Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e20333937343233.roa
File:                     3230392e3230302e3234322e302f32332d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          VFEplkpcA7Y7Eo8Ozk9qn/v2CjuzjlkdzRt7Zh53qe4=
Subject key identifier:   73:54:3C:CF:1C:77:C6:2B:56:50:9A:C9:66:57:75:4D:A4:7B:B7:05
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       65E32B7164F45CCD3FD24822D5D8EC1698CD8BCF
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e20333937343233.roa
Signing time:             Sat 05 Mar 2022 04:16:06 +0000
ROA not before:           Sat 05 Mar 2022 04:11:06 +0000
ROA not after:            Sat 04 Mar 2023 04:16:06 +0000
asID:                     397423
IP address blocks:        209.200.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e3:2b:71:64:f4:5c:cd:3f:d2:48:22:d5:d8:ec:16:98:cd:8b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  5 04:11:06 2022 GMT
            Not After : Mar  4 04:16:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:e2:5b:f2:69:a7:2c:86:25:4b:dc:ea:6e:
                    3f:da:5a:f0:c5:4f:8b:87:74:cd:3e:5a:5f:c3:34:
                    26:09:69:bd:fc:3c:87:c3:8d:88:2a:5e:ba:f0:1d:
                    e4:df:4c:e2:f3:1e:c5:26:79:d3:a1:25:51:3e:27:
                    17:8d:05:be:76:63:2f:69:4e:e5:f5:7f:48:5b:70:
                    b4:9e:75:20:3a:d8:c0:79:1b:8b:59:27:27:c7:ee:
                    d5:5f:7e:9b:4d:70:27:7a:12:37:a2:db:ff:ad:14:
                    6e:94:f8:04:82:7c:ef:0e:e0:7c:97:f4:be:3e:d4:
                    7a:11:ff:52:2d:9c:35:d8:9c:42:02:d6:6c:4f:23:
                    24:2f:bd:4c:43:e0:e6:36:fb:cf:db:70:76:06:0f:
                    2e:2a:9f:f7:c4:ff:4f:92:16:36:1d:41:7d:ad:27:
                    dd:2c:08:a3:6a:94:13:bf:19:dc:9b:23:c1:0b:28:
                    71:d2:f8:9d:b5:f5:4b:79:a2:f9:49:dc:f4:b2:fb:
                    06:24:c9:0b:60:2c:82:75:23:a6:8b:7d:f7:24:eb:
                    e1:a3:db:47:a8:e0:8a:eb:67:a0:aa:45:2a:20:35:
                    13:02:52:1b:6f:0f:27:9f:f6:8a:77:7c:f9:cd:9b:
                    93:2f:6a:61:4f:70:6d:1a:c0:9a:75:37:9e:29:93:
                    e6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:3C:CF:1C:77:C6:2B:56:50:9A:C9:66:57:75:4D:A4:7B:B7:05
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:e2:6f:b2:2c:e8:36:cc:18:ff:6d:20:1e:fb:2c:38:9f:
         b8:b5:b6:a7:1c:aa:28:b4:c4:e9:5a:5d:96:58:97:45:7e:ab:
         25:f1:8e:5b:82:07:e5:53:f1:ad:23:ed:71:0d:17:11:8b:f8:
         b9:e7:ac:60:23:10:fc:b8:98:b3:a7:79:e9:aa:e7:a6:6c:de:
         85:69:6f:ae:22:a8:c6:73:c1:8f:99:77:3f:ab:25:7a:79:db:
         02:69:c7:27:c4:4b:70:22:62:b3:c1:6a:5d:2c:52:9d:b5:76:
         78:ca:55:17:d9:1a:17:63:51:18:9a:c9:2e:bf:fb:07:9b:25:
         f1:fd:5a:e2:08:cd:31:78:e7:b2:4b:31:4c:49:d3:42:8f:6d:
         1f:81:d6:40:62:b8:37:dd:88:d1:99:dc:4e:36:68:f7:81:fd:
         cc:a4:55:61:b6:31:99:a6:25:76:4c:79:35:8f:8d:6b:2b:2b:
         63:e4:c7:ed:0d:2d:bd:33:33:a2:2e:b2:e6:61:36:b1:ae:4d:
         cd:d8:89:ed:d1:be:39:14:7c:cc:1d:25:b8:26:e2:15:aa:db:
         49:88:7a:23:d6:c5:50:b1:7f:1e:c7:92:06:4b:51:71:30:18:
         f4:03:97:27:25:e0:e0:6a:96:e9:7b:61:47:4d:8c:0b:93:a3:
         e3:79:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net