Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa
File:                     3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa (raw, json)
Hash identifier:          +1BLohvmS8Z8VMKsKq2barPUhBMxne7pubf35I6EEOE=
Subject key identifier:   15:53:E5:33:22:28:5C:63:1D:5D:93:2F:DD:85:B3:5C:0B:CB:63:9C
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       4A9EA873EB7B7F7BB2EF42AC7B636DEAF3C49CEE
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa
Signing time:             Thu 07 Jul 2022 14:20:01 +0000
ROA not before:           Thu 07 Jul 2022 14:15:01 +0000
ROA not after:            Thu 06 Jul 2023 14:20:01 +0000
asID:                     54009
IP address blocks:        206.206.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9e:a8:73:eb:7b:7f:7b:b2:ef:42:ac:7b:63:6d:ea:f3:c4:9c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  7 14:15:01 2022 GMT
            Not After : Jul  6 14:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a1:33:f5:9b:d3:b4:6f:e7:56:fc:05:ba:2d:
                    ce:f0:d7:23:5b:d9:da:73:c3:85:31:db:36:04:35:
                    26:16:60:6c:4d:f7:ab:fb:7d:23:1a:ef:c5:fa:a9:
                    b6:c2:6e:27:4f:7c:24:42:e7:e7:8a:a0:13:3f:31:
                    7a:50:5d:27:b9:4d:e3:f2:1b:28:c2:1c:ab:01:a0:
                    9b:7a:36:2c:66:1a:a4:c3:b7:bd:ff:ae:af:a5:0a:
                    4e:c0:a5:e7:4e:03:01:72:93:1e:e4:51:23:a5:6d:
                    b2:7c:5c:12:44:22:45:76:e5:e2:b6:36:e9:03:ee:
                    1e:db:86:f3:55:06:ab:12:8e:41:c1:70:b5:91:1f:
                    c5:a5:53:9f:85:ff:c8:5f:1a:2b:1f:07:cd:42:30:
                    d1:c4:ce:20:80:5d:41:a5:5d:3b:9a:60:93:78:ba:
                    4b:f1:85:97:b1:bc:77:bc:d1:ab:8d:41:2e:32:03:
                    cb:71:6d:fb:43:ff:23:34:a2:ed:eb:bf:8b:c5:c1:
                    5b:40:21:fa:9f:50:63:4f:0e:aa:4f:3c:a4:e3:77:
                    28:fd:05:36:70:8c:48:0b:ae:aa:cc:10:a5:34:da:
                    ae:d9:15:05:f3:a4:71:46:0d:98:38:31:79:db:23:
                    85:dd:1c:82:9b:db:36:c8:f0:57:be:34:51:f2:95:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:53:E5:33:22:28:5C:63:1D:5D:93:2F:DD:85:B3:5C:0B:CB:63:9C
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:82:7b:98:f7:33:ca:2e:d1:ca:1c:7d:07:eb:eb:71:b6:
         b3:ef:7b:4f:4d:47:e2:17:52:dc:24:b2:1a:1e:af:c0:87:bb:
         2c:ee:e6:c9:1c:71:d2:01:a3:1c:c9:04:bc:ff:28:4a:df:a5:
         c8:c9:64:1e:fe:97:e6:32:6f:aa:03:df:27:5f:73:ae:58:f8:
         5a:40:cf:6d:c7:a0:91:05:5b:4a:bb:10:35:38:4b:11:28:1b:
         85:5d:78:66:72:32:de:96:fa:4f:ef:7f:ba:ab:4b:7f:52:c6:
         5a:45:b5:12:e0:d5:a5:c4:b5:57:c3:67:5b:a5:26:b9:26:21:
         58:70:e2:01:ad:a7:b5:53:26:c0:2f:89:86:41:ad:d6:8f:2c:
         05:8a:89:2f:12:15:5b:16:20:a8:41:0c:36:66:70:83:6b:1a:
         3f:12:a9:51:c1:36:47:b7:c5:86:2d:a4:72:0d:34:8f:69:7e:
         96:c8:18:95:3b:d6:f6:5c:0e:7f:eb:90:c9:7e:0b:df:21:fc:
         10:8b:03:26:02:d8:01:07:1f:07:37:0f:f5:41:91:67:b3:29:
         4e:a8:d3:24:4d:6c:09:37:0c:e5:b3:b7:26:f5:1b:f1:57:1f:
         8f:e3:7d:46:33:9f:2f:c5:9e:e0:79:8a:1e:50:cc:57:94:a9:
         3c:ca:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org