Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa
File:                     3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier:          hs1hIvmjVU77oeC83gdkIdFDRj2gIC0YTLaxTzYUEAI=
Subject key identifier:   F7:DE:1A:BB:04:89:7C:8B:8A:C9:62:13:69:B5:14:5A:04:68:50:5B
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       531F7BDB84A087E5F3B15AEC401F5A0BEFC0FFB8
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa
Signing time:             Fri 31 Mar 2023 19:10:35 +0000
ROA not before:           Fri 31 Mar 2023 19:05:35 +0000
ROA not after:            Fri 29 Mar 2024 19:10:35 +0000
asID:                     142111
IP address blocks:        185.229.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1f:7b:db:84:a0:87:e5:f3:b1:5a:ec:40:1f:5a:0b:ef:c0:ff:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Mar 31 19:05:35 2023 GMT
            Not After : Mar 29 19:10:35 2024 GMT
        Subject: CN=F7DE1ABB04897C8B8AC9621369B5145A0468505B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:9b:fb:db:dc:22:cf:da:d1:bb:27:16:d0:
                    e8:61:2b:78:ee:80:84:ac:ad:a5:e5:7c:59:b2:58:
                    6c:cb:1e:9c:18:82:44:d9:e7:1b:29:f9:8e:3e:c9:
                    c6:76:48:8f:40:c8:2b:78:13:51:5a:b3:00:d1:cb:
                    97:48:a0:12:ea:91:f0:17:61:bc:29:af:6c:6f:7d:
                    cd:1e:a5:6e:4f:32:8d:b8:3c:0a:1a:ad:c3:46:51:
                    e9:e0:4e:94:35:14:ab:2c:54:59:92:62:44:cc:6c:
                    b9:74:f8:34:9d:2a:3c:d6:ac:2b:35:e8:c7:52:1a:
                    09:ca:0e:f6:22:fb:03:5a:4a:72:01:d9:a1:5b:8e:
                    fa:65:cb:2d:56:81:8a:bd:31:af:0e:0a:15:7b:ec:
                    e4:3c:1b:1a:11:30:2b:e2:b0:51:97:42:3f:a0:80:
                    cb:5c:61:73:f7:e6:cf:da:e2:b8:2c:a6:cc:64:cf:
                    91:a5:fe:af:cf:4a:ff:82:86:cf:08:51:a2:47:cb:
                    5d:91:71:7e:2f:0e:30:f9:58:42:56:86:a7:8b:bd:
                    84:a0:29:ce:d5:d7:87:1f:3a:13:6a:58:76:9c:7d:
                    53:b3:a2:50:cf:d4:7e:a3:8c:cd:0b:a3:51:8c:ea:
                    fe:3c:2d:1d:b5:67:6e:35:20:75:f1:b4:dc:1e:a1:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:1A:BB:04:89:7C:8B:8A:C9:62:13:69:B5:14:5A:04:68:50:5B
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e20313432313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:05:22:c3:4b:2b:a8:51:5f:84:02:c8:4c:79:c3:83:22:80:
         e2:d3:1b:39:16:99:a3:4d:6e:e6:a4:89:e3:29:93:90:ac:52:
         63:7e:bb:d5:cc:d0:63:93:05:90:90:44:1c:8b:b1:d1:8e:3d:
         5c:65:5f:c2:c6:4b:63:7b:fa:9b:12:fa:a5:ae:1c:40:37:72:
         7c:fe:f8:92:3b:18:d2:4e:b8:10:97:02:74:0f:39:cf:69:6e:
         05:e3:6f:18:fd:22:ab:e3:40:8c:7c:59:50:bd:e7:76:f4:73:
         32:41:32:e7:4e:22:11:c9:0b:a6:c7:70:98:ff:d2:4d:3f:d0:
         44:54:39:3c:b5:e9:8c:7f:65:8b:3e:4b:0c:ee:be:41:ea:26:
         70:17:be:c5:5b:07:b9:39:31:60:20:83:77:b4:03:43:f5:78:
         7f:bc:0a:23:a2:a0:2a:e2:5a:7b:3d:98:26:29:51:5c:86:da:
         07:9e:c3:18:1a:0b:a2:5b:cb:05:b7:ea:7b:92:77:0d:ea:33:
         f4:e0:f7:87:d5:cf:86:ce:eb:de:13:1a:0f:c1:4f:2f:c4:30:
         2c:22:bd:66:79:ec:95:78:83:4c:3a:6d:97:25:3d:19:00:9c:
         bf:ee:2b:82:f7:55:98:e7:2b:d8:c6:fd:24:77:61:6e:5d:c5:
         dc:1c:16:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org