Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e36362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          SuH1wLYkbpk4tW1YnafYv9GBhYk1kbigrHd5zqMufuA=
Subject key identifier:   6A:2C:59:F5:21:18:3E:B9:7C:E8:D1:8D:CA:B1:D2:4E:AB:A3:CC:F3
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       538348362BB5AEBC7727DB96A3C97D086CED2A24
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:52:05 +0000
ROA not before:           Wed 06 Jul 2022 10:47:05 +0000
ROA not after:            Wed 05 Jul 2023 10:52:05 +0000
asID:                     398465
IP address blocks:        206.206.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:83:48:36:2b:b5:ae:bc:77:27:db:96:a3:c9:7d:08:6c:ed:2a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:47:05 2022 GMT
            Not After : Jul  5 10:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:af:ab:0d:e9:26:71:af:c9:61:36:eb:6b:
                    d8:e0:c3:71:47:98:6e:19:5b:b3:83:6a:97:77:dd:
                    94:16:92:0c:8a:a4:ef:fb:7f:ce:6a:44:35:c5:06:
                    2d:7a:fc:c5:b4:d6:12:bb:25:d9:db:f9:1a:05:0e:
                    60:72:65:04:44:b5:46:ac:b6:52:7d:0d:b9:81:a4:
                    fa:bf:60:2f:cd:9b:84:a5:26:b8:4c:a9:55:55:c3:
                    ee:5e:d9:6a:41:cd:27:30:17:c6:e2:de:13:ac:d8:
                    72:36:0b:c2:c4:4d:7a:53:7d:17:76:a0:bb:a9:ce:
                    47:95:03:4e:67:c0:25:27:76:e7:9d:d2:48:e2:e4:
                    54:92:4e:a6:f1:74:31:77:ce:2a:7a:c6:a8:08:a8:
                    a5:65:de:06:b0:7d:49:c2:55:9c:26:e5:9b:f8:62:
                    69:27:a6:43:de:c4:4f:2b:cc:36:8a:3b:67:d2:40:
                    74:26:bf:2d:11:95:b5:89:35:78:f4:e9:e3:08:53:
                    57:e7:bd:a0:f5:d1:ef:31:a2:0e:bb:87:22:e6:06:
                    1a:33:fe:6a:51:a9:71:08:ab:eb:54:74:35:3e:56:
                    69:cb:e1:2e:9e:57:84:85:e1:0b:09:d8:a5:59:6e:
                    34:fb:e2:92:16:5b:cf:49:1a:a4:99:f0:21:ae:f7:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:59:F5:21:18:3E:B9:7C:E8:D1:8D:CA:B1:D2:4E:AB:A3:CC:F3
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36362e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:87:26:be:1a:e5:a5:66:8e:9d:c8:95:59:db:eb:e2:12:9f:
         18:43:2e:fe:8a:a4:78:3c:f4:04:48:cc:a8:4e:61:44:5b:f7:
         4e:91:9d:6a:e1:25:af:d2:e1:31:91:6c:6b:ff:1c:c8:85:4c:
         57:d8:73:5d:df:23:a6:30:02:43:8d:3f:8f:27:8a:c5:77:a3:
         8a:88:15:18:f3:b8:05:a1:12:67:11:df:14:18:f2:e5:9d:9c:
         9b:5a:a9:95:80:63:4b:08:49:10:9e:63:2e:d1:da:51:a4:8d:
         ef:39:ce:65:1f:91:e6:a0:33:85:ca:ba:89:39:7d:fd:25:a4:
         d8:65:a3:3b:a4:f6:26:44:11:67:fc:f4:db:c5:84:c3:bc:ad:
         ca:b5:83:67:83:eb:fe:de:e9:95:a3:86:e1:9a:5d:8f:71:91:
         d5:8f:63:da:14:b6:11:19:21:64:22:51:3c:39:7c:d1:2e:45:
         fe:b5:4b:e6:49:d8:70:c6:1d:fe:86:93:e1:34:0e:55:99:a8:
         d8:18:32:93:67:ab:55:e0:13:93:57:a8:ab:45:f9:7a:7d:67:
         f5:4e:98:3b:44:d6:b0:6c:8d:b7:4d:6e:bc:d2:6d:bd:d1:68:
         fc:8b:d0:1d:71:24:55:42:37:6f:31:f9:34:8f:3f:e8:c2:26:
         44:03:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org