Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e36392e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          Ty1e40WdwW893GMfH8QxVLM9UGu80oyDiAokKegibFA=
Subject key identifier:   5D:BD:B8:AC:B5:8E:BB:C3:E5:DF:8B:E1:52:56:41:4F:98:1F:C5:5C
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6C48517DFD2884CD536777BF2E3187393F85C70D
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:54:41 +0000
ROA not before:           Wed 06 Jul 2022 10:49:41 +0000
ROA not after:            Wed 05 Jul 2023 10:54:41 +0000
asID:                     1299
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:48:51:7d:fd:28:84:cd:53:67:77:bf:2e:31:87:39:3f:85:c7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:49:41 2022 GMT
            Not After : Jul  5 10:54:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:22:7e:5a:af:d1:ac:79:52:73:b5:cd:39:
                    64:df:63:4f:ad:5f:c4:cd:6a:ae:22:d1:ec:63:c5:
                    6d:0e:3d:47:88:3d:2e:9a:d3:36:57:70:f1:5f:56:
                    d7:3a:65:d8:fd:e4:4c:72:46:55:87:6e:00:3f:bd:
                    6b:ec:77:09:72:89:23:03:80:45:d6:d3:9f:48:7e:
                    1c:29:dd:61:bf:44:fc:6f:d6:70:83:71:41:1e:95:
                    b6:73:5e:5b:d3:1a:37:01:09:c0:46:a3:4a:6f:3e:
                    d9:79:62:69:cd:fc:df:18:bf:ac:5f:d2:e7:32:8f:
                    74:10:ba:39:48:af:cd:fc:07:18:8b:54:86:2d:32:
                    03:24:6e:22:5d:d3:52:1f:4b:ad:b9:39:b2:87:f7:
                    3f:77:66:e4:42:a1:6a:f1:37:85:89:7c:d2:c0:b0:
                    6e:a2:d9:ca:e0:2b:fe:05:99:25:55:34:69:90:dd:
                    9a:fc:3c:76:df:0e:8d:ca:bc:06:c6:19:5b:24:d2:
                    7e:87:0a:d8:98:3d:1d:56:a6:01:ec:a1:d5:1f:ba:
                    1e:ff:1b:9c:d9:29:e2:c9:54:23:a9:bc:3e:16:bf:
                    ea:6f:c7:7c:e1:d4:29:3c:4c:d0:c6:91:c0:3e:22:
                    2a:3d:3b:99:b7:f0:b6:27:06:71:cf:ac:db:7c:26:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:B8:AC:B5:8E:BB:C3:E5:DF:8B:E1:52:56:41:4F:98:1F:C5:5C
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:23:df:64:1c:71:ab:99:fa:83:aa:7b:60:bc:ee:90:a6:6d:
         14:72:e9:00:ca:2b:88:a6:e2:03:b1:7a:45:16:3c:9f:be:d2:
         57:0f:15:8e:5d:3b:e2:75:eb:0a:76:66:66:c1:c7:6f:8f:c8:
         e4:f8:f4:1b:81:cb:2e:40:69:41:f5:00:85:78:b5:2e:34:ed:
         35:a6:f8:11:c8:70:d7:4b:a5:95:d4:f0:ab:c5:0d:12:86:87:
         3e:0f:df:ee:21:da:88:e5:ee:9e:ca:97:29:8b:f1:0a:ba:b7:
         33:a1:52:f1:8a:07:c8:01:c1:42:66:d3:b4:7a:53:79:9c:6d:
         6b:ce:69:99:32:1f:55:4e:43:ca:ae:22:a7:19:6b:08:5b:b4:
         d2:60:25:1c:bf:f9:2c:08:33:5b:f8:18:52:22:e3:54:a1:64:
         84:f8:a9:17:75:c9:ef:77:dd:3c:17:39:b8:57:f6:5b:13:b3:
         f9:6d:c4:a6:2a:ec:6f:52:9d:18:ad:b3:6e:2d:b4:55:13:ce:
         a3:06:ba:34:4c:32:f9:91:be:09:94:83:62:6e:2b:dd:93:8b:
         13:a2:00:e2:a0:fa:f3:b3:1d:ec:91:07:38:18:75:7b:df:4f:
         aa:21:e4:33:36:75:83:eb:bb:c9:7e:08:fc:b4:6e:48:48:bd:
         92:cc:87:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org