Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323034383734.roa
File:                     3138352e3232392e3232312e302f32342d3234203d3e20323034383734.roa (raw, json)
Hash identifier:          8BwlmgEU9fv86utDdhpGGKTB+40/0WbxfJh6l+66+W0=
Subject key identifier:   26:AF:50:0A:9F:EF:EB:1C:B4:1F:F0:1C:82:44:84:85:74:F2:41:15
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       6380FFF9B143183B75C593D3F7A9F9EDBAA8D409
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323034383734.roa
Signing time:             Wed 22 Feb 2023 16:46:48 +0000
ROA not before:           Wed 22 Feb 2023 16:41:48 +0000
ROA not after:            Wed 21 Feb 2024 16:46:48 +0000
asID:                     204874
IP address blocks:        185.229.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:80:ff:f9:b1:43:18:3b:75:c5:93:d3:f7:a9:f9:ed:ba:a8:d4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Feb 22 16:41:48 2023 GMT
            Not After : Feb 21 16:46:48 2024 GMT
        Subject: CN=26AF500A9FEFEB1CB41FF01C8244848574F24115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:88:42:1c:31:b3:1b:7e:6f:2d:cd:0c:20:
                    f4:3b:c7:1f:4a:20:ee:11:5d:86:67:50:4f:a0:3b:
                    5b:6c:17:a8:5c:bb:aa:5e:54:9a:04:b1:c6:53:81:
                    4a:81:de:ee:48:0c:a3:8a:ba:8d:9e:f6:6c:30:23:
                    70:56:02:79:c0:0d:a1:3f:72:27:c9:06:67:be:a1:
                    a9:01:7e:31:0f:46:bc:a8:78:17:cd:e0:21:24:a5:
                    77:fb:b4:1e:85:f9:f0:0c:bf:4e:b9:8d:e5:47:cc:
                    66:c9:82:16:a2:f6:27:fe:02:70:64:60:40:7f:a6:
                    75:56:b3:46:22:72:3a:fd:ee:b6:8c:86:4b:9e:4a:
                    4d:40:d8:b2:6d:33:ed:6b:3f:b1:3e:02:4b:b1:32:
                    90:f4:f7:19:bd:64:ca:0d:6f:b6:8e:25:35:d1:db:
                    dd:bc:b3:6b:aa:a6:b0:51:11:f9:9e:19:8a:e4:99:
                    a5:6e:7e:e8:54:cf:c3:38:a2:93:c1:67:b0:4c:a4:
                    b7:51:2a:af:e6:d6:80:d7:88:46:bf:06:a2:48:4c:
                    67:ab:94:a7:a9:8f:dc:42:ac:29:77:6d:8b:e5:19:
                    f9:a9:69:a3:3c:c4:1b:20:75:87:0f:65:93:54:a8:
                    a8:34:8e:1a:8b:c1:f2:f9:80:5e:c7:da:7a:8e:b4:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AF:50:0A:9F:EF:EB:1C:B4:1F:F0:1C:82:44:84:85:74:F2:41:15
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323034383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:04:39:d9:34:23:a5:8f:eb:8e:52:c3:00:6b:0f:63:a3:
         22:bc:04:c6:f0:7b:ff:d0:80:ca:f4:60:59:30:eb:2f:54:bf:
         12:c2:7b:52:52:2a:b2:ff:4c:e4:cb:5d:40:ca:f2:38:30:b6:
         2a:9d:a0:9f:63:5a:73:9c:a5:24:cd:9b:86:7e:fe:c5:66:b4:
         83:c1:09:d6:08:01:08:e7:02:7b:a3:fb:b2:1e:ae:27:d6:07:
         1c:3b:8e:1e:c6:dd:e6:5a:9d:c3:1b:0e:d0:d9:7c:cc:65:62:
         21:fb:47:29:63:91:32:9a:ba:eb:5e:d3:77:2f:51:f6:13:76:
         c5:02:6c:02:dc:60:02:7a:aa:8c:a8:bc:c1:8c:0f:e4:bb:01:
         34:13:00:40:47:e3:43:74:55:80:33:30:64:9e:a0:a2:1a:ab:
         9a:3a:26:2d:d1:4e:7b:7e:2b:12:6c:ce:ab:29:52:63:23:9b:
         98:0f:af:ce:fc:2a:ce:00:f5:88:a2:5a:7b:ac:8f:26:37:24:
         79:a7:2e:4d:6f:59:0a:7c:67:81:0b:18:14:51:8a:09:53:88:
         93:59:fd:a5:10:7a:fd:c3:23:dc:5e:fd:57:c1:e9:e9:2d:67:
         96:c1:5f:f0:c3:76:b2:88:ae:07:45:7b:bd:45:be:de:ae:6e:
         6f:b1:d3:57
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUY4D/+bFDGDt1xZPT96n57bqo1AkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMzAyMjIxNjQxNDhaFw0yNDAyMjExNjQ2NDhaMDMxMTAvBgNV
BAMTKDI2QUY1MDBBOUZFRkVCMUNCNDFGRjAxQzgyNDQ4NDg1NzRGMjQxMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxIhCHDGzG35vLc0MIPQ7xx9K
IO4RXYZnUE+gO1tsF6hcu6peVJoEscZTgUqB3u5IDKOKuo2e9mwwI3BWAnnADaE/
cifJBme+oakBfjEPRryoeBfN4CEkpXf7tB6F+fAMv065jeVHzGbJghai9if+AnBk
YEB/pnVWs0Yicjr97raMhkueSk1A2LJtM+1rP7E+AkuxMpD09xm9ZMoNb7aOJTXR
2928s2uqprBREfmeGYrkmaVufuhUz8M4opPBZ7BMpLdRKq/m1oDXiEa/BqJITGer
lKepj9xCrCl3bYvlGfmpaaM8xBsgdYcPZZNUqKg0jhqLwfL5gF7H2nqOtH2xAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUJq9QCp/v6xy0H/AcgkSEhXTyQRUwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBqAYI
KwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzIzOTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMDM0MzgzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXdMA0GCSqGSIb3DQEBCwUA
A4IBAQApywQ52TQjpY/rjlLDAGsPY6MivATG8Hv/0IDK9GBZMOsvVL8SwntSUiqy
/0zky11AyvI4MLYqnaCfY1pznKUkzZuGfv7FZrSDwQnWCAEI5wJ7o/uyHq4n1gcc
O44ext3mWp3DGw7Q2XzMZWIh+0cpY5EymrrrXtN3L1H2E3bFAmwC3GACeqqMqLzB
jA/kuwE0EwBAR+NDdFWAMzBknqCiGquaOiYt0U57fisSbM6rKVJjI5uYD6/O/CrO
APWIolp7rI8mNyR5py5Nb1kKfGeBCxgUUYoJU4iTWf2lEHr9wyPcXv1XwenpLWeW
wV/ww3ayiK4HRXu9Rb7erm5vsdNX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org