Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3132372e302f32342d3234203d3e203335373538.roa
File:                     36372e3231302e3132372e302f32342d3234203d3e203335373538.roa (raw, json)
Hash identifier:          B/GbG2SeHJVCE1otLZvVxdwV3+3ulNBDMcEM0XCbvD8=
Subject key identifier:   3E:E3:F6:18:8D:D0:63:09:AF:0D:AF:6A:28:F6:02:46:30:11:CF:7D
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       24D8E1B06222A5550A8725316025FCA063C05B08
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3132372e302f32342d3234203d3e203335373538.roa
Signing time:             Wed 11 May 2022 20:58:29 +0000
ROA not before:           Wed 11 May 2022 20:53:29 +0000
ROA not after:            Wed 10 May 2023 20:58:29 +0000
asID:                     35758
IP address blocks:        67.210.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d8:e1:b0:62:22:a5:55:0a:87:25:31:60:25:fc:a0:63:c0:5b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 11 20:53:29 2022 GMT
            Not After : May 10 20:58:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:73:cb:2c:58:14:cf:7f:8f:b4:99:c1:a2:
                    68:3a:1c:8a:45:14:17:c3:24:78:9c:50:a2:b2:0d:
                    de:61:8d:86:77:10:ce:1b:3a:c1:c9:21:06:fa:6d:
                    6d:46:d6:17:06:0e:28:1f:a1:e4:11:b1:b5:83:dd:
                    98:42:aa:c2:22:62:ec:0e:a9:2f:ae:79:5c:2d:d0:
                    af:20:d7:44:05:6f:c5:19:ac:74:5c:81:21:dc:ea:
                    b3:1c:2b:6b:d7:31:83:84:e7:a4:c6:3f:d9:09:46:
                    6c:ce:ae:ea:ae:59:80:8a:68:8e:f6:f3:b8:23:c5:
                    07:bd:4c:3d:35:b5:46:69:2a:55:4f:b4:9c:3d:a8:
                    e0:06:c5:19:dc:58:03:eb:cd:57:fa:b4:38:51:2e:
                    b4:f9:92:af:b6:52:89:2c:99:36:a2:b2:3d:9f:13:
                    4d:2a:88:35:c1:69:61:54:30:e1:96:7a:65:5c:56:
                    85:ee:b0:1c:7e:9a:b7:80:95:cb:7c:05:09:49:11:
                    f8:43:c2:77:46:8f:dd:53:95:e0:0f:1a:8f:43:be:
                    fc:95:c6:a7:a2:af:64:1f:ba:17:de:c3:c9:22:32:
                    f2:68:9e:19:15:c7:11:85:03:cb:34:02:61:50:9e:
                    2b:c0:fe:89:aa:85:a2:ec:46:11:7d:75:6d:f6:8e:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E3:F6:18:8D:D0:63:09:AF:0D:AF:6A:28:F6:02:46:30:11:CF:7D
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3132372e302f32342d3234203d3e203335373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:e2:c5:6b:f8:7c:f4:17:9c:a0:27:20:c0:38:67:e0:82:
         3f:b2:64:d2:63:0a:b5:2f:56:a4:44:2e:a0:70:ce:81:51:e1:
         5e:84:9f:dc:b4:d0:d6:fc:eb:e4:66:ce:c8:56:d2:ff:33:63:
         af:66:69:f6:93:a4:af:43:ef:d9:19:08:3c:c8:fc:06:2c:02:
         e8:9a:95:b5:4d:4c:6a:62:6d:39:1e:f9:46:0e:a1:de:b8:52:
         e4:b5:8b:78:c9:de:c1:bc:10:58:77:cc:7d:71:2d:9a:a9:f4:
         86:aa:a0:cd:bb:ca:82:50:bf:5c:98:41:a2:96:59:0d:61:49:
         d0:d5:66:58:da:e5:82:5e:a4:e5:d4:6e:6a:7b:d2:11:89:77:
         dc:31:81:02:39:f6:e7:ec:45:a6:94:7e:f9:4c:4f:04:61:39:
         24:11:08:66:bb:5a:2e:ff:10:34:5b:83:ac:80:f2:5e:57:8e:
         cd:a9:83:e9:32:52:67:20:ba:8a:3c:e5:68:e4:f8:bd:f5:3f:
         dc:d7:6d:5b:ce:d1:8f:c8:d9:b0:0b:c6:4a:9a:d0:0b:79:b0:
         6e:8f:3c:dc:fe:03:79:54:d1:63:fa:ea:64:4e:a5:e4:8c:28:
         06:fa:fa:c2:e1:52:22:0c:c8:a2:e1:34:63:c7:4c:c4:be:83:
         60:ad:0c:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net