Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa
File:                     3138352e3231362e3130342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          SC6nlYFE+VxSeWjoJ7uJQnbbPwtrztoQMhDKsdyyi5I=
Subject key identifier:   5C:F9:0E:73:D4:A6:D8:8A:FE:3B:A2:F5:2D:E6:FA:25:ED:FA:94:FF
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       616C42DB200FDD648F41C932DD91497876EE2A27
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:51:26 +0000
ROA not before:           Mon 26 Sep 2022 14:46:26 +0000
ROA not after:            Mon 25 Sep 2023 14:51:26 +0000
asID:                     834
IP address blocks:        185.216.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6c:42:db:20:0f:dd:64:8f:41:c9:32:dd:91:49:78:76:ee:2a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:46:26 2022 GMT
            Not After : Sep 25 14:51:26 2023 GMT
        Subject: CN=5CF90E73D4A6D88AFE3BA2F52DE6FA25EDFA94FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:cf:8c:3e:56:cd:cf:08:3d:a9:92:9d:45:
                    bf:8f:ff:a9:73:5c:80:10:43:9c:5d:48:b7:2d:0c:
                    84:24:86:24:ed:15:87:87:16:e8:ff:d7:9d:dc:ed:
                    35:b7:af:d2:bb:01:49:c8:e9:45:1e:17:35:ff:73:
                    b4:fe:99:46:12:65:bf:8a:e4:8e:31:46:cf:f7:f2:
                    97:d7:69:ae:c3:69:83:67:53:4c:1b:69:fb:54:df:
                    14:4b:4b:a6:82:6d:70:0d:14:b0:cb:06:35:37:d6:
                    58:43:2b:de:9c:32:0e:84:2d:3b:18:6c:5b:f2:01:
                    d4:24:cc:84:aa:68:16:0b:3a:8d:eb:68:e0:28:4f:
                    d2:74:c0:cc:65:77:d1:19:d1:97:2f:14:75:a0:bf:
                    7e:6c:ce:44:67:e4:05:32:8d:b7:a2:d4:1f:b6:01:
                    a9:ec:62:ff:42:4f:87:e5:c2:a0:62:db:5c:22:ce:
                    42:60:bf:73:5c:5d:34:a7:19:9d:30:38:bd:35:41:
                    22:af:c4:f2:20:20:4b:60:b5:a1:1f:e5:08:5d:b6:
                    72:5e:6a:9a:19:c5:f5:d2:3a:6b:2c:e2:1e:cd:38:
                    82:eb:e8:98:0b:7a:a5:10:b3:ba:f5:1f:87:41:2f:
                    bb:eb:f7:fa:0b:3c:3e:c6:ab:aa:0f:61:5c:e7:5d:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F9:0E:73:D4:A6:D8:8A:FE:3B:A2:F5:2D:E6:FA:25:ED:FA:94:FF
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:18:6f:4d:38:25:59:43:ca:e1:f3:60:63:c5:8b:a9:b6:98:
         62:6a:e2:23:3f:d1:58:b4:5d:f4:93:87:91:66:dc:cf:67:4e:
         91:b3:c7:65:1b:87:c8:10:ee:3b:10:2f:c4:56:cc:55:89:ab:
         d0:5b:68:31:cf:89:e3:8e:a8:a0:f0:68:33:fd:4f:c9:b9:cd:
         90:46:70:08:64:5d:a3:d6:11:2b:ff:7e:54:47:a5:e6:68:f6:
         26:32:fd:67:44:60:9e:b5:6f:0b:11:8d:6a:60:28:cd:48:15:
         b0:10:16:02:11:e6:78:e3:86:5f:46:15:be:76:a5:dd:e8:e7:
         69:54:ef:ed:68:45:2d:3a:62:02:36:4a:bc:ca:98:5e:55:5e:
         d9:b4:08:9b:7e:31:8a:4a:8e:6f:7b:f6:20:d0:9e:ee:46:f2:
         d3:3e:c5:ac:3d:da:37:f1:17:63:f3:6d:47:9a:98:4c:c7:ce:
         51:6b:42:0d:4e:a6:27:31:b8:e0:da:eb:0d:84:72:9c:5f:26:
         2d:a2:b7:67:6c:86:cb:46:ed:30:01:eb:2b:0d:27:88:15:c1:
         db:2c:6a:7e:1b:fb:d7:3f:35:d3:a3:0f:17:d9:25:0f:8e:7e:
         23:a0:54:8d:86:2e:fd:7e:8a:6b:71:19:6d:d7:55:6c:51:fe:
         55:82:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org