Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e2031323339.roa
File:                     3230392e3230302e3233302e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          JEJSBIGbDCaqCN5nDaN2uYmP9ZZ5FM7sDedSzXFtrmo=
Subject key identifier:   11:8C:4E:3F:36:AF:49:87:E3:9C:BA:4F:E0:FB:C8:01:18:EA:91:8E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       308C721BE327E05003C31238591AB3ED5317F8D9
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e2031323339.roa
Signing time:             Sat 05 Mar 2022 04:17:21 +0000
ROA not before:           Sat 05 Mar 2022 04:12:21 +0000
ROA not after:            Sat 04 Mar 2023 04:17:21 +0000
asID:                     1239
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:72:1b:e3:27:e0:50:03:c3:12:38:59:1a:b3:ed:53:17:f8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  5 04:12:21 2022 GMT
            Not After : Mar  4 04:17:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:13:32:56:52:22:05:3e:db:28:fa:01:1f:
                    89:89:14:8f:63:c6:cc:eb:a0:3d:ea:bc:7a:d7:e6:
                    ec:74:8a:b9:d3:74:e3:93:fa:11:7d:5a:58:d5:ff:
                    ca:57:19:5f:e6:ef:f8:10:48:23:f5:f5:14:19:4b:
                    47:19:f8:05:9d:21:ff:e0:6d:cb:8d:58:ea:f4:42:
                    c9:a1:2f:32:ac:54:06:b9:cc:75:69:28:40:74:87:
                    e7:52:1e:99:06:fd:07:13:9c:ce:84:13:a2:68:cc:
                    a3:2c:99:8e:1e:59:c1:20:92:b8:31:44:11:86:b2:
                    d0:df:05:6a:78:0b:b9:a0:74:ee:90:10:e0:74:14:
                    e8:25:84:64:92:19:46:12:31:aa:a9:46:9b:97:ac:
                    51:94:ca:a5:ec:61:b0:46:66:2a:56:82:33:0b:10:
                    b5:d1:c2:f0:94:94:9b:c3:73:3d:60:70:a0:d5:72:
                    35:0c:fa:71:8d:cc:18:ba:2d:e5:c1:fb:9f:c7:52:
                    08:5b:8c:3b:58:41:11:05:60:8e:93:c3:bc:14:4b:
                    15:e6:98:15:dc:79:a9:65:ea:5b:5c:a9:0a:97:ba:
                    ca:ff:f1:08:3c:e0:2c:c5:e2:97:26:2f:12:82:47:
                    94:07:cd:7c:e8:0c:5c:e5:76:2d:63:2d:fd:83:bf:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8C:4E:3F:36:AF:49:87:E3:9C:BA:4F:E0:FB:C8:01:18:EA:91:8E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:13:83:b0:76:df:d3:a5:a5:29:ee:f8:39:86:89:f1:85:
         1e:68:d6:84:e4:e4:00:2e:b0:05:16:48:90:43:98:22:d0:66:
         e8:11:76:a1:4f:d1:37:c9:ca:52:7c:de:f9:1c:a6:4d:0f:1b:
         80:12:6a:07:41:ab:e9:77:c5:97:a9:7e:16:81:bf:94:94:0f:
         1f:ae:7c:6b:57:e9:cc:ae:de:ee:fc:88:76:4b:87:5b:36:1c:
         42:4b:c4:54:06:17:f5:52:20:3e:53:56:51:b3:f1:64:01:2f:
         0c:d9:ae:ae:1b:15:bb:48:e9:41:28:df:8d:36:f8:a4:81:3a:
         85:79:0a:0a:2e:38:76:58:e5:5d:4b:bc:bb:b5:8f:89:de:83:
         83:89:74:4b:7c:ec:ed:86:d6:e2:8e:11:dd:55:7a:8e:bc:59:
         21:9f:5d:cc:b8:56:bb:a9:e9:8f:58:bc:22:25:d9:b0:9e:ee:
         f0:2f:db:a2:54:7b:b7:9a:2a:99:c6:ec:e0:8e:17:4e:44:2d:
         fe:5e:ee:72:15:a2:cb:9a:6e:96:ba:f8:83:94:bf:39:81:cb:
         b5:5e:ad:75:ae:29:b8:b0:5b:86:c0:60:98:43:51:e5:ec:95:
         fb:28:ee:3c:ef:92:90:80:cd:0e:66:57:73:99:e0:2f:9f:70:
         58:7e:25:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net