Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          9Z8Lb6QAKsN59oVP4o3eTbM5IsITH3xAWuwjQRvBAKc=
Subject key identifier:   9A:1C:FC:AB:84:11:17:A3:7A:92:C5:BD:AF:46:4E:D6:04:0F:B0:DA
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       0325301983954DF275C0B8720CC3E7521B37E605
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:55:29 +0000
ROA not before:           Wed 06 Jul 2022 10:50:29 +0000
ROA not after:            Wed 05 Jul 2023 10:55:29 +0000
asID:                     7018
IP address blocks:        206.206.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:25:30:19:83:95:4d:f2:75:c0:b8:72:0c:c3:e7:52:1b:37:e6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:50:29 2022 GMT
            Not After : Jul  5 10:55:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:fd:7e:2b:10:4c:03:ad:4e:ba:68:43:73:
                    e8:38:72:61:98:0e:14:22:49:12:34:c7:b9:a4:dd:
                    9e:9d:4b:50:bb:35:e6:71:18:cd:a9:28:55:dc:ac:
                    aa:05:7a:60:70:7c:8e:80:42:a6:02:88:1b:e3:26:
                    86:cd:93:ea:e8:24:bc:45:cb:6c:3c:0b:db:68:41:
                    63:4e:eb:ed:c8:96:5f:b6:14:35:93:bb:52:1c:05:
                    d5:5e:66:86:d2:95:4b:bc:d3:25:fe:1a:7c:03:58:
                    82:b4:20:00:36:af:ea:1a:dc:c4:bc:30:87:5d:7a:
                    40:2d:d6:84:1e:2b:2b:33:aa:e7:7e:4b:61:bc:0e:
                    8a:19:c2:f7:a6:cd:53:12:b8:3e:1d:fe:51:9f:21:
                    b6:13:4e:0d:b6:32:a7:c0:c6:69:07:9f:97:2f:2d:
                    0d:21:90:a4:4e:de:39:74:08:67:d0:f1:b4:f7:bd:
                    b0:95:5d:72:6a:05:07:a5:ab:c1:6b:aa:81:6c:f2:
                    c3:f1:1b:cd:d3:d8:e0:64:de:15:f1:b0:0b:55:7c:
                    0a:62:90:24:74:72:91:ff:71:c3:d2:5d:38:01:9b:
                    37:1b:77:c0:aa:9f:cb:1f:9f:a7:24:8f:9e:e6:68:
                    65:d4:c8:52:f8:9b:f9:99:20:aa:6f:f3:dc:21:f0:
                    cf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1C:FC:AB:84:11:17:A3:7A:92:C5:BD:AF:46:4E:D6:04:0F:B0:DA
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:65:8e:40:ae:a8:8b:e5:dd:58:8a:46:8c:72:1f:85:7d:99:
         95:2c:22:ef:59:bd:75:6d:9a:bc:e0:53:5f:48:63:7a:00:b4:
         e5:8d:19:5e:c1:ad:22:fa:7a:6f:53:67:fd:ad:1d:31:6c:21:
         26:55:ac:96:b8:5c:8d:d5:a6:4a:49:fa:f8:93:ec:f2:2b:10:
         be:2c:8f:99:60:e0:a1:b5:62:68:48:43:1c:a3:33:1f:58:b0:
         45:83:aa:f7:fd:48:8d:cd:dc:3d:11:c7:5b:f2:52:bb:ef:c8:
         de:bd:b2:14:d5:6d:13:a2:b3:1f:4d:71:43:db:5b:ea:d7:9a:
         a8:5c:d8:4a:fb:7d:34:e9:dd:97:40:f6:c8:46:3d:51:f8:aa:
         dc:fe:e1:ff:31:f9:ff:7d:80:f7:ff:73:54:21:29:cb:61:0f:
         6f:b0:dc:56:93:b2:00:4d:aa:ea:a5:f5:7d:31:c6:8e:08:28:
         46:54:c8:16:5d:7e:aa:7e:b1:f7:82:07:77:dd:c2:80:ad:fd:
         46:3b:b2:b0:02:9f:62:19:0e:c1:a2:fd:48:e4:84:d2:75:1e:
         fc:a6:15:8e:d6:36:d2:c5:fd:16:dc:3c:22:05:08:24:cd:e1:
         63:d9:4e:f0:33:77:a6:cb:08:01:af:24:77:f6:86:43:15:37:
         0d:23:6b:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org