Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37312e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          4nTXssBslRaT4WhTnQCWSDjv4nCKregxRBtKCUUsRKc=
Subject key identifier:   80:2F:85:63:35:BB:CA:1A:BE:B2:7A:6F:38:18:32:58:BF:4B:98:E8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       244C529F3C34004881B377D89F378A3CD2C9D2FE
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:55:18 +0000
ROA not before:           Wed 06 Jul 2022 10:50:18 +0000
ROA not after:            Wed 05 Jul 2023 10:55:18 +0000
asID:                     1299
IP address blocks:        206.206.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:52:9f:3c:34:00:48:81:b3:77:d8:9f:37:8a:3c:d2:c9:d2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:50:18 2022 GMT
            Not After : Jul  5 10:55:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:9f:5c:a3:87:8b:e0:53:9e:11:74:5e:3b:
                    0f:57:59:8e:5f:9a:0e:8b:5d:4e:57:22:1b:52:24:
                    9c:f8:14:9d:32:90:1f:d5:17:c7:84:c4:07:36:12:
                    86:ab:3e:a6:4a:52:3e:b0:67:24:db:fb:68:79:38:
                    07:0b:74:7f:23:91:1d:96:1e:79:1e:eb:fb:51:5b:
                    c6:89:e6:a5:1c:d4:de:19:b5:33:ce:86:e3:b1:c5:
                    70:a5:2a:b0:b4:fb:43:5b:74:5d:e9:78:67:90:1a:
                    23:2c:19:80:f1:19:21:07:0c:7a:69:af:34:7b:9e:
                    33:fb:c9:c9:33:2b:7a:ae:73:32:4d:bf:ec:a4:27:
                    f0:c8:97:18:12:ff:84:8f:3d:9b:8f:71:8e:12:0c:
                    b8:37:4d:88:09:7d:86:37:77:dc:a3:54:57:c8:cd:
                    39:b5:dc:ff:e5:c2:cc:cb:96:a4:3f:84:be:4a:8c:
                    81:b8:3a:32:e9:3c:f3:a7:38:70:60:bc:a0:9c:da:
                    23:12:d5:26:dd:ab:db:12:4c:dd:9c:ab:df:81:1c:
                    f9:66:29:a8:5e:96:df:cc:b2:37:5c:50:33:0c:d9:
                    5d:f7:da:b4:38:d1:ef:51:b8:b0:47:7c:4a:4f:87:
                    76:c7:5a:b8:a0:57:aa:16:5c:f6:61:fb:37:1a:43:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:85:63:35:BB:CA:1A:BE:B2:7A:6F:38:18:32:58:BF:4B:98:E8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:8f:d7:b5:a0:58:cd:8f:94:94:d4:80:fc:d0:e7:8a:df:
         5d:8c:93:42:20:20:f9:1e:dc:fe:4c:80:e7:c1:b3:85:58:bc:
         04:5a:70:3c:6f:dd:96:6c:8a:ee:4e:6f:4a:df:6f:e3:05:6a:
         89:fe:ee:8a:74:ba:6c:1a:4d:a3:2c:1d:b2:19:3b:b3:d9:82:
         fc:46:c0:d6:81:43:19:18:b1:a4:56:88:f3:be:b6:0a:4a:79:
         6b:4f:77:38:69:2b:71:2f:f3:0b:bb:ff:28:f1:f9:8c:b8:61:
         c4:13:90:83:5a:32:1c:7e:3b:56:19:ca:20:c1:b5:b8:15:23:
         2c:cc:84:c1:e7:db:3a:b2:89:65:93:c2:91:a0:68:06:b3:e0:
         32:94:03:11:8e:a6:d6:c5:43:24:5c:32:97:18:79:7e:f5:e9:
         89:a2:a3:dd:87:5e:8a:f1:97:93:de:5b:0f:93:0f:6e:87:2c:
         41:af:51:28:45:e9:85:fc:aa:2e:2b:c0:c0:c0:84:dd:23:d7:
         e7:85:b7:70:bc:2a:a8:40:d2:e5:74:c1:ac:0f:a2:73:8e:43:
         b2:3d:9d:e5:6e:0e:ce:fd:08:65:ae:b0:b2:6f:65:c5:cf:19:
         be:74:8f:51:ec:28:4b:43:44:e1:88:f7:8c:3a:e0:27:bf:8b:
         64:24:49:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org