Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e36372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          ewP8hOvz+mJAD+K+IqRGmAOAFZv85l1/dgsu8o/NrBk=
Subject key identifier:   F1:03:97:E8:43:AD:5A:E2:C0:4C:3B:45:29:44:52:2C:41:39:86:48
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1C54C87835504D9B9B3DBCC74C427821D21F9C02
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:53:38 +0000
ROA not before:           Wed 06 Jul 2022 10:48:38 +0000
ROA not after:            Wed 05 Jul 2023 10:53:38 +0000
asID:                     7018
IP address blocks:        206.206.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:c8:78:35:50:4d:9b:9b:3d:bc:c7:4c:42:78:21:d2:1f:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:48:38 2022 GMT
            Not After : Jul  5 10:53:38 2023 GMT
        Subject: CN=3082010A0282010100D9FCDBAB38A16B111CB16C1E1B48DA9A2A3F383D9C81488A1205C09B4D5AF4DE8FA0F4E9208D582D072B2EF486AC3BB4F3DA78A026D8A7374293F84DA3B55BBA8A415BE765AFEF18C83A6F215315BD0682C0C31C7E0996D1D0EFF2C32187D3904184D1D748C6D6BA43C28022275C2D857C955BC376D34398EF586A316BAFAD688B34F15D344AAFF77223AFE5C51DBF7A84E15BC2268B22FBF26B3FAEBFDE93A8E46CAB4A2E77885182F7FAD424A13A14C26A289304964FAA90AEEC004BFB2D05C5D2036D495220CE1C1923D194A384887215CC277E825C0E8E8195F547AE5D71B0D0F32C9590AB28D58AAED481C3CB982B01578E78C82AA5C20B63BFE266BF390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:db:ab:38:a1:6b:11:1c:b1:6c:1e:1b:48:
                    da:9a:2a:3f:38:3d:9c:81:48:8a:12:05:c0:9b:4d:
                    5a:f4:de:8f:a0:f4:e9:20:8d:58:2d:07:2b:2e:f4:
                    86:ac:3b:b4:f3:da:78:a0:26:d8:a7:37:42:93:f8:
                    4d:a3:b5:5b:ba:8a:41:5b:e7:65:af:ef:18:c8:3a:
                    6f:21:53:15:bd:06:82:c0:c3:1c:7e:09:96:d1:d0:
                    ef:f2:c3:21:87:d3:90:41:84:d1:d7:48:c6:d6:ba:
                    43:c2:80:22:27:5c:2d:85:7c:95:5b:c3:76:d3:43:
                    98:ef:58:6a:31:6b:af:ad:68:8b:34:f1:5d:34:4a:
                    af:f7:72:23:af:e5:c5:1d:bf:7a:84:e1:5b:c2:26:
                    8b:22:fb:f2:6b:3f:ae:bf:de:93:a8:e4:6c:ab:4a:
                    2e:77:88:51:82:f7:fa:d4:24:a1:3a:14:c2:6a:28:
                    93:04:96:4f:aa:90:ae:ec:00:4b:fb:2d:05:c5:d2:
                    03:6d:49:52:20:ce:1c:19:23:d1:94:a3:84:88:72:
                    15:cc:27:7e:82:5c:0e:8e:81:95:f5:47:ae:5d:71:
                    b0:d0:f3:2c:95:90:ab:28:d5:8a:ae:d4:81:c3:cb:
                    98:2b:01:57:8e:78:c8:2a:a5:c2:0b:63:bf:e2:66:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:03:97:E8:43:AD:5A:E2:C0:4C:3B:45:29:44:52:2C:41:39:86:48
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:24:85:60:d6:63:97:17:ff:0e:c5:8a:da:c9:34:f5:98:
         9c:3b:bf:5c:87:71:e2:cb:09:2e:cf:7c:c8:96:3d:e8:61:a3:
         17:66:35:60:bf:b2:54:9f:c2:46:f8:8b:58:45:1b:03:77:8b:
         0f:83:e5:71:91:19:6a:9f:40:85:22:ed:9a:3c:39:22:71:c5:
         35:d3:73:2f:e0:64:49:db:d2:4a:f5:70:b0:c6:9a:4b:df:ed:
         52:99:a7:ee:2f:0b:d1:90:27:94:87:06:e8:c0:04:eb:9b:16:
         2d:55:52:49:75:2a:66:13:e5:1f:2d:6a:b7:c0:16:51:1d:a4:
         5f:d6:df:7f:d3:14:c2:d5:6b:0d:89:7b:f0:fb:c4:7b:5d:d8:
         cd:73:38:5c:31:cc:4f:fc:d8:6e:2c:e9:9e:40:e1:b2:c1:41:
         1c:62:2c:c5:35:b3:cc:24:bb:ec:b3:3d:de:6c:21:32:a5:16:
         9f:de:bc:38:a1:f1:f1:80:58:46:ff:01:45:dc:d9:c7:9f:2c:
         50:1a:e7:21:37:aa:2d:f2:13:01:8a:5b:d7:5a:82:87:e0:c0:
         aa:2c:3d:ee:42:c0:be:c1:37:3b:68:19:7a:8e:5d:7a:8f:57:
         17:77:3e:5a:f9:c9:7f:f6:d6:2e:e8:d5:c1:47:12:f3:8f:c9:
         03:9c:d5:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org