Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e36362e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          xBvA2vbuKd/m7PMwmGa+gIjO3Q0mj/qRIQMlB/G8YTE=
Subject key identifier:   3C:BC:94:37:FE:72:59:56:34:1A:E7:81:EC:8C:50:1B:0B:2F:E8:7C
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       716D653FC420E352A93782F41E9582EE5C19079A
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:52:29 +0000
ROA not before:           Wed 06 Jul 2022 10:47:29 +0000
ROA not after:            Wed 05 Jul 2023 10:52:29 +0000
asID:                     1299
IP address blocks:        206.206.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6d:65:3f:c4:20:e3:52:a9:37:82:f4:1e:95:82:ee:5c:19:07:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:47:29 2022 GMT
            Not After : Jul  5 10:52:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:44:d9:ca:b9:47:ac:a1:ed:82:29:a0:85:
                    8c:6e:85:22:0f:31:8c:05:92:7f:87:4f:f5:94:5f:
                    ec:c3:9b:66:c4:2b:fe:bc:5d:eb:c8:73:99:30:37:
                    96:59:5c:bd:b4:87:33:6e:7a:0f:08:d4:ea:ec:49:
                    12:c7:f8:a6:4d:73:09:8f:52:a2:cc:4c:c2:59:38:
                    fd:38:16:5f:fe:e0:6f:5f:65:15:c9:aa:2a:08:11:
                    45:d4:81:08:1d:9e:9d:6c:c9:5b:91:7d:67:b1:bf:
                    68:a7:11:ee:b9:c2:7c:56:7d:29:6d:18:42:3f:f7:
                    4c:81:f2:a1:01:0c:d0:a0:22:23:e5:7d:31:eb:45:
                    0e:54:27:5b:55:2a:78:b6:2e:bb:ee:98:e8:5e:97:
                    f8:6f:bb:3c:d1:1f:10:2b:db:0d:ff:d5:bf:6b:3a:
                    68:27:6f:25:0d:4e:61:35:76:bc:af:a5:f1:29:1e:
                    23:7c:4a:97:7b:2a:0b:dc:38:5b:e6:9a:6d:53:39:
                    9e:43:0f:f4:f6:a8:3c:05:0b:5d:2d:bb:3b:82:a6:
                    e5:e3:0e:93:25:94:69:cf:93:3f:de:6a:d8:e5:ff:
                    1c:1a:d9:06:fc:21:17:b3:61:d1:bc:a3:00:d0:00:
                    5d:a4:0f:ce:e2:7e:d1:54:0a:6c:5c:9e:82:44:7b:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:94:37:FE:72:59:56:34:1A:E7:81:EC:8C:50:1B:0B:2F:E8:7C
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:68:fc:dd:dd:0a:65:08:f6:10:b8:23:f4:3b:a9:f3:3f:52:
         9a:2b:62:c6:92:30:9e:64:a0:82:ce:55:8d:04:e7:1a:65:41:
         ab:8b:5b:79:85:f3:7a:f9:b1:0d:a2:3d:a3:30:91:33:71:70:
         08:7f:ee:aa:dd:23:3a:2a:ca:bc:57:5f:70:c1:3b:63:3e:25:
         39:e0:db:6a:5e:02:6f:dd:80:fd:06:92:6b:4d:07:1f:74:8e:
         85:f1:91:83:9a:34:f2:99:0d:27:1e:de:cb:fb:e3:f7:80:92:
         b0:d0:e9:3c:61:cc:90:f8:82:f1:b9:d9:f4:94:10:74:20:9b:
         d4:c0:4b:1c:8e:ef:65:93:e7:80:5a:6e:d6:16:64:ee:a7:06:
         86:09:e0:26:d4:5f:31:46:e3:e4:a6:79:51:74:bc:16:10:3e:
         46:08:41:a3:4f:75:80:96:1c:d7:99:30:31:b7:95:a9:39:82:
         c6:43:ae:cd:08:b1:40:cb:fc:ab:56:41:b6:96:f2:a3:a3:5f:
         17:f6:d2:cf:29:c8:6c:f2:89:69:aa:eb:3d:99:7b:34:4e:95:
         ef:83:40:fa:a8:47:fe:ed:64:88:73:eb:79:41:0b:4f:30:e1:
         ca:b4:e5:b3:99:c2:12:3c:1f:45:f2:b7:19:76:ee:b8:11:38:
         a7:c0:64:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org