Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa
File:                     3230362e3230362e36352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          5xCVlWPwd2lJd0zv/Qs5+xjvWvQd7VigGtQbCgrSFiw=
Subject key identifier:   21:66:FF:8C:DC:F5:A6:F4:95:AF:F6:3C:46:FA:5B:53:A9:9D:7C:E2
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       0BBFE6EC9C15AAC1B4545211F6DF6F71708ACB56
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa
Signing time:             Sun 03 Jul 2022 09:23:57 +0000
ROA not before:           Sun 03 Jul 2022 09:18:57 +0000
ROA not after:            Sun 02 Jul 2023 09:23:57 +0000
asID:                     61317
IP address blocks:        206.206.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bf:e6:ec:9c:15:aa:c1:b4:54:52:11:f6:df:6f:71:70:8a:cb:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  3 09:18:57 2022 GMT
            Not After : Jul  2 09:23:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:0e:12:84:37:b4:71:1e:14:ce:d9:25:2a:
                    52:d6:3c:12:de:d7:09:ce:c4:12:8c:4a:fc:13:81:
                    d3:b7:c8:f1:32:a2:38:0a:e2:fa:17:d8:4e:72:ec:
                    a2:54:65:10:de:e5:f6:38:9c:fa:00:82:da:b3:cc:
                    29:8f:7c:f9:7d:78:d2:d8:03:f4:90:cb:96:f7:28:
                    fd:d4:76:da:7f:92:a3:48:88:8a:5f:d6:2e:6f:ec:
                    29:13:5e:e3:13:1d:cc:1d:51:ba:95:73:57:c0:68:
                    dd:95:10:18:61:12:9a:0d:34:9d:e1:90:91:74:95:
                    40:ca:1a:74:62:1a:08:d8:f8:02:c4:60:00:7c:6c:
                    78:4e:89:68:ee:02:89:88:a7:aa:a7:39:4b:af:70:
                    8f:f6:a1:88:ea:a3:67:84:aa:b2:bd:e7:d7:62:45:
                    ad:f8:6b:1f:10:a0:08:48:f8:bc:b7:05:32:47:f6:
                    83:0b:9a:88:8c:b6:6b:0a:9a:5b:e4:80:9d:c2:56:
                    c1:87:2a:1e:d3:19:45:2f:ff:25:ca:f6:13:bc:5e:
                    78:0a:f7:4c:63:e9:f3:9d:59:de:55:87:42:8c:f6:
                    a7:46:bd:4d:11:b2:cf:8a:4a:17:52:8f:37:44:97:
                    eb:e7:c8:ad:2e:5f:14:86:f0:fa:9f:24:be:78:d8:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:FF:8C:DC:F5:A6:F4:95:AF:F6:3C:46:FA:5B:53:A9:9D:7C:E2
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:e7:55:1e:e5:b0:3e:e3:86:e7:3f:ac:bd:88:6f:f9:3e:
         08:d5:c0:e9:bd:55:1a:06:41:9e:93:7f:e8:7f:10:8d:5c:6f:
         73:ed:37:e8:a7:07:f3:11:54:77:9c:24:7e:76:ba:f4:3b:7c:
         98:36:ea:5c:99:40:d2:34:69:6d:c4:8e:b7:97:70:dc:e8:0a:
         c6:a3:d3:da:e3:71:61:14:be:89:95:e9:09:fc:f1:15:78:81:
         52:ec:4c:40:8e:3c:99:2f:09:9b:8a:84:33:9e:88:0c:1a:1e:
         04:57:a3:58:4b:0b:9d:c4:45:f1:17:60:91:80:78:de:e4:28:
         05:be:0b:0d:8c:3c:36:64:4c:47:b6:c6:27:86:74:f7:76:14:
         82:30:58:d3:ee:b5:0c:6c:cd:34:bb:83:e5:fe:44:f6:34:48:
         df:f4:1a:75:92:b1:2d:de:aa:df:cf:04:5e:be:38:dc:2f:42:
         1c:ce:d5:75:fb:60:bf:51:0c:c4:34:e6:61:59:4a:2f:b3:0a:
         84:c5:5c:06:5a:29:a6:5c:c9:cb:07:be:b0:46:7b:31:16:27:
         b9:a6:91:ae:a2:86:0f:7a:93:60:cc:21:5c:55:21:00:26:07:
         2a:93:db:81:1e:a2:f4:6c:77:07:ad:01:c1:65:cc:a3:26:3f:
         ac:a2:2d:68
-----BEGIN CERTIFICATE-----
MIIHTDCCBjSgAwIBAgIUC7/m7JwVqsG0VFIR9t9vcXCKy1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDMwOTE4NTdaFw0yMzA3MDIwOTIzNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRGNjBFMTI4NDM3QjQ3MTFF
MTRDRUQ5MjUyQTUyRDYzQzEyREVENzA5Q0VDNDEyOEM0QUZDMTM4MUQzQjdDOEYx
MzJBMjM4MEFFMkZBMTdEODRFNzJFQ0EyNTQ2NTEwREVFNUY2Mzg5Q0ZBMDA4MkRB
QjNDQzI5OEY3Q0Y5N0Q3OEQyRDgwM0Y0OTBDQjk2RjcyOEZERDQ3NkRBN0Y5MkEz
NDg4ODhBNUZENjJFNkZFQzI5MTM1RUUzMTMxRENDMUQ1MUJBOTU3MzU3QzA2OERE
OTUxMDE4NjExMjlBMEQzNDlERTE5MDkxNzQ5NTQwQ0ExQTc0NjIxQTA4RDhGODAy
QzQ2MDAwN0M2Qzc4NEU4OTY4RUUwMjg5ODhBN0FBQTczOTRCQUY3MDhGRjZBMTg4
RUFBMzY3ODRBQUIyQkRFN0Q3NjI0NUFERjg2QjFGMTBBMDA4NDhGOEJDQjcwNTMy
NDdGNjgzMEI5QTg4OENCNjZCMEE5QTVCRTQ4MDlEQzI1NkMxODcyQTFFRDMxOTQ1
MkZGRjI1Q0FGNjEzQkM1RTc4MEFGNzRDNjNFOUYzOUQ1OURFNTU4NzQyOENGNkE3
NDZCRDREMTFCMkNGOEE0QTE3NTI4RjM3NDQ5N0VCRTdDOEFEMkU1RjE0ODZGMEZB
OUYyNEJFNzhEODZDMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1PYOEoQ3tHEeFM7ZJSpS1jwS3tcJzsQSjEr8E4HTt8jxMqI4CuL6
F9hOcuyiVGUQ3uX2OJz6AILas8wpj3z5fXjS2AP0kMuW9yj91Hbaf5KjSIiKX9Yu
b+wpE17jEx3MHVG6lXNXwGjdlRAYYRKaDTSd4ZCRdJVAyhp0YhoI2PgCxGAAfGx4
Tolo7gKJiKeqpzlLr3CP9qGI6qNnhKqyvefXYkWt+GsfEKAISPi8twUyR/aDC5qI
jLZrCppb5ICdwlbBhyoe0xlFL/8lyvYTvF54CvdMY+nznVneVYdCjPanRr1NEbLP
ikoXUo83RJfr58itLl8UhvD6nyS+eNhsEQIDAQABo4ICWjCCAlYwHQYDVR0OBBYE
FCFm/4zc9ab0la/2PEb6W1OpnXziMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGR
BggrBgEFBQcwC4aBhHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAzs5BMA0GCSqGSIb3DQEBCwUAA4IBAQCaQ+dVHuWwPuOG5z+svYhv
+T4I1cDpvVUaBkGek3/ofxCNXG9z7TfopwfzEVR3nCR+drr0O3yYNupcmUDSNGlt
xI63l3Dc6ArGo9Pa43FhFL6JlekJ/PEVeIFS7ExAjjyZLwmbioQznogMGh4EV6NY
SwudxEXxF2CRgHje5CgFvgsNjDw2ZExHtsYnhnT3dhSCMFjT7rUMbM00u4Pl/kT2
NEjf9Bp1krEt3qrfzwRevjjcL0IcztV1+2C/UQzENOZhWUovswqExVwGWimmXMnL
B76wRnsxFie5ppGuooYPepNgzCFcVSEAJgcqk9uBHqL0bHcHrQHBZcyjJj+soi1o
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org