Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          eueDv0GbNcypbmwohLJjteoN37xafDmFzgvG6GFN4y4=
Subject key identifier:   90:0A:70:00:6F:86:68:B5:F2:0B:FF:D2:3E:D4:86:FF:ED:0E:37:35
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       64491F2E23DC49A6773F7D0878C3E3F74E10FE5A
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:55:06 +0000
ROA not before:           Wed 06 Jul 2022 10:50:06 +0000
ROA not after:            Wed 05 Jul 2023 10:55:06 +0000
asID:                     398465
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:49:1f:2e:23:dc:49:a6:77:3f:7d:08:78:c3:e3:f7:4e:10:fe:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:50:06 2022 GMT
            Not After : Jul  5 10:55:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:20:5b:58:9f:be:78:86:d9:1e:c3:f8:d7:
                    67:cf:0f:9b:1f:7a:ac:85:70:07:23:5d:e3:57:1c:
                    9d:b3:84:f4:62:c2:28:e2:f4:d8:73:15:75:88:c7:
                    c8:dc:3d:83:4f:27:cf:91:c9:c2:09:b2:87:19:6b:
                    29:d6:9d:be:dc:fe:20:75:f4:93:77:60:9e:be:b7:
                    f3:9a:83:e6:8b:3e:60:30:4c:ee:a0:cf:a4:a3:f7:
                    f8:bd:33:ee:2a:a4:0a:ba:13:f3:f9:b4:4e:7e:48:
                    70:42:91:69:73:ad:d5:23:0f:87:9b:4f:b3:2b:83:
                    c9:97:c4:14:b0:e5:94:81:a2:2f:95:f1:fe:ee:d5:
                    8d:20:ae:6d:ca:ca:4f:26:46:9e:8c:15:d6:24:31:
                    95:10:eb:e5:2f:f8:e2:02:c5:54:ae:a6:60:78:81:
                    b6:cc:36:74:1e:ba:55:1b:0b:3b:39:83:ae:de:a5:
                    d3:08:35:b1:fe:59:73:d8:18:e1:cb:11:38:9f:02:
                    38:a9:70:ed:2d:ad:ad:84:63:1d:85:6f:30:a1:36:
                    14:1b:09:4a:f5:4a:58:3a:fa:52:03:68:1d:a3:3c:
                    c0:99:ca:83:b8:e7:ee:a6:ec:06:14:9b:a4:f7:0e:
                    2a:76:8e:94:ec:79:81:51:02:1d:02:bc:7b:46:84:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0A:70:00:6F:86:68:B5:F2:0B:FF:D2:3E:D4:86:FF:ED:0E:37:35
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:c8:06:5d:a0:17:6b:4d:dc:ea:47:c8:1f:fa:ff:48:a3:
         ca:8e:c0:5f:1d:76:a4:42:54:f4:10:79:fb:21:95:09:7c:4a:
         53:61:6d:b0:10:6e:03:5f:43:93:88:ac:d0:04:b2:9d:41:fe:
         35:f7:af:0e:a2:1b:a6:34:3a:48:fc:25:e4:a1:06:be:1b:4f:
         41:7c:d6:f4:23:8f:61:99:84:f4:9a:3b:3e:ed:8a:fb:c5:ef:
         34:56:4d:f6:6e:3c:13:06:aa:1b:78:23:8b:14:b6:13:09:6f:
         67:11:45:9e:0b:bf:51:cb:97:87:8b:77:34:1d:5d:44:ae:59:
         83:40:67:1e:60:6f:5b:e6:fc:ab:8f:38:b9:a9:c8:4b:58:3f:
         ab:4d:2b:33:c8:de:0b:21:fa:68:f8:5a:c3:24:12:0f:d0:ec:
         ce:ee:da:98:1c:3d:33:98:d2:85:5c:bd:26:09:fe:7b:d3:a9:
         b2:d0:3d:11:49:df:56:a3:74:7e:2c:8b:06:cc:cd:24:b8:a6:
         95:40:56:ca:da:ad:69:19:b8:37:21:99:0e:ea:33:43:49:89:
         eb:24:7a:bd:be:fe:ff:5e:bd:11:9f:9e:f1:38:66:27:00:d7:
         df:d1:97:19:f6:cd:49:a4:55:c6:7b:2f:12:ec:88:d5:80:12:
         e3:c8:f3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org