Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          aVzw+3YPf+B6GcGS5HiH8gpxt7LT6w7y1jDQ0/Qmzzk=
Subject key identifier:   3B:15:3A:B3:6D:D2:8F:F8:C6:87:E7:B0:FB:AD:76:50:16:68:B4:AB
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       7791FB46C4E1F94C03385D2B405022754C976FA5
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:56:28 +0000
ROA not before:           Wed 06 Jul 2022 10:51:28 +0000
ROA not after:            Wed 05 Jul 2023 10:56:28 +0000
asID:                     398465
IP address blocks:        206.206.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:91:fb:46:c4:e1:f9:4c:03:38:5d:2b:40:50:22:75:4c:97:6f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:51:28 2022 GMT
            Not After : Jul  5 10:56:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:af:11:c8:5d:85:48:54:ba:0c:6a:13:04:
                    3b:e2:e0:88:05:4a:ea:eb:cb:c1:d2:d8:42:f1:ce:
                    44:7f:0e:aa:df:1d:a0:38:0f:fe:28:fd:6b:2b:95:
                    ab:81:49:a7:d5:18:a1:75:f6:bc:aa:1a:51:68:ec:
                    67:fe:99:6e:6d:cb:f0:94:95:17:69:5a:c4:41:dc:
                    16:64:e0:11:24:1b:ef:47:e0:07:86:29:24:3a:55:
                    80:71:95:26:3a:aa:f0:ba:b9:3c:8c:65:af:1e:1d:
                    c7:72:b5:4d:37:ff:b2:43:f7:0b:95:0b:e8:8f:5d:
                    a4:b9:1b:f1:77:8c:13:74:11:b1:f6:2c:90:57:39:
                    78:d9:62:e8:d0:dc:00:b6:2c:a2:90:e6:e7:3c:d5:
                    bb:af:11:77:a2:94:35:88:7f:e7:9a:73:33:5f:5b:
                    e7:39:19:15:31:e9:2a:dd:f3:57:a7:59:20:9d:b2:
                    b8:41:4d:2d:53:a6:70:6e:e1:ca:04:da:67:85:2c:
                    03:03:28:4e:4a:ae:ae:96:dc:4e:3f:88:2c:35:bf:
                    c7:69:96:4a:a4:e8:e6:57:f6:70:0e:1b:27:69:65:
                    06:b5:53:c7:80:81:ae:b5:9e:2d:f8:c5:fa:a8:fc:
                    43:9d:36:c8:86:0c:70:d6:fa:5e:f5:43:e6:f6:d0:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:3A:B3:6D:D2:8F:F8:C6:87:E7:B0:FB:AD:76:50:16:68:B4:AB
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5f:89:c7:1b:5d:68:e8:d8:5f:2b:25:2e:01:c7:eb:9d:96:
         d6:12:46:bd:f4:31:c2:df:d7:d1:77:e8:38:78:54:8b:25:35:
         21:fc:de:e2:2b:e9:a7:c5:47:42:68:8a:70:ba:0e:f0:76:4c:
         ab:10:15:49:2e:d4:d7:b8:a4:95:48:fd:ac:80:5f:f7:a8:c7:
         cb:78:b4:95:01:97:0e:c8:73:fa:90:bb:8b:a4:c9:90:da:21:
         21:55:2d:4f:cf:a6:83:80:aa:34:e5:47:07:bf:24:e0:6b:f0:
         02:52:1c:0f:c6:e8:27:0d:50:c4:2a:4e:0f:e2:aa:83:54:fd:
         37:bf:96:c7:c2:1a:ad:f3:ef:ae:e0:6a:ac:4a:ac:86:93:40:
         b5:7a:2d:6d:e9:44:19:71:20:9b:71:2f:64:fd:71:f7:5e:3d:
         a2:b0:db:5a:7c:33:f3:6d:b4:a1:00:8f:04:82:0b:39:76:a4:
         a3:7a:00:77:b2:ab:37:11:95:80:b5:82:47:56:67:ac:5f:55:
         69:09:26:62:84:11:9f:04:f4:59:4f:2f:c4:a3:75:56:ac:f8:
         90:d4:f7:9a:d6:24:e1:e4:52:b5:dd:8e:66:57:2a:df:d3:6f:
         3d:8b:c4:83:4e:28:4f:90:26:24:4d:dc:96:2d:b1:c6:24:6f:
         e7:e3:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org