Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e203631333137.roa
File:                     3230392e3230302e3233302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          tDay9fPoX2jrbfSoZKE3pRy/XD9EkEt0U90o6I8YDOo=
Subject key identifier:   C7:1F:C0:8A:6D:4D:EA:93:C2:BB:9E:C2:60:50:65:07:EC:87:F6:55
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       601C4F5A83A1475C367D00A5CA266BBE24B01607
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 02 Feb 2022 14:31:05 +0000
ROA not before:           Wed 02 Feb 2022 14:26:05 +0000
ROA not after:            Wed 01 Feb 2023 14:31:05 +0000
asID:                     61317
IP address blocks:        209.200.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1c:4f:5a:83:a1:47:5c:36:7d:00:a5:ca:26:6b:be:24:b0:16:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb  2 14:26:05 2022 GMT
            Not After : Feb  1 14:31:05 2023 GMT
        Subject: CN=3082010A0282010100BDAF59DE4E6B5F2789006CFD5DD88A9B04EE208A3E4169AA005C3C74272F43F371A9A5E63E720EBF06D67FCA951CBB98CD3930313CCD4DEEC7B2E89851016C4B152F5C034614030540495CA9769EFB91B10D150262460038D186B5B284F8F8143E960AFBB44B72B3D21996C9C6B002E628863304EAE8E075D5CD9ACCAE1241EC382EB182C0755119F2308D2C8733B07671C086D36BAE315F86E03B8F8E1D6CAD7005A2630FC299B8304238920F6B60C8A2C2603B4E947A0BAC71615190701562E3DECFD424DE3A1F33FAD122E314BA21AE92A7E1E91340063364305768514C7DDCB50E1B1C2F6AE5BEB29EDB529FFA25985CE795C20F0384D114F404FC74DCC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:59:de:4e:6b:5f:27:89:00:6c:fd:5d:d8:
                    8a:9b:04:ee:20:8a:3e:41:69:aa:00:5c:3c:74:27:
                    2f:43:f3:71:a9:a5:e6:3e:72:0e:bf:06:d6:7f:ca:
                    95:1c:bb:98:cd:39:30:31:3c:cd:4d:ee:c7:b2:e8:
                    98:51:01:6c:4b:15:2f:5c:03:46:14:03:05:40:49:
                    5c:a9:76:9e:fb:91:b1:0d:15:02:62:46:00:38:d1:
                    86:b5:b2:84:f8:f8:14:3e:96:0a:fb:b4:4b:72:b3:
                    d2:19:96:c9:c6:b0:02:e6:28:86:33:04:ea:e8:e0:
                    75:d5:cd:9a:cc:ae:12:41:ec:38:2e:b1:82:c0:75:
                    51:19:f2:30:8d:2c:87:33:b0:76:71:c0:86:d3:6b:
                    ae:31:5f:86:e0:3b:8f:8e:1d:6c:ad:70:05:a2:63:
                    0f:c2:99:b8:30:42:38:92:0f:6b:60:c8:a2:c2:60:
                    3b:4e:94:7a:0b:ac:71:61:51:90:70:15:62:e3:de:
                    cf:d4:24:de:3a:1f:33:fa:d1:22:e3:14:ba:21:ae:
                    92:a7:e1:e9:13:40:06:33:64:30:57:68:51:4c:7d:
                    dc:b5:0e:1b:1c:2f:6a:e5:be:b2:9e:db:52:9f:fa:
                    25:98:5c:e7:95:c2:0f:03:84:d1:14:f4:04:fc:74:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:C0:8A:6D:4D:EA:93:C2:BB:9E:C2:60:50:65:07:EC:87:F6:55
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a7:94:d2:7d:d9:1d:83:19:d1:3b:3a:3d:71:31:1f:ca:62:
         05:e1:0e:22:95:56:ee:03:03:8c:d7:8d:41:6e:bd:a2:7d:21:
         a6:c0:01:53:5f:08:80:7a:5f:cc:89:b6:8c:64:9a:96:2a:d3:
         ec:af:3d:a6:0f:27:12:5a:17:f1:0a:f7:11:7a:35:65:c6:13:
         85:c1:ee:fd:cf:f5:d8:87:22:f8:5f:15:91:39:1f:c8:47:14:
         ac:49:fe:9e:c2:14:5b:90:d0:11:0e:0b:29:d7:7e:c0:d8:6d:
         ba:a0:88:ec:7c:28:84:f2:43:08:e6:39:4c:45:30:ee:fc:f1:
         c5:f1:74:aa:d0:ca:ce:65:ac:07:be:84:14:91:64:bc:26:91:
         25:74:f5:b9:e7:09:ab:79:aa:e7:ba:3b:46:91:f8:f7:27:e7:
         d1:f0:48:e5:17:9f:c0:a0:f3:9d:03:9e:94:0a:07:45:9f:35:
         ab:89:b6:d0:b9:9f:54:0e:c6:24:fa:c0:69:0d:9f:a5:1f:a9:
         b6:a9:06:d2:c1:64:66:63:27:fe:7c:6a:97:3e:a8:56:83:b5:
         09:75:dc:f9:7c:39:c1:c7:94:08:0c:9f:39:3f:c0:10:58:0a:
         43:90:6f:d5:76:c1:93:3b:b1:28:c7:a8:24:0d:ea:51:24:81:
         29:5a:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net