Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e20333937343233.roa
File:                     3230392e3230302e3233322e302f32332d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          /7NZ5pdtd5W77L0l7skfX7A1cUQlDtjo+kdLic+UtW8=
Subject key identifier:   35:09:CC:6B:B6:37:9E:C2:98:CF:FE:89:4E:03:29:03:99:F7:98:C6
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       35B8A80A33B9D8B659A33B0BD859641913FA49A6
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e20333937343233.roa
Signing time:             Sat 05 Mar 2022 04:15:44 +0000
ROA not before:           Sat 05 Mar 2022 04:10:44 +0000
ROA not after:            Sat 04 Mar 2023 04:15:44 +0000
asID:                     397423
IP address blocks:        209.200.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b8:a8:0a:33:b9:d8:b6:59:a3:3b:0b:d8:59:64:19:13:fa:49:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  5 04:10:44 2022 GMT
            Not After : Mar  4 04:15:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:b2:4a:b1:5a:dd:41:10:67:1f:ff:9f:03:
                    23:a1:46:0d:4c:d5:18:c9:a5:6b:74:eb:ce:24:44:
                    b5:55:e1:a0:0e:6c:9a:b2:e7:79:cd:ad:bf:05:6d:
                    e9:4d:9c:89:31:45:57:c5:37:50:09:d6:61:27:89:
                    1a:fd:85:66:98:fd:54:2e:ec:61:19:f0:77:d0:d8:
                    84:55:8b:59:bf:54:87:78:d3:b8:51:d8:69:d9:7f:
                    05:99:05:6e:cf:24:dc:49:40:53:35:59:8b:b1:48:
                    ee:06:56:67:22:d1:84:83:89:20:bd:3a:29:dc:b4:
                    8a:e4:c7:55:09:80:a3:5e:b8:bd:07:fc:ba:7b:e3:
                    5f:bd:c1:39:c4:9a:23:ba:5a:da:b3:86:0c:ac:13:
                    cf:2c:99:d0:b0:08:84:e6:12:b3:6f:8d:b8:d7:ad:
                    b6:d1:e8:19:98:cf:c2:f0:b3:13:11:fd:66:05:9f:
                    6b:d7:3d:9b:5b:f4:31:d3:ea:b6:1b:3d:76:65:19:
                    29:99:81:53:cf:fc:94:e2:0c:ec:44:51:e3:3b:6a:
                    7e:fa:39:78:17:cf:ee:53:f0:d3:18:8c:d3:2b:ea:
                    c3:65:e0:f4:9f:c9:28:e5:ef:4e:f4:56:76:08:45:
                    03:23:59:35:b3:0e:f7:b3:4b:4a:46:34:25:8a:c5:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:09:CC:6B:B6:37:9E:C2:98:CF:FE:89:4E:03:29:03:99:F7:98:C6
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233322e302f32332d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ee:93:e0:fb:ae:59:78:1b:32:f9:57:b7:ca:85:7e:d0:c0:
         ac:6a:ee:83:37:64:f9:da:18:fb:03:76:c4:48:81:ed:54:fa:
         7a:30:d9:e4:23:c1:01:4b:25:ca:5b:e1:74:3d:1b:f0:46:f0:
         e9:e3:81:b1:f9:d4:9f:f3:ff:fa:05:f6:2d:6c:26:57:b1:37:
         be:91:9d:a8:4a:ad:e8:20:dc:6a:d5:2e:03:1e:be:9b:5c:f1:
         6e:66:d2:00:cb:46:43:39:42:17:8c:d2:d3:db:9e:61:6f:78:
         64:73:ea:17:20:84:95:69:8f:95:a6:dc:32:6f:71:c7:43:e5:
         d6:f3:45:f5:34:8f:89:c1:e8:7c:b6:2d:a6:2f:26:29:f6:19:
         a4:d4:0e:ce:b6:f2:39:1d:2a:86:0c:a7:36:a9:65:b5:b1:d6:
         7f:2b:a2:ce:25:26:9f:fa:c7:92:12:26:5c:9a:22:32:3a:e2:
         a9:59:00:27:8f:2f:1a:10:b3:07:c8:a8:31:50:eb:a3:3c:49:
         ba:22:ec:e1:45:72:f4:2a:fc:2c:cd:88:42:83:74:41:a9:c1:
         3d:2c:d1:7b:07:e0:19:72:31:a5:12:03:99:da:ab:6c:c0:97:
         2b:d0:ae:80:da:79:5f:4d:a1:c2:23:bd:47:3b:d0:b9:eb:dd:
         a7:c2:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net