Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130302e302f32322d3234203d3e203332323434.roa
File:                     3230362e3230362e3130302e302f32322d3234203d3e203332323434.roa (raw, json)
Hash identifier:          riI4/v1jHo1cajqfgtYW/xA6yjA1WINQ2yekk1Rdeis=
Subject key identifier:   CB:93:15:4E:4C:64:BC:E8:F2:CC:47:D7:37:A4:A2:1F:A4:FB:16:89
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1303B1198109F72F3C3EBED6E8F86B49F6943D78
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130302e302f32322d3234203d3e203332323434.roa
Signing time:             Fri 08 Jul 2022 15:28:44 +0000
ROA not before:           Fri 08 Jul 2022 15:23:44 +0000
ROA not after:            Fri 07 Jul 2023 15:28:44 +0000
asID:                     32244
IP address blocks:        206.206.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:03:b1:19:81:09:f7:2f:3c:3e:be:d6:e8:f8:6b:49:f6:94:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  8 15:23:44 2022 GMT
            Not After : Jul  7 15:28:44 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:cd:30:51:77:6f:98:b8:97:5c:84:7c:12:
                    d6:f8:66:ab:fd:a6:d1:76:74:38:5f:c6:c6:fd:b0:
                    dc:b6:85:a1:7d:76:ee:f2:df:29:89:70:95:75:20:
                    03:8a:3c:ad:90:09:e2:f9:a1:07:52:42:47:b2:b1:
                    bf:da:5a:90:ed:e8:04:02:6f:be:2d:a0:45:39:e1:
                    aa:7e:d6:a7:cb:18:da:bb:aa:46:4d:e8:96:fd:2e:
                    cc:7b:6d:5d:be:7f:ba:25:ab:e4:8d:df:ca:7c:6e:
                    eb:6c:4b:19:43:da:5d:64:01:32:7c:4e:b8:a9:48:
                    0d:2c:fb:72:67:83:02:4f:1c:4b:71:02:49:71:97:
                    92:ba:60:ba:23:78:cc:dc:66:af:cc:6a:ca:b8:f4:
                    d1:25:2b:46:85:84:c1:5b:23:31:63:54:d0:54:40:
                    23:99:84:7a:64:9f:af:98:26:c6:4a:57:9a:b7:ca:
                    dd:ac:cc:d0:c5:a9:05:cf:79:6c:38:67:44:7b:fd:
                    0f:47:a9:99:5e:1e:66:7a:3f:89:22:fe:6b:19:eb:
                    cd:03:00:85:3e:76:11:31:ac:58:78:b4:2e:22:34:
                    f9:ed:2b:5f:a5:44:e3:3b:85:3d:d1:5f:6c:e0:0c:
                    c1:bd:de:09:74:7b:90:8a:a3:60:bc:57:80:c3:e7:
                    98:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:93:15:4E:4C:64:BC:E8:F2:CC:47:D7:37:A4:A2:1F:A4:FB:16:89
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130302e302f32322d3234203d3e203332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:d9:42:aa:71:cf:b6:6e:c0:2d:39:e4:15:2f:f7:98:76:83:
         c6:86:19:94:53:e8:d7:00:80:0d:08:8c:e3:a0:3e:72:43:f4:
         0f:80:88:2a:af:f4:67:f2:45:c9:ae:7f:73:9a:7f:49:ad:d2:
         a5:bb:1e:cd:a9:99:07:4e:0b:64:33:96:ec:30:a7:3a:8a:ad:
         2e:b0:cb:23:bb:b5:82:a7:7f:d5:3b:cf:75:02:06:bc:9a:9c:
         14:db:0e:0b:e2:94:2a:7f:b3:71:0b:97:8c:b5:33:d1:06:e4:
         e3:a4:1a:fc:86:7f:1f:1d:90:39:7e:f8:86:38:05:60:94:55:
         c1:b2:83:98:9d:c8:b8:29:47:eb:6e:4e:37:84:52:f6:f6:85:
         7d:b8:3f:e7:bc:9f:94:83:db:f8:49:1f:02:92:d7:4a:0e:21:
         a7:ad:73:62:f4:a3:32:66:f2:61:f1:01:b3:e1:d2:47:16:7e:
         d0:57:58:fe:ce:82:d0:f0:0f:29:d7:45:17:af:8d:09:82:20:
         08:92:99:0d:ad:d2:67:ae:8d:e5:f4:3e:ca:c4:c0:99:c5:77:
         f4:b9:2c:00:8a:c7:34:8d:2e:e9:ed:54:ee:93:86:37:48:62:
         c2:ac:3d:fa:82:17:ed:80:d4:46:4d:c3:18:e9:89:e4:d9:c0:
         9d:04:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org