Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37332e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          f9do+liLG1w5OuqT5jpMd1zM0QH3c0LZL9MBtRpzgwE=
Subject key identifier:   62:50:18:8E:93:F1:E9:79:A7:57:72:7B:72:51:08:F1:C7:95:2A:06
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       303E44FE7645207549F353BFF1AE7927F785E353
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:56:08 +0000
ROA not before:           Wed 06 Jul 2022 10:51:08 +0000
ROA not after:            Wed 05 Jul 2023 10:56:08 +0000
asID:                     1299
IP address blocks:        206.206.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3e:44:fe:76:45:20:75:49:f3:53:bf:f1:ae:79:27:f7:85:e3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:51:08 2022 GMT
            Not After : Jul  5 10:56:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:b8:33:32:59:0f:b0:ee:5f:a8:1b:aa:81:
                    dc:bf:96:5b:b0:d1:6d:0f:06:c5:c2:92:31:ad:e8:
                    6f:03:32:61:99:f2:f2:9c:36:a9:00:0c:05:db:3f:
                    e4:f4:31:9d:7b:41:58:4d:32:f8:dc:0f:6b:1d:c0:
                    50:37:de:4a:35:6b:97:e0:61:03:81:a0:c7:25:47:
                    e7:10:ee:77:f2:b8:2f:67:4a:b0:38:93:d0:6e:be:
                    65:47:64:e1:ed:a2:eb:9e:92:c3:c5:d7:c5:f1:5d:
                    25:5c:08:1f:60:8d:36:40:d2:70:4b:a8:f3:7b:e1:
                    0b:5e:f9:38:af:42:a7:bb:ec:0e:f6:cc:48:50:69:
                    59:0a:4b:a9:85:b3:d4:a4:be:6e:c6:f7:d4:73:4d:
                    d0:f4:cb:5d:b8:b5:08:c0:7e:30:42:e1:77:2e:7a:
                    58:fa:e0:04:5b:a7:6b:68:48:3d:e8:2f:97:75:09:
                    ec:4e:15:8e:fd:50:a2:03:08:fe:63:81:b3:eb:ed:
                    df:4b:3a:d7:34:b5:f9:7c:95:1f:71:e5:0f:e6:55:
                    37:22:d9:37:77:f7:12:f6:66:77:ed:de:fe:7f:fa:
                    aa:6a:21:7a:34:fd:3d:b3:dd:a8:dc:75:a9:b5:17:
                    30:9c:8b:cf:5c:7e:f5:a7:ad:f0:d0:da:b6:1d:64:
                    c3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:18:8E:93:F1:E9:79:A7:57:72:7B:72:51:08:F1:C7:95:2A:06
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d0:c4:47:56:0c:ca:31:4b:a7:ab:01:85:c9:fc:2d:b6:d0:
         1a:5e:41:ee:4a:c9:76:d0:35:40:38:a5:a1:07:d0:7d:f6:06:
         26:ed:71:3c:c1:bd:66:f4:32:16:3d:3b:b9:0b:26:2a:eb:0c:
         b9:b9:08:26:53:39:96:a2:7a:70:65:91:3f:f8:d8:ce:51:c7:
         a0:29:26:d4:22:83:9f:f9:e8:58:7e:19:cb:bc:61:71:83:63:
         59:09:34:01:e3:bd:42:47:5b:10:9b:f0:6a:98:93:c6:18:c0:
         ee:e8:06:54:c7:9a:76:5c:34:5c:a1:d7:a2:11:59:3b:03:7e:
         2f:68:4d:8c:95:4e:b3:e5:d4:c4:63:f9:5f:f5:fd:e3:d8:9f:
         3c:aa:40:09:3e:34:55:ee:ec:fc:93:ba:5a:03:d0:06:2d:b7:
         e2:f9:38:16:55:56:dd:cd:44:96:85:07:2a:f9:cd:9c:9c:a9:
         9e:e2:c4:b1:83:7f:9c:64:83:e3:37:bf:76:5d:64:87:4d:dd:
         4d:84:bd:45:4f:c3:6b:6e:45:33:f5:7f:19:01:fe:c0:f3:41:
         bd:93:60:77:74:d7:4d:b6:9b:2e:cf:71:a4:c8:ff:29:33:ac:
         a0:a5:b5:b1:05:ff:9e:be:ad:85:95:0a:19:7a:e5:79:ac:d3:
         f8:26:60:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org