Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa
File:                     3138352e3137362e39332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          RHLUfQF23y/RbUDfrjtRrhie3jO/wgtCXAbMGY0Vaww=
Subject key identifier:   5F:8C:0B:84:68:2C:8D:04:7A:A1:82:3A:53:5A:AF:6F:CD:72:22:9C
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       3DA36A45F162DF3B04252823BD20477E519EB2D6
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:48:58 +0000
ROA not before:           Mon 26 Sep 2022 14:43:58 +0000
ROA not after:            Mon 25 Sep 2023 14:48:58 +0000
asID:                     834
IP address blocks:        185.176.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a3:6a:45:f1:62:df:3b:04:25:28:23:bd:20:47:7e:51:9e:b2:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:43:58 2022 GMT
            Not After : Sep 25 14:48:58 2023 GMT
        Subject: CN=5F8C0B84682C8D047AA1823A535AAF6FCD72229C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:57:12:94:9f:18:31:8b:26:a5:24:58:6a:
                    6c:ad:c6:6d:39:37:f8:54:8f:38:e4:02:7e:3c:f1:
                    fc:7c:66:a4:07:45:45:fd:0e:95:02:33:5d:fc:77:
                    d1:b5:22:db:4e:79:3a:46:e7:ac:34:b9:c9:f9:d2:
                    e8:89:88:8d:d1:e1:c8:ab:ba:b2:5e:1b:86:f2:e1:
                    ae:16:30:6f:c9:4c:3c:48:86:c3:d0:5b:dd:e5:49:
                    91:3f:33:3d:9d:2b:82:a2:f1:aa:9b:2d:66:bb:48:
                    31:cd:28:9f:aa:1a:a5:3c:17:89:85:74:6f:26:cf:
                    7c:41:82:c1:ab:fc:e3:e8:d1:2e:3e:ee:e5:84:fd:
                    59:6f:75:22:24:73:9f:17:cd:09:f0:09:2d:ea:ca:
                    4f:2c:c6:20:55:d1:20:e5:48:8c:8e:9c:29:63:ab:
                    89:5c:2d:1a:02:c0:3d:af:96:5c:2e:04:72:db:21:
                    6f:7f:dc:b9:77:3e:4d:b5:d5:7c:16:6a:ce:06:4d:
                    cc:e7:ee:65:4c:bf:fc:41:6e:00:94:40:8a:d9:66:
                    7b:47:16:10:94:c6:16:50:6b:d2:06:7f:ab:ce:10:
                    34:69:38:20:35:a7:43:bb:fa:d4:f8:4e:58:ea:f8:
                    0e:74:9f:cf:b1:71:e1:82:67:ad:77:c9:34:f6:ca:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:0B:84:68:2C:8D:04:7A:A1:82:3A:53:5A:AF:6F:CD:72:22:9C
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3137362e39332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:5a:ce:c2:da:f6:29:3f:89:d5:7d:60:d7:18:56:f5:ea:d6:
         1c:a0:57:96:e2:0b:f6:be:97:60:be:7e:29:94:fb:9a:fd:e4:
         51:3b:4c:e1:c3:0d:b3:47:91:b9:0f:c7:0f:97:b1:51:15:7c:
         92:55:10:da:d5:9e:62:43:fa:74:83:6f:18:45:2d:55:7f:da:
         74:37:ef:ad:1f:c5:af:b1:eb:bc:ce:dd:f0:06:d5:6f:12:2b:
         bb:c4:21:e2:5a:a2:68:97:41:4c:64:65:88:ec:a2:b0:d5:4b:
         73:5b:c7:e1:78:30:b1:db:d9:d9:ba:9b:c5:fd:4f:36:a9:e8:
         85:7a:1a:bb:65:6e:e6:08:05:3c:8a:31:53:34:af:aa:ab:f9:
         dc:fc:f9:e3:5e:b8:29:8d:d7:be:aa:48:12:ae:dd:b8:fd:a9:
         46:54:95:5f:7d:24:34:fe:8e:09:61:50:97:a4:bc:22:04:89:
         3d:17:e8:ac:da:bf:b5:3f:58:cf:f9:6f:21:24:ba:63:dc:f1:
         30:44:b1:8e:34:e4:50:c3:d4:d7:4d:d1:e3:85:25:ca:47:38:
         99:6c:c9:5c:8d:b9:79:96:e4:ef:98:2b:ad:f9:84:ed:38:7f:
         99:65:dd:20:f7:91:89:97:f1:14:cd:cc:36:06:9a:98:a8:f0:
         bf:c8:d6:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUPaNqRfFi3zsEJSgjvSBHflGestYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjA5MjYxNDQzNThaFw0yMzA5MjUxNDQ4NThaMDMxMTAvBgNV
BAMTKDVGOEMwQjg0NjgyQzhEMDQ3QUExODIzQTUzNUFBRjZGQ0Q3MjIyOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u1cSlJ8YMYsmpSRYamytxm05
N/hUjzjkAn488fx8ZqQHRUX9DpUCM138d9G1IttOeTpG56w0ucn50uiJiI3R4cir
urJeG4by4a4WMG/JTDxIhsPQW93lSZE/Mz2dK4Ki8aqbLWa7SDHNKJ+qGqU8F4mF
dG8mz3xBgsGr/OPo0S4+7uWE/VlvdSIkc58XzQnwCS3qyk8sxiBV0SDlSIyOnClj
q4lcLRoCwD2vllwuBHLbIW9/3Ll3Pk211XwWas4GTczn7mVMv/xBbgCUQIrZZntH
FhCUxhZQa9IGf6vOEDRpOCA1p0O7+tT4Tljq+A50n8+xceGCZ613yTT2yu4LAgMB
AAGjggIjMIICHzAdBgNVHQ4EFgQUX4wLhGgsjQR6oYI6U1qvb81yIpwwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBoAYI
KwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMxMzczNjJlMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALmwXTANBgkqhkiG9w0BAQsFAAOCAQEADVrO
wtr2KT+J1X1g1xhW9erWHKBXluIL9r6XYL5+KZT7mv3kUTtM4cMNs0eRuQ/HD5ex
URV8klUQ2tWeYkP6dINvGEUtVX/adDfvrR/Fr7HrvM7d8AbVbxIru8Qh4lqiaJdB
TGRliOyisNVLc1vH4XgwsdvZ2bqbxf1PNqnohXoau2Vu5ggFPIoxUzSvqqv53Pz5
4164KY3XvqpIEq7duP2pRlSVX30kNP6OCWFQl6S8IgSJPRforNq/tT9Yz/lvISS6
Y9zxMESxjjTkUMPU103R44Ulykc4mWzJXI25eZbk75grrfmE7Th/mWXdIPeRiZfx
FM3MNgaamKjwv8jWMw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org