:b2:57:4a:5b:
         d2:fa:a4:11:89:16:7e:d8:16:6f:f8:94:e7:25:14:42:44:cc:
         7c:93:39:92:75:a9:b7:8a:a9:97:24:16:65:78:95:68:75:05:
         7c:31:cd:20:6e:23:43:1a:0a:be:a6:cc:7e:a2:6e:ac:32:02:
         6e:a2:1f:f5:d8:f4:b7:96:c3:69:15:53:9c:e6:a9:16:53:ec:
         2f:5c:84:61:91:3b:62:99:26:6d:ea:01:91:2d:ba:c3:10:5d:
         a9:a6:e2:fe:ae:f9:8b:d9:71:72:e1:52:88:50:22:5f:4f:91:
         a5:49:bd:a3:bd:76:80:f2:3e:93:bc:e9:28:1e:be:47:50:87:
         30:c2:78:b7:32:62:de:c0:d9:ee:a0:72:9c:93:00:c6:d5:ac:
         07:fa:63:ae
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUTJR53NOMrCoEsAm5XBZDkvHroqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjA5MjYxNDQzNDFaFw0yMzA5MjUxNDQ4NDFaMDMxMTAvBgNV
BAMTKEQ3MkMzMzEwRENCRkFEREFGNDlFMDNDMTQ4NzJEODgyQUNBQUVEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+9vB71rO6KmmPM5AT565x/ZE
iYCqABJJqu6gR+dK6g1jutxC+sQDCMedhrUyfKrUjTYtjrvIEStpcCJdLsWJ9kXa
x8mOBM8HmyV+cdlrN4eGej777mnRkVTq+c7AH0npgl9FeFmsnjV7BifJS2cpxiHM
ebJo4s3BC185CIg4KWMeMdqg5aiFutG2T5iLGRgWA94OOEhNFTi0KjqvtX15Kzi1
zUZBHBx43YHZrvKXaxRtnhHGDKaSF90pDlKif4FvlKxSAJsb7kAYNFIun83Zb9+o
aWfd8ELbys3h5DBF/xDRoAs3osD5osjRm5EW4p4zzyC17N8wGxFctvJjdsTFAgMB
AAGjggInMIICIzAdBgNVHQ4EFgQU1ywzENy/rdr0ngPBSHLYgqyq7SowHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBpAYI
KwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMxMzczNjJlMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM2MzAzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5sF0wDQYJKoZIhvcNAQELBQADggEB
AGnQ8ltwVLdFYBxdDLU2IyVN6mIcx6x2lPCj2UCzH8/GJ29r4gmrcp9oUmnhW9M/
1CnT1NypqRr+96EDL+g8d5R81TZhU16ePC7t0fFN2PeUrEFpNsN74Sbrlgd6fAsL
qN40R/w2wy8+sldKW9L6pBGJFn7YFm/4lOclFEJEzHyTOZJ1qbeKqZckFmV4lWh1
BXwxzSBuI0MaCr6mzH6ibqwyAm6iH/XY9LeWw2kVU5zmqRZT7C9chGGRO2KZJm3q
AZEtusMQXamm4v6u+YvZcXLhUohQIl9PkaVJvaO9doDyPpO86SgevkdQhzDCeLcy
Yt7A2e6gcpyTAMbVrAf6Y64=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org