Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3232352e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          hItvG0vgNHokhYRiCbJ8/4lxrcmsbLjwXclxYIrleJ4=
Subject key identifier:   2A:C7:93:52:87:CE:DE:E3:25:C7:0E:BF:A0:CE:EA:38:87:CD:3C:43
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       51FABBC82A5602C4735E67C63A951E42414CB35D
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203436353632.roa
Signing time:             Sat 19 Feb 2022 11:27:27 +0000
ROA not before:           Sat 19 Feb 2022 11:22:27 +0000
ROA not after:            Sat 18 Feb 2023 11:27:27 +0000
asID:                     46562
IP address blocks:        209.200.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fa:bb:c8:2a:56:02:c4:73:5e:67:c6:3a:95:1e:42:41:4c:b3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 19 11:22:27 2022 GMT
            Not After : Feb 18 11:27:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:f0:c7:34:11:a8:78:8e:e1:ec:5f:8e:ff:
                    2f:71:62:2e:37:53:f8:d1:8a:8b:6b:e5:f2:0e:c6:
                    ad:02:68:5c:40:4e:3f:d3:b8:d9:2e:85:db:bd:9e:
                    ed:58:12:f6:7a:cd:32:53:b5:14:37:c6:6b:95:4c:
                    7d:62:95:49:85:6c:66:cd:11:97:af:62:68:9d:6c:
                    96:16:f7:69:2f:1d:bf:27:e2:74:2e:42:01:37:95:
                    54:ef:72:34:dc:57:dd:c1:59:04:4e:b3:ac:e5:36:
                    21:24:80:ac:42:d1:a5:9a:ed:09:8e:63:31:ce:3a:
                    45:b0:20:d4:b8:89:c0:6d:9a:1e:d9:49:11:fa:ab:
                    be:c0:d2:82:43:53:f7:36:61:e9:9e:a8:d5:03:ac:
                    65:12:f2:46:0b:53:fe:bf:3f:b0:ae:3f:1a:1b:dc:
                    cb:59:4c:76:54:c6:04:1a:cd:d4:81:f9:60:cf:ca:
                    5e:b9:4d:9b:ac:09:db:94:c9:3b:84:09:a8:cc:49:
                    5b:39:6d:98:4f:2e:05:5c:ce:8b:b8:26:1e:3f:83:
                    37:80:26:b6:64:5c:3a:35:c1:82:2a:8b:a6:67:87:
                    a1:83:dd:38:eb:82:f0:d5:fa:bc:44:cc:24:d9:da:
                    46:62:7a:4d:01:07:f2:f4:2a:c5:62:c3:6a:c5:95:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C7:93:52:87:CE:DE:E3:25:C7:0E:BF:A0:CE:EA:38:87:CD:3C:43
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:82:0a:4d:d4:1f:99:fc:76:3e:40:73:2c:4c:8d:21:33:
         2c:26:4d:b0:8a:34:4d:84:bd:67:4c:6f:0f:05:79:e9:4a:54:
         33:51:1a:13:55:49:4b:b5:fd:b1:8d:d1:c3:f0:76:be:eb:eb:
         9d:07:c7:43:6c:c6:65:7d:d6:f0:b8:70:55:5f:84:ce:bf:d8:
         da:30:5c:46:69:10:67:5f:2f:23:13:a1:e2:37:8e:83:99:9d:
         de:46:cc:f1:26:2e:80:ef:d0:f9:09:3d:21:c3:e4:ec:f3:e3:
         b5:3b:ef:6a:1b:8e:0c:32:0e:3b:f6:82:99:25:66:9b:fe:16:
         e5:75:e5:2b:af:37:c5:31:7e:f7:fb:98:35:cf:18:8d:87:64:
         6b:f6:2e:96:a7:98:53:4f:e6:8b:0a:b0:5d:d6:64:ce:d9:51:
         c9:a3:95:49:d0:c7:10:1f:00:2c:e5:ee:f9:cf:70:51:7f:2f:
         62:78:a3:07:a0:30:ba:78:11:53:b9:bc:0c:6f:eb:7f:92:ad:
         55:d9:3f:d9:59:b0:ec:e0:4d:ad:ac:c0:74:3b:de:67:fd:54:
         e7:3e:e5:82:10:ec:48:c6:97:77:1b:b7:15:74:f0:15:a2:04:
         70:79:1c:35:69:e7:1c:01:c7:6b:db:cc:53:5a:f5:7b:7b:65:
         59:53:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net