Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa
File:                     352e3138312e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dYI0tLpZ1V1pKTiTryh39TLQKVmfSbsft/1MGnp4qZU=
Subject key identifier:   B7:2E:C8:94:13:F4:C3:C9:B8:EB:D3:13:E3:E9:08:D2:B2:3F:AD:C2
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       035F52F028C9E73DB73A877120BBF3E02267236D
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:59:26 +0000
ROA not before:           Mon 26 Sep 2022 14:54:26 +0000
ROA not after:            Mon 25 Sep 2023 14:59:26 +0000
asID:                     834
IP address blocks:        5.181.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5f:52:f0:28:c9:e7:3d:b7:3a:87:71:20:bb:f3:e0:22:67:23:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:54:26 2022 GMT
            Not After : Sep 25 14:59:26 2023 GMT
        Subject: CN=B72EC89413F4C3C9B8EBD313E3E908D2B23FADC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:d9:3d:f8:16:02:ad:9f:05:21:32:73:ec:
                    73:d3:bd:fb:ee:28:99:b2:c7:89:11:b6:aa:96:d2:
                    bc:2d:7e:4f:c9:22:57:a8:b0:f2:35:fd:4f:47:45:
                    c8:df:68:4b:23:39:d3:a3:bb:b1:14:e9:43:cf:05:
                    2f:47:10:a3:b2:18:3d:34:7e:ec:3a:81:fb:47:00:
                    8b:34:17:f1:de:b4:a1:63:cd:47:cb:1c:20:d4:bc:
                    5c:53:41:db:1e:a8:73:59:a2:39:99:f5:50:78:ea:
                    00:b2:17:f4:2d:61:ec:42:2a:e7:e5:26:e0:ad:a5:
                    f1:3c:6e:cd:6f:03:11:ed:50:41:71:2c:7c:19:2e:
                    9d:5a:1a:0c:62:c5:6f:d1:12:ce:ec:92:2d:06:10:
                    44:fe:2d:40:24:20:43:13:ee:ac:52:cc:c3:9f:92:
                    37:4d:42:17:c4:7c:bb:6f:10:ad:50:be:98:73:d6:
                    80:be:88:2a:67:3d:61:24:b8:88:66:3d:66:08:a6:
                    68:3e:33:a3:a0:c1:13:3c:56:bb:64:f5:37:f0:4e:
                    74:79:6b:58:f4:1f:90:5e:73:b4:7f:80:25:a2:ea:
                    c2:9c:25:12:d4:68:d2:cc:d8:a7:b7:f3:ca:f9:78:
                    31:7b:0c:b7:31:f2:c5:7e:e6:4c:58:ad:95:4f:ae:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2E:C8:94:13:F4:C3:C9:B8:EB:D3:13:E3:E9:08:D2:B2:3F:AD:C2
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2e:6d:5c:9f:a6:15:6f:0b:ec:27:40:25:12:c8:54:9e:59:
         77:c7:f3:2d:0d:0f:2e:d0:bd:e1:1f:32:ef:18:79:16:48:f3:
         07:4f:1a:a8:2b:c4:b0:6f:88:d9:c0:ea:44:15:43:cb:3b:1f:
         c6:c7:e7:ce:c1:44:a0:24:96:ad:a1:c3:11:7c:a6:81:5c:c7:
         52:dc:6b:b8:f1:da:50:c8:c5:f1:ab:47:60:32:28:53:aa:96:
         bd:ec:33:d0:89:7d:18:fe:2b:42:46:01:0c:a9:6a:a0:01:80:
         7c:d0:2a:cb:ad:5e:d3:e6:d5:7f:59:c9:43:ca:77:35:f4:8d:
         7e:a0:85:34:47:16:3b:2d:ea:16:65:39:57:0f:7f:37:bb:9a:
         bc:13:81:8d:df:32:3d:c1:c1:fa:35:09:b9:62:7c:7d:e9:1b:
         65:44:0f:a2:76:ab:df:a0:bb:e3:7b:cc:89:4d:0c:52:94:68:
         89:2d:6b:ed:df:d6:9d:59:fe:50:b2:90:02:35:91:fd:3e:e0:
         cc:1b:ff:31:bb:f0:6c:0e:ee:cc:8c:57:8d:9d:45:ad:5d:63:
         ab:b7:5c:cb:c7:bd:5a:d2:25:af:f3:c5:18:da:c9:13:e7:8d:
         85:cc:4b:81:e2:82:14:b8:01:8e:f1:f4:2b:cd:56:1f:e4:c6:
         06:d2:ad:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUA19S8CjJ5z23OodxILvz4CJnI20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjA5MjYxNDU0MjZaFw0yMzA5MjUxNDU5MjZaMDMxMTAvBgNV
BAMTKEI3MkVDODk0MTNGNEMzQzlCOEVCRDMxM0UzRTkwOEQyQjIzRkFEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmSNk9+BYCrZ8FITJz7HPTvfvu
KJmyx4kRtqqW0rwtfk/JIleosPI1/U9HRcjfaEsjOdOju7EU6UPPBS9HEKOyGD00
fuw6gftHAIs0F/HetKFjzUfLHCDUvFxTQdseqHNZojmZ9VB46gCyF/QtYexCKufl
JuCtpfE8bs1vAxHtUEFxLHwZLp1aGgxixW/REs7ski0GEET+LUAkIEMT7qxSzMOf
kjdNQhfEfLtvEK1Qvphz1oC+iCpnPWEkuIhmPWYIpmg+M6OgwRM8Vrtk9TfwTnR5
a1j0H5Bec7R/gCWi6sKcJRLUaNLM2Ke388r5eDF7DLcx8sV+5kxYrZVPrvOrAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUty7IlBP0w8m469MT4+kI0rI/rcIwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBnQYI
KwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzovL3IubWFnZWxsYW4u
aXB4by5jb20vcmVwby9lODVlMzM0OC0zMGM3LTQ1YmItOWY4Ni02Mjg1ZGZlOTZl
ZmEtMC8wLzM1MmUzMTM4MzEyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAAW1tTANBgkqhkiG9w0BAQsFAAOCAQEAHS5tXJ+m
FW8L7CdAJRLIVJ5Zd8fzLQ0PLtC94R8y7xh5FkjzB08aqCvEsG+I2cDqRBVDyzsf
xsfnzsFEoCSWraHDEXymgVzHUtxruPHaUMjF8atHYDIoU6qWvewz0Il9GP4rQkYB
DKlqoAGAfNAqy61e0+bVf1nJQ8p3NfSNfqCFNEcWOy3qFmU5Vw9/N7uavBOBjd8y
PcHB+jUJuWJ8fekbZUQPonar36C743vMiU0MUpRoiS1r7d/WnVn+ULKQAjWR/T7g
zBv/MbvwbA7uzIxXjZ1FrV1jq7dcy8e9WtIlr/PFGNrJE+eNhcxLgeKCFLgBjvH0
K81WH+TGBtKt8w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org