Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e36392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          ClFMsFbezGmWzPTChs2aDBYb9TvtYzs1Mdg1pUT0IpM=
Subject key identifier:   EA:CD:DB:63:00:9B:BB:24:8A:60:9A:38:C2:21:76:91:E4:23:68:D6
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       796831224009A5127F2AD5E02D26A2488654AA07
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:54:55 +0000
ROA not before:           Wed 06 Jul 2022 10:49:55 +0000
ROA not after:            Wed 05 Jul 2023 10:54:55 +0000
asID:                     7018
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:31:22:40:09:a5:12:7f:2a:d5:e0:2d:26:a2:48:86:54:aa:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:49:55 2022 GMT
            Not After : Jul  5 10:54:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:bf:6b:05:be:2b:87:0f:85:ec:0b:b5:b7:
                    05:d5:33:f8:da:9b:29:86:c4:12:a2:08:00:ae:da:
                    30:55:59:b9:82:7f:46:c2:f7:ea:11:fe:60:11:56:
                    6c:c9:00:5f:e0:b9:f3:07:30:3b:91:2c:07:a9:80:
                    3a:72:a0:6c:81:d6:89:ca:03:8f:02:56:da:d6:b5:
                    eb:c8:4b:75:7e:d2:c6:a5:8b:07:0f:34:14:d4:d6:
                    77:28:54:03:c9:01:cc:95:cb:ed:f6:d2:4f:63:5c:
                    53:b4:aa:e4:97:49:cc:40:66:ef:49:c5:70:3a:e4:
                    f9:14:27:1f:47:34:ad:33:be:29:66:ae:09:15:63:
                    95:69:40:c5:d7:c6:66:2a:10:c4:06:23:41:c9:6d:
                    6b:a2:f4:98:32:91:6f:d1:b2:ad:e4:68:4b:a7:95:
                    33:0c:c3:5d:b0:1f:31:b4:62:1d:eb:09:d4:e2:41:
                    4d:bb:11:50:63:ca:74:42:da:d2:84:14:a0:5e:20:
                    06:a4:f3:5e:3f:07:00:56:5d:dc:bf:02:5a:9d:5e:
                    7b:91:2c:21:19:7c:15:2b:13:60:fe:92:f0:8f:9a:
                    8e:e2:d5:4b:91:61:05:b1:13:dc:10:89:92:58:73:
                    87:01:c0:96:96:ce:1d:ac:5c:ee:17:3e:cc:e4:7d:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CD:DB:63:00:9B:BB:24:8A:60:9A:38:C2:21:76:91:E4:23:68:D6
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:78:07:b7:7c:76:c6:06:e0:45:c5:5a:5b:52:da:e9:91:
         b1:92:97:b8:2c:d9:21:be:f1:ee:6a:ba:a0:45:e2:db:83:df:
         80:94:77:e7:a7:b3:37:cd:02:97:1b:18:c8:8c:60:63:f4:ba:
         94:e9:b5:b1:54:d9:da:62:17:a5:7c:e6:c9:d5:d2:72:25:ba:
         6a:b6:f8:ef:bf:fb:ab:30:78:fb:a9:97:b7:b6:de:1e:45:cc:
         c9:02:92:bf:e7:c5:2e:e2:b7:bf:76:04:77:1f:eb:a2:1d:9b:
         52:5a:5c:55:de:f6:d5:81:09:19:06:99:79:09:7f:c1:37:34:
         ef:d4:85:da:c4:44:a2:d6:5a:c9:76:0a:76:4a:a6:bf:9c:1e:
         b0:20:85:8f:f5:49:cc:51:e7:95:09:1d:5f:d2:91:d5:77:b5:
         eb:4d:e5:15:ba:02:0e:4b:af:16:05:83:66:3e:79:83:9e:96:
         63:15:2f:33:33:4d:0a:89:35:90:aa:d3:fc:08:96:c4:a0:7d:
         57:a5:a4:6e:0d:de:9d:54:b8:f9:c1:d0:2c:f5:6e:de:24:ba:
         47:b7:8b:f3:ca:aa:ee:12:aa:12:bf:ca:1a:17:65:3e:69:33:
         26:c4:32:e5:9b:c4:51:12:b5:07:a5:fb:f9:31:fe:81:8d:8d:
         51:79:b2:43
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUeWgxIkAJpRJ/KtXgLSaiSIZUqgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDYxMDQ5NTVaFw0yMzA3MDUxMDU0NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUQ3Q0JGNkIwNUJFMkI4NzBG
ODVFQzBCQjVCNzA1RDUzM0Y4REE5QjI5ODZDNDEyQTIwODAwQUVEQTMwNTU1OUI5
ODI3RjQ2QzJGN0VBMTFGRTYwMTE1NjZDQzkwMDVGRTBCOUYzMDczMDNCOTEyQzA3
QTk4MDNBNzJBMDZDODFENjg5Q0EwMzhGMDI1NkRBRDZCNUVCQzg0Qjc1N0VEMkM2
QTU4QjA3MEYzNDE0RDRENjc3Mjg1NDAzQzkwMUNDOTVDQkVERjZEMjRGNjM1QzUz
QjRBQUU0OTc0OUNDNDA2NkVGNDlDNTcwM0FFNEY5MTQyNzFGNDczNEFEMzNCRTI5
NjZBRTA5MTU2Mzk1Njk0MEM1RDdDNjY2MkExMEM0MDYyMzQxQzk2RDZCQTJGNDk4
MzI5MTZGRDFCMkFERTQ2ODRCQTc5NTMzMENDMzVEQjAxRjMxQjQ2MjFERUIwOUQ0
RTI0MTREQkIxMTUwNjNDQTc0NDJEQUQyODQxNEEwNUUyMDA2QTRGMzVFM0YwNzAw
NTY1RERDQkYwMjVBOUQ1RTdCOTEyQzIxMTk3QzE1MkIxMzYwRkU5MkYwOEY5QThF
RTJENTRCOTE2MTA1QjExM0RDMTA4OTkyNTg3Mzg3MDFDMDk2OTZDRTFEQUM1Q0VF
MTczRUNDRTQ3REEzM0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnXy/awW+K4cPhewLtbcF1TP42psphsQSoggArtowVVm5gn9Gwvfq
Ef5gEVZsyQBf4LnzBzA7kSwHqYA6cqBsgdaJygOPAlba1rXryEt1ftLGpYsHDzQU
1NZ3KFQDyQHMlcvt9tJPY1xTtKrkl0nMQGbvScVwOuT5FCcfRzStM74pZq4JFWOV
aUDF18ZmKhDEBiNByW1rovSYMpFv0bKt5GhLp5UzDMNdsB8xtGId6wnU4kFNuxFQ
Y8p0QtrShBSgXiAGpPNePwcAVl3cvwJanV57kSwhGXwVKxNg/pLwj5qO4tVLkWEF
sRPcEImSWHOHAcCWls4drFzuFz7M5H2jPwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FOrN22MAm7skimCaOMIhdpHkI2jWMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGP
BggrBgEFBQcwC4aBgnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAM7ORTANBgkqhkiG9w0BAQsFAAOCAQEAA794B7d8dsYG4EXFWltS2umR
sZKXuCzZIb7x7mq6oEXi24PfgJR356ezN80ClxsYyIxgY/S6lOm1sVTZ2mIXpXzm
ydXSciW6arb477/7qzB4+6mXt7beHkXMyQKSv+fFLuK3v3YEdx/roh2bUlpcVd72
1YEJGQaZeQl/wTc079SF2sREotZayXYKdkqmv5wesCCFj/VJzFHnlQkdX9KR1Xe1
603lFboCDkuvFgWDZj55g56WYxUvMzNNCok1kKrT/AiWxKB9V6Wkbg3enVS4+cHQ
LPVu3iS6R7eL88qq7hKqEr/KGhdlPmkzJsQy5ZvEURK1B6X7+TH+gY2NUXmyQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org