Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          I9mimjewoG6S7IyG4n7fP7SV0dJahwJJKg85uvyExGI=
Subject key identifier:   7A:94:AF:EF:EE:D1:F2:AC:58:C4:35:53:98:53:FA:7C:21:37:DA:EB
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1695E8D02343DFA8999BCDD904662B5AAADDC078
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:54:17 +0000
ROA not before:           Wed 06 Jul 2022 10:49:17 +0000
ROA not after:            Wed 05 Jul 2023 10:54:17 +0000
asID:                     398465
IP address blocks:        206.206.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:e8:d0:23:43:df:a8:99:9b:cd:d9:04:66:2b:5a:aa:dd:c0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:49:17 2022 GMT
            Not After : Jul  5 10:54:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:27:10:74:54:59:4c:d3:5f:12:d5:40:fe:
                    af:3d:17:93:4f:c3:8a:c8:4e:6c:5b:47:b9:e4:74:
                    64:f8:3b:c7:5a:53:2a:12:f9:d9:b3:16:4b:4f:13:
                    11:7d:4b:57:73:4f:0f:e1:55:3b:b5:4e:e0:98:e6:
                    2b:a0:aa:92:a1:6a:c9:42:fa:83:b0:b8:e5:f8:4e:
                    08:68:9c:da:6c:e6:d8:d3:32:b3:ef:5b:ed:24:80:
                    ca:a5:6b:31:3b:9e:9a:48:22:4a:af:f2:cd:0d:f9:
                    b3:f5:53:45:32:0d:c9:d4:1e:4c:7b:dc:31:1c:7a:
                    3a:8a:06:24:b0:ea:38:e6:fb:80:0e:26:3d:45:60:
                    23:c7:fc:33:28:78:a6:5f:06:50:3b:58:c7:f2:84:
                    ee:1c:40:fa:e9:e0:4f:8b:9f:67:94:31:99:54:c9:
                    55:e0:49:14:85:38:83:eb:56:f6:5b:30:51:d1:2f:
                    d3:5c:43:1f:48:a2:d0:09:2c:25:85:31:a6:4e:5d:
                    ad:3a:43:83:b1:44:49:b5:71:58:4d:23:6d:37:e6:
                    27:b7:d5:57:b7:89:24:14:4e:ba:61:61:95:7b:29:
                    8b:cb:10:30:01:58:a1:39:ab:fd:51:42:c9:5b:64:
                    63:ba:18:e8:b9:a6:47:7d:9f:8f:77:72:fc:81:25:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:94:AF:EF:EE:D1:F2:AC:58:C4:35:53:98:53:FA:7C:21:37:DA:EB
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:cd:ec:44:37:14:bc:00:f2:73:07:1b:c8:54:b7:49:f6:
         6f:45:ae:be:16:c5:35:06:71:36:3a:56:6f:54:74:93:f4:80:
         e2:02:32:23:d4:31:96:e1:0a:16:f2:73:c3:6b:0f:0c:40:cf:
         6a:2b:2f:9c:e0:8c:d1:fb:30:37:be:4e:68:06:f4:ee:e8:e7:
         32:d8:45:04:29:a4:dc:59:c5:2c:61:19:5c:aa:82:34:e2:13:
         cd:d3:74:7b:a0:02:ba:5f:e9:5c:35:6e:2c:14:a2:ea:3f:f2:
         c5:c8:10:f8:06:29:aa:de:7d:f2:b9:98:32:fe:da:57:0f:66:
         92:64:78:9f:4e:a7:88:70:4a:75:12:7b:a1:7b:a4:ad:53:7a:
         72:dd:be:e2:b6:49:42:ff:fb:a1:2b:f1:33:d0:bb:c9:6d:98:
         77:90:e3:c5:87:e3:a8:26:5c:ce:2c:72:4b:94:01:05:14:c6:
         d0:42:2c:7f:2e:be:b2:b1:9e:cf:6f:3e:b6:f8:c0:b1:1a:d7:
         09:11:b5:7e:8b:b2:ca:6b:5d:e8:49:06:ea:1c:10:30:f2:99:
         49:55:ef:58:23:64:4c:de:0f:bf:b8:d8:2b:e3:08:77:0c:c7:
         6f:80:f6:0c:6a:81:10:7f:69:cd:89:86:d7:fc:9a:5e:31:e8:
         47:d3:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org