Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32322d3234203d3e2037303138.roa
File:                     3230392e3230302e3235322e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          dHDNQuSJyD50ti6JGpv5q/quRrbNdktR+21NmO5Fd+k=
Subject key identifier:   40:DE:4B:71:97:D2:79:89:08:71:C5:80:33:86:39:D7:33:93:E0:62
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       6C9663DC14C6B67672E79E1E3DCF7296D6B40A16
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32322d3234203d3e2037303138.roa
Signing time:             Tue 08 Mar 2022 04:00:19 +0000
ROA not before:           Tue 08 Mar 2022 03:55:19 +0000
ROA not after:            Tue 07 Mar 2023 04:00:19 +0000
asID:                     7018
IP address blocks:        209.200.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:96:63:dc:14:c6:b6:76:72:e7:9e:1e:3d:cf:72:96:d6:b4:0a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  8 03:55:19 2022 GMT
            Not After : Mar  7 04:00:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:75:8a:2e:d2:66:3d:5c:cf:84:79:30:39:
                    c2:07:93:6b:bc:bc:7a:dc:ce:cd:6d:96:3d:a8:11:
                    bf:38:c1:07:a1:c3:f7:66:46:54:72:bc:2d:af:9e:
                    92:94:51:0f:0a:cb:02:d7:ef:e6:04:db:87:51:c0:
                    1c:8d:47:fd:0d:b2:62:58:70:68:74:6f:04:4d:0e:
                    0c:18:70:81:22:db:e2:a8:46:81:f3:ff:c4:9c:6d:
                    ec:9a:db:ed:fb:51:87:43:a3:78:6b:ad:b5:a7:cc:
                    ee:8a:59:47:33:ed:53:e7:c1:71:6c:0b:e1:4e:f5:
                    7d:e3:87:8e:5e:8f:0e:27:ea:2e:5d:d8:b2:04:69:
                    47:d3:e1:3f:05:bf:c3:91:60:b7:16:c6:ee:8f:37:
                    d8:7c:c6:e2:b3:a0:52:b8:bd:e3:d6:c9:5a:e4:ea:
                    0f:10:c0:cf:f8:c5:0b:1c:d0:86:45:c8:67:c2:8b:
                    6e:5d:a5:03:11:72:d0:ab:bd:5e:66:21:52:6a:45:
                    4c:40:f0:56:0f:fe:e6:cf:09:57:46:20:e4:99:4e:
                    36:c4:38:3f:89:df:1b:e9:4e:6b:bc:73:3f:c0:6e:
                    90:7b:c1:bf:e9:2d:d9:17:4b:ad:4f:38:3b:f2:0a:
                    05:cb:02:69:a1:b1:30:48:ae:e4:cf:c3:72:97:b5:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DE:4B:71:97:D2:79:89:08:71:C5:80:33:86:39:D7:33:93:E0:62
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:26:b7:1c:ca:f4:da:ba:e6:cb:e9:29:8f:50:b7:22:a7:2b:
         5b:7a:99:24:df:65:b7:a0:f7:79:2b:34:b0:be:a9:c0:66:4f:
         e3:0d:a0:30:05:2e:46:0c:7a:b4:d8:b8:b7:c3:7e:34:5b:14:
         d8:2f:9d:62:2c:85:f6:17:ca:f5:91:8c:af:15:ca:6a:ce:00:
         7d:05:1a:28:23:9c:98:dc:27:b7:55:95:e5:4d:53:6e:16:fa:
         43:08:bc:0e:bd:2a:5d:13:e5:50:9c:96:fa:fc:d1:ab:fe:cf:
         d3:67:fc:31:0e:0f:ad:f6:61:a2:03:d2:80:7f:4a:94:3a:d5:
         d6:52:61:5d:69:83:57:6e:ad:e0:f7:83:21:14:8c:b7:b7:0f:
         58:11:9d:71:9c:b4:c0:02:07:7b:6b:28:e1:e6:d6:98:51:76:
         8c:14:68:7b:05:fc:cc:5a:b2:ab:76:95:4f:ee:81:55:e3:6e:
         19:d1:a8:eb:5d:62:93:2d:9f:cb:00:13:55:f1:dd:6b:c3:ac:
         2f:a0:c1:4b:d6:d0:13:9b:ee:59:51:ad:18:df:de:cd:98:5d:
         7a:67:e1:29:64:ca:18:88:26:3c:54:b8:ad:b3:cb:f0:db:86:
         45:72:85:84:3e:41:66:14:48:a6:db:ae:5c:83:2b:6e:e8:35:
         04:34:b0:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net