Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e36372e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          UFWSfrHX3rqbtK5bBZaRxRRfJpCEq6BZd51NbELfw00=
Subject key identifier:   5A:93:3B:AF:2C:FC:2C:9C:51:AA:E4:0A:20:DF:7E:60:BA:57:6F:AE
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       11DD8AFDE388245E9BCD7F9E44B1AEAD50A3FEE1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:53:18 +0000
ROA not before:           Wed 06 Jul 2022 10:48:18 +0000
ROA not after:            Wed 05 Jul 2023 10:53:18 +0000
asID:                     1299
IP address blocks:        206.206.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dd:8a:fd:e3:88:24:5e:9b:cd:7f:9e:44:b1:ae:ad:50:a3:fe:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:48:18 2022 GMT
            Not After : Jul  5 10:53:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:84:b5:4e:06:5c:f7:38:27:f9:04:76:5b:
                    54:1a:f1:e0:01:49:0f:32:a2:d0:82:33:e0:00:e4:
                    7b:b2:67:0e:00:41:18:4d:57:6a:36:19:54:81:0a:
                    91:f9:51:9a:40:e3:f4:fb:0a:4b:d1:9b:4d:05:10:
                    2b:09:55:82:ce:f7:50:61:17:3c:eb:cc:b9:e3:34:
                    53:c7:66:17:7d:32:02:22:1e:3e:85:20:37:dd:de:
                    72:ea:43:1e:2c:c0:f4:21:08:f6:94:09:55:48:e3:
                    3b:df:d8:f7:84:fd:06:e9:d6:1f:22:df:82:f2:44:
                    31:68:f8:05:ba:89:87:36:05:89:2d:62:f7:f6:49:
                    cb:11:ee:54:6b:31:9c:79:66:e7:e1:76:91:e3:ab:
                    b5:ac:68:34:1a:c5:c1:45:63:3d:45:49:82:8d:46:
                    39:c5:76:80:4b:1c:50:9f:01:b6:f7:53:2c:48:ff:
                    10:c5:87:66:db:66:ba:75:86:c6:77:f4:2f:e5:d0:
                    d5:b7:38:e8:75:56:be:a3:16:f2:94:bf:47:c0:76:
                    28:e5:92:a6:55:e2:01:1f:95:25:ba:15:0c:0e:ec:
                    02:2c:71:af:ac:24:39:b3:f8:4d:05:48:92:1f:ea:
                    b3:b1:af:cb:05:e8:1e:95:ac:f7:c1:dd:4f:ca:67:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:93:3B:AF:2C:FC:2C:9C:51:AA:E4:0A:20:DF:7E:60:BA:57:6F:AE
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:65:65:54:21:fe:5c:06:3b:27:8f:08:e1:38:81:c1:f8:76:
         72:6c:c5:58:69:cf:22:ab:39:45:4b:c7:16:31:14:46:32:f8:
         cc:b8:8f:14:0e:0a:a8:33:91:47:9a:a1:f6:84:f7:30:3a:34:
         2d:5b:a6:56:5f:5d:4a:0d:08:ee:50:b8:60:a1:e9:81:6c:5e:
         b8:0d:cb:d2:95:71:f7:f6:e5:53:c5:63:00:0c:d5:9a:9f:12:
         ab:eb:9c:cb:45:37:44:2e:7b:66:e9:2a:7b:56:59:5f:3f:c2:
         4c:b5:7c:30:95:15:46:9f:78:90:fb:68:13:a6:93:6f:b1:a9:
         ae:67:ed:8b:f2:a3:48:95:6e:87:c5:f2:c3:2e:d1:d1:3d:d6:
         98:22:a0:4f:2d:8f:51:47:a2:8c:0e:be:fa:8a:5b:c0:b5:42:
         d3:6f:c5:ab:a7:b6:c6:22:ac:ab:11:c4:61:1c:f1:64:bd:04:
         c5:d3:ae:64:ff:7e:67:d3:a2:c8:6d:25:87:85:67:21:2f:f4:
         5d:45:fb:ce:f4:d7:f3:60:ff:d7:83:a6:84:97:18:3a:ad:9c:
         f4:41:cf:74:19:a5:28:97:8e:0d:98:67:32:18:45:6a:7a:ae:
         bf:95:a2:45:6d:a9:77:b6:ca:48:65:b3:ae:2c:18:29:e3:5f:
         f8:25:3d:c2
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUEd2K/eOIJF6bzX+eRLGurVCj/uEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDYxMDQ4MThaFw0yMzA3MDUxMDUzMThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI1MTg0QjU0RTA2NUNGNzM4
MjdGOTA0NzY1QjU0MUFGMUUwMDE0OTBGMzJBMkQwODIzM0UwMDBFNDdCQjI2NzBF
MDA0MTE4NEQ1NzZBMzYxOTU0ODEwQTkxRjk1MTlBNDBFM0Y0RkIwQTRCRDE5QjRE
MDUxMDJCMDk1NTgyQ0VGNzUwNjExNzNDRUJDQ0I5RTMzNDUzQzc2NjE3N0QzMjAy
MjIxRTNFODUyMDM3RERERTcyRUE0MzFFMkNDMEY0MjEwOEY2OTQwOTU1NDhFMzNC
REZEOEY3ODRGRDA2RTlENjFGMjJERjgyRjI0NDMxNjhGODA1QkE4OTg3MzYwNTg5
MkQ2MkY3RjY0OUNCMTFFRTU0NkIzMTlDNzk2NkU3RTE3NjkxRTNBQkI1QUM2ODM0
MUFDNUMxNDU2MzNENDU0OTgyOEQ0NjM5QzU3NjgwNEIxQzUwOUYwMUI2Rjc1MzJD
NDhGRjEwQzU4NzY2REI2NkJBNzU4NkM2NzdGNDJGRTVEMEQ1QjczOEU4NzU1NkJF
QTMxNkYyOTRCRjQ3QzA3NjI4RTU5MkE2NTVFMjAxMUY5NTI1QkExNTBDMEVFQzAy
MkM3MUFGQUMyNDM5QjNGODREMDU0ODkyMUZFQUIzQjFBRkNCMDVFODFFOTVBQ0Y3
QzFERDRGQ0E2NzVDM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwlGEtU4GXPc4J/kEdltUGvHgAUkPMqLQgjPgAOR7smcOAEEYTVdq
NhlUgQqR+VGaQOP0+wpL0ZtNBRArCVWCzvdQYRc868y54zRTx2YXfTICIh4+hSA3
3d5y6kMeLMD0IQj2lAlVSOM739j3hP0G6dYfIt+C8kQxaPgFuomHNgWJLWL39knL
Ee5UazGceWbn4XaR46u1rGg0GsXBRWM9RUmCjUY5xXaASxxQnwG291MsSP8QxYdm
22a6dYbGd/Qv5dDVtzjodVa+oxbylL9HwHYo5ZKmVeIBH5UluhUMDuwCLHGvrCQ5
s/hNBUiSH+qzsa/LBegelaz3wd1PymdcPwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FFqTO68s/CycUarkCiDffmC6V2+uMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGP
BggrBgEFBQcwC4aBgnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAM7OQzANBgkqhkiG9w0BAQsFAAOCAQEAcWVlVCH+XAY7J48I4TiBwfh2
cmzFWGnPIqs5RUvHFjEURjL4zLiPFA4KqDORR5qh9oT3MDo0LVumVl9dSg0I7lC4
YKHpgWxeuA3L0pVx9/blU8VjAAzVmp8Sq+ucy0U3RC57Zukqe1ZZXz/CTLV8MJUV
Rp94kPtoE6aTb7Gprmfti/KjSJVuh8Xywy7R0T3WmCKgTy2PUUeijA6++opbwLVC
02/Fq6e2xiKsqxHEYRzxZL0ExdOuZP9+Z9OiyG0lh4VnIS/0XUX7zvTX82D/14Om
hJcYOq2c9EHPdBmlKJeODZhnMhhFanquv5WiRW2pd7bKSGWzriwYKeNf+CU9wg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org