Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20383334.roa
File:                     3138352e3232392e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          F4Ma//8FN/4V07FQ/SfzHVUvZGNxj8fxQafZx3YrWZc=
Subject key identifier:   6E:83:D1:DA:71:9C:E0:E3:57:B2:3D:FA:14:9D:01:0F:40:11:50:84
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       69E128E67F17111E0788D1FFC66507C6ED1E8587
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20383334.roa
Signing time:             Thu 25 May 2023 00:00:07 +0000
ROA not before:           Wed 24 May 2023 23:55:07 +0000
ROA not after:            Thu 23 May 2024 00:00:07 +0000
asID:                     834
IP address blocks:        185.229.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e1:28:e6:7f:17:11:1e:07:88:d1:ff:c6:65:07:c6:ed:1e:85:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: May 24 23:55:07 2023 GMT
            Not After : May 23 00:00:07 2024 GMT
        Subject: CN=6E83D1DA719CE0E357B23DFA149D010F40115084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:c6:da:42:9d:03:6a:91:4c:cf:21:55:b5:
                    e2:aa:cb:e8:80:a4:ee:e3:24:b4:e5:c1:a4:b3:f1:
                    a1:12:58:d0:2b:59:69:2a:1d:c9:92:a1:96:b1:75:
                    95:e4:81:cc:44:65:ac:51:6a:4d:59:9d:bc:64:a2:
                    f2:4c:b7:b1:df:44:e9:96:e3:bd:05:76:06:bd:13:
                    21:1d:bc:d8:e6:38:5a:aa:3e:31:5b:89:b2:62:bf:
                    92:96:37:33:46:97:d2:81:b1:f8:8e:0e:58:54:27:
                    c9:91:12:45:3c:bf:b4:a9:ee:fe:28:b6:7a:2a:ba:
                    1b:d6:bb:bf:a8:b4:a9:96:6b:b0:91:8c:79:e2:71:
                    98:a2:41:6f:66:e8:cd:63:2d:c1:9d:ad:d0:a0:89:
                    a7:60:12:ee:7d:bf:ff:fb:9c:11:19:a2:c2:15:34:
                    32:70:22:94:32:d9:e6:95:58:87:a1:65:8f:51:2f:
                    c0:fb:aa:0e:80:93:53:21:dd:00:a7:b3:9b:61:f3:
                    79:79:e2:5b:5e:31:24:40:b1:64:b3:48:cc:50:3f:
                    59:f3:a5:0f:37:66:20:b0:7c:8b:25:be:bc:d4:68:
                    0c:5c:42:6d:87:27:f5:27:8b:2a:48:1d:b8:aa:51:
                    75:57:f7:8d:4e:bd:2d:1d:d6:c3:2a:2b:c5:0c:66:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:D1:DA:71:9C:E0:E3:57:B2:3D:FA:14:9D:01:0F:40:11:50:84
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:60:48:fa:9a:69:e2:11:1e:9f:5a:e8:da:05:3a:ce:49:fa:
         7e:d3:a8:f2:6b:c7:cd:83:1c:d7:65:63:47:16:a4:2a:50:22:
         4c:4e:65:5d:b0:98:44:b8:5d:af:f7:f6:2e:3a:68:2c:d1:65:
         82:4f:72:55:bb:0b:57:be:51:03:d9:49:a6:3f:91:bd:1d:02:
         a7:f2:3f:22:8a:3f:d2:a7:90:b1:64:c3:d9:ad:c1:fc:27:2b:
         d4:9e:32:1c:8c:c0:9c:a5:42:f9:d6:a2:f3:a0:87:5f:05:61:
         96:49:4c:a3:69:d7:67:9c:44:bb:0e:2b:65:c0:60:10:f2:b8:
         3c:5b:7d:92:f8:5b:0a:3a:45:ec:db:d4:22:8b:04:c5:69:a6:
         9a:4d:2d:b0:67:ac:f7:87:2d:c9:8f:74:80:1b:99:82:03:e6:
         f5:de:84:99:bf:8a:ab:75:f4:ed:8e:a5:2c:3b:d8:90:da:2a:
         8b:da:10:62:b4:37:27:b7:fd:0b:27:fc:94:34:45:0e:97:95:
         82:0d:c0:64:ba:3e:a5:d6:f1:1b:bf:03:57:89:c3:bc:52:16:
         c1:59:a1:f9:26:11:02:ec:e5:06:74:dd:fc:48:2e:c5:a3:9a:
         b3:4d:19:33:9f:2d:f8:0f:51:32:6f:7e:61:fd:5e:ed:25:00:
         bb:72:ce:01
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIUaeEo5n8XER4HiNH/xmUHxu0ehYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMzA1MjQyMzU1MDdaFw0yNDA1MjMwMDAwMDdaMDMxMTAvBgNV
BAMTKDZFODNEMURBNzE5Q0UwRTM1N0IyM0RGQTE0OUQwMTBGNDAxMTUwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7MbaQp0DapFMzyFVteKqy+iA
pO7jJLTlwaSz8aESWNArWWkqHcmSoZaxdZXkgcxEZaxRak1ZnbxkovJMt7HfROmW
470Fdga9EyEdvNjmOFqqPjFbibJiv5KWNzNGl9KBsfiODlhUJ8mREkU8v7Sp7v4o
tnoquhvWu7+otKmWa7CRjHnicZiiQW9m6M1jLcGdrdCgiadgEu59v//7nBEZosIV
NDJwIpQy2eaVWIehZY9RL8D7qg6Ak1Mh3QCns5th83l54lteMSRAsWSzSMxQP1nz
pQ83ZiCwfIslvrzUaAxcQm2HJ/UniypIHbiqUXVX941OvS0d1sMqK8UMZqIpAgMB
AAGjggIlMIICITAdBgNVHQ4EFgQUboPR2nGc4ONXsj36FJ0BD0ARUIQwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBogYI
KwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzIzOTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXdMA0GCSqGSIb3DQEBCwUAA4IBAQCV
YEj6mmniER6fWujaBTrOSfp+06jya8fNgxzXZWNHFqQqUCJMTmVdsJhEuF2v9/Yu
Omgs0WWCT3JVuwtXvlED2UmmP5G9HQKn8j8iij/Sp5CxZMPZrcH8JyvUnjIcjMCc
pUL51qLzoIdfBWGWSUyjaddnnES7DitlwGAQ8rg8W32S+FsKOkXs29QiiwTFaaaa
TS2wZ6z3hy3Jj3SAG5mCA+b13oSZv4qrdfTtjqUsO9iQ2iqL2hBitDcnt/0LJ/yU
NEUOl5WCDcBkuj6l1vEbvwNXicO8UhbBWaH5JhEC7OUGdN38SC7Fo5qzTRkzny34
D1Eyb35h/V7tJQC7cs4B
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org