Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232342e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3232342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          5nK9wxOQUtSrllhhyiwWMszuLMR7IbMBFBB2h9vlkLM=
Subject key identifier:   BC:E5:58:8A:D7:22:B8:1A:66:F0:CE:F7:C3:6C:BB:B0:90:3D:5E:13
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7790DF717E2196DAE0DEE87F3319DDB572400FF5
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232342e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:23 +0000
ROA not before:           Mon 25 Oct 2021 12:52:23 +0000
ROA not after:            Mon 24 Oct 2022 12:57:23 +0000
asID:                     7029
IP address blocks:        209.200.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:90:df:71:7e:21:96:da:e0:de:e8:7f:33:19:dd:b5:72:40:0f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:23 2021 GMT
            Not After : Oct 24 12:57:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:54:40:77:1f:81:95:10:3e:ad:27:10:86:
                    f4:5f:77:20:cb:1c:cf:71:fd:96:6e:1e:97:da:b0:
                    0a:d7:3c:22:c4:9f:63:8e:de:82:4d:96:0a:b3:d9:
                    8b:26:c0:16:7e:a2:f6:d0:5b:87:7e:8b:63:84:16:
                    74:80:2f:97:5d:19:3f:86:68:91:ca:5f:bc:6f:d4:
                    2c:89:c8:7f:4b:28:fe:3c:30:e7:35:b5:44:7a:5f:
                    a4:25:de:85:53:52:13:6f:c1:a1:38:05:03:5e:ba:
                    f5:f2:cf:a2:cb:d7:f6:92:54:54:ee:f2:4d:a8:39:
                    6e:66:b0:19:cf:cb:0a:1c:4b:37:1e:d7:7a:5a:e7:
                    d3:56:24:cc:8c:35:7a:98:e9:27:bf:cb:a2:bb:66:
                    be:ca:65:a8:ca:c6:ee:8c:61:d6:1b:f9:28:60:e1:
                    d4:8e:d2:f0:30:32:6e:03:3c:36:85:12:40:b2:bc:
                    44:e1:83:4b:03:98:34:8c:61:da:34:7c:9f:44:49:
                    e9:10:71:11:22:60:1b:a7:06:3a:56:df:3f:a7:d5:
                    83:72:ba:61:1c:01:6c:c4:fc:52:45:74:9c:1f:27:
                    f5:55:d8:57:ea:f7:b3:55:b8:41:03:fc:ca:4e:f2:
                    e0:04:b4:44:0f:2e:08:57:9b:31:84:3f:3e:38:98:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:58:8A:D7:22:B8:1A:66:F0:CE:F7:C3:6C:BB:B0:90:3D:5E:13
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:fa:d6:83:36:2f:78:5a:50:33:c8:2e:97:88:fe:ee:ab:d4:
         92:33:e1:45:df:71:22:f8:76:26:bb:b1:b0:10:cf:ea:d8:01:
         18:0f:f8:c2:5f:3a:20:f2:18:df:e0:44:96:c1:9b:df:8f:8a:
         33:01:3e:e4:a0:65:6a:03:d8:98:e4:b2:db:a4:f2:11:76:e3:
         75:dd:f6:31:31:0e:3e:22:e0:61:47:00:4d:3d:f2:69:23:19:
         86:6f:89:7e:1e:a1:f0:cc:be:42:f4:27:4c:45:5e:c4:5c:85:
         70:97:07:d0:6b:ca:59:e7:0f:f0:5a:d6:1b:5b:a9:33:a5:e7:
         a6:f1:d7:85:c4:ba:0f:89:7d:82:56:9c:4f:3d:96:12:07:93:
         40:33:19:5f:c1:dc:68:27:73:aa:6d:46:63:9c:97:52:81:29:
         56:18:53:0b:12:44:3c:88:6c:a3:8e:27:58:0e:0b:4c:4d:71:
         f9:82:dc:2d:ff:26:c6:3d:04:8a:52:fe:50:68:72:7d:6c:ec:
         04:9e:71:ff:d4:d3:7b:82:17:01:f7:ec:30:69:a3:74:6a:b9:
         08:c7:e9:3a:af:94:fc:61:9d:23:a3:6a:6b:6d:14:d5:21:a3:
         75:4c:a1:18:34:85:25:b6:0d:e0:7c:92:0a:36:e1:8b:b3:02:
         26:e6:6f:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net