Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37352e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          Bk50sFAFZRh2c0zu0YtqPdgP+nh4zaIruCXGwhIPqQw=
Subject key identifier:   EA:86:44:2F:5C:AC:08:1D:1D:00:5F:7B:55:57:FC:6C:B0:05:A6:29
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       B0125789015AFB555CF46C27ABF9FDC8A5CC7C
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:56:54 +0000
ROA not before:           Wed 06 Jul 2022 10:51:54 +0000
ROA not after:            Wed 05 Jul 2023 10:56:54 +0000
asID:                     1299
IP address blocks:        206.206.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b0:12:57:89:01:5a:fb:55:5c:f4:6c:27:ab:f9:fd:c8:a5:cc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:51:54 2022 GMT
            Not After : Jul  5 10:56:54 2023 GMT
        Subject: CN=3082010A02820101009D603488FC9E11FA35C3CEDE50E7CC9CAE9AD50C1B71EEC2E23868992A5005A1603EE443DD3F206A0033FD0A37203489BE84B1CC7F19327687A26A294AD9416F3B174829416538B2ACD38EC0EEFEF15A105882EFC091DF914EBD383FEEF7298DEB8EFF4C2368EB9DB4A2B10FE4CF6E5661FC972832288C13BBC575BC8315C2CBFAADDFBBD35CDEBDBAABAD456BB09E11820C291FBF0AC0FA8B50A26C06AC2A9DE3C544554A747E2F93014675A108B67B25181EAEAEC3D235125B2D08D4ED98073DCE85BEFB6F85390CF08D8AF553D0D5F2F98A7D2DDD939DE1EDED9D151CA9AB8B3A7E943494B87B4DA89417DA2CAE1FD0F1C885502E028B6D116A42D62657A50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:34:88:fc:9e:11:fa:35:c3:ce:de:50:e7:
                    cc:9c:ae:9a:d5:0c:1b:71:ee:c2:e2:38:68:99:2a:
                    50:05:a1:60:3e:e4:43:dd:3f:20:6a:00:33:fd:0a:
                    37:20:34:89:be:84:b1:cc:7f:19:32:76:87:a2:6a:
                    29:4a:d9:41:6f:3b:17:48:29:41:65:38:b2:ac:d3:
                    8e:c0:ee:fe:f1:5a:10:58:82:ef:c0:91:df:91:4e:
                    bd:38:3f:ee:f7:29:8d:eb:8e:ff:4c:23:68:eb:9d:
                    b4:a2:b1:0f:e4:cf:6e:56:61:fc:97:28:32:28:8c:
                    13:bb:c5:75:bc:83:15:c2:cb:fa:ad:df:bb:d3:5c:
                    de:bd:ba:ab:ad:45:6b:b0:9e:11:82:0c:29:1f:bf:
                    0a:c0:fa:8b:50:a2:6c:06:ac:2a:9d:e3:c5:44:55:
                    4a:74:7e:2f:93:01:46:75:a1:08:b6:7b:25:18:1e:
                    ae:ae:c3:d2:35:12:5b:2d:08:d4:ed:98:07:3d:ce:
                    85:be:fb:6f:85:39:0c:f0:8d:8a:f5:53:d0:d5:f2:
                    f9:8a:7d:2d:dd:93:9d:e1:ed:ed:9d:15:1c:a9:ab:
                    8b:3a:7e:94:34:94:b8:7b:4d:a8:94:17:da:2c:ae:
                    1f:d0:f1:c8:85:50:2e:02:8b:6d:11:6a:42:d6:26:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:44:2F:5C:AC:08:1D:1D:00:5F:7B:55:57:FC:6C:B0:05:A6:29
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:11:97:98:bf:c8:ef:60:38:2a:44:c1:cc:9a:23:e7:92:
         82:29:b1:d4:0e:b3:d2:82:8f:ed:c1:c9:68:35:3b:fa:74:37:
         df:a4:ca:e7:31:90:c6:45:59:a5:c2:78:1a:de:2d:1f:7b:89:
         c3:1c:dc:87:4d:66:e2:20:7e:ee:e3:36:e7:a7:81:01:6b:55:
         43:9b:68:c1:79:79:50:fc:a3:de:26:60:bf:ba:58:c2:8f:8a:
         e9:86:ed:78:a5:fc:af:55:f8:ef:39:1d:42:ac:7d:cf:ad:f9:
         97:35:c5:ad:a6:00:ce:fb:48:16:68:d3:81:08:17:31:cd:f7:
         24:96:8c:1f:25:bb:cd:4e:c9:5f:7c:a1:a8:80:8f:59:36:c3:
         0e:39:eb:a4:1c:b6:7a:03:bc:a9:b4:02:75:04:41:7f:10:d2:
         f3:c4:be:bf:6c:2f:86:64:cb:3b:16:6a:fb:70:53:0b:cf:7e:
         b8:ba:d2:11:e9:95:a4:b7:aa:16:2c:a7:72:95:45:91:c8:30:
         ca:de:17:ba:39:21:91:6e:9b:25:01:43:3f:31:41:52:a1:c5:
         da:91:7a:77:6a:45:02:b5:52:a3:df:22:57:aa:f8:5d:a9:c6:
         d4:4d:4e:da:aa:b4:54:64:75:5a:94:15:f3:74:c3:d6:f7:18:
         54:55:6b:50
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUALASV4kBWvtVXPRsJ6v5/cilzHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDYxMDUxNTRaFw0yMzA3MDUxMDU2NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUQ2MDM0ODhGQzlFMTFGQTM1
QzNDRURFNTBFN0NDOUNBRTlBRDUwQzFCNzFFRUMyRTIzODY4OTkyQTUwMDVBMTYw
M0VFNDQzREQzRjIwNkEwMDMzRkQwQTM3MjAzNDg5QkU4NEIxQ0M3RjE5MzI3Njg3
QTI2QTI5NEFEOTQxNkYzQjE3NDgyOTQxNjUzOEIyQUNEMzhFQzBFRUZFRjE1QTEw
NTg4MkVGQzA5MURGOTE0RUJEMzgzRkVFRjcyOThERUI4RUZGNEMyMzY4RUI5REI0
QTJCMTBGRTRDRjZFNTY2MUZDOTcyODMyMjg4QzEzQkJDNTc1QkM4MzE1QzJDQkZB
QURERkJCRDM1Q0RFQkRCQUFCQUQ0NTZCQjA5RTExODIwQzI5MUZCRjBBQzBGQThC
NTBBMjZDMDZBQzJBOURFM0M1NDQ1NTRBNzQ3RTJGOTMwMTQ2NzVBMTA4QjY3QjI1
MTgxRUFFQUVDM0QyMzUxMjVCMkQwOEQ0RUQ5ODA3M0RDRTg1QkVGQjZGODUzOTBD
RjA4RDhBRjU1M0QwRDVGMkY5OEE3RDJEREQ5MzlERTFFREVEOUQxNTFDQTlBQjhC
M0E3RTk0MzQ5NEI4N0I0REE4OTQxN0RBMkNBRTFGRDBGMUM4ODU1MDJFMDI4QjZE
MTE2QTQyRDYyNjU3QTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnWA0iPyeEfo1w87eUOfMnK6a1Qwbce7C4jhomSpQBaFgPuRD3T8g
agAz/Qo3IDSJvoSxzH8ZMnaHomopStlBbzsXSClBZTiyrNOOwO7+8VoQWILvwJHf
kU69OD/u9ymN647/TCNo6520orEP5M9uVmH8lygyKIwTu8V1vIMVwsv6rd+701ze
vbqrrUVrsJ4RggwpH78KwPqLUKJsBqwqnePFRFVKdH4vkwFGdaEItnslGB6ursPS
NRJbLQjU7ZgHPc6FvvtvhTkM8I2K9VPQ1fL5in0t3ZOd4e3tnRUcqauLOn6UNJS4
e02olBfaLK4f0PHIhVAuAottEWpC1iZXpQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FOqGRC9crAgdHQBfe1VX/GywBaYpMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGP
BggrBgEFBQcwC4aBgnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAM7OSzANBgkqhkiG9w0BAQsFAAOCAQEAQacRl5i/yO9gOCpEwcyaI+eS
gimx1A6z0oKP7cHJaDU7+nQ336TK5zGQxkVZpcJ4Gt4tH3uJwxzch01m4iB+7uM2
56eBAWtVQ5towXl5UPyj3iZgv7pYwo+K6YbteKX8r1X47zkdQqx9z635lzXFraYA
zvtIFmjTgQgXMc33JJaMHyW7zU7JX3yhqICPWTbDDjnrpBy2egO8qbQCdQRBfxDS
88S+v2wvhmTLOxZq+3BTC89+uLrSEemVpLeqFiyncpVFkcgwyt4XujkhkW6bJQFD
PzFBUqHF2pF6d2pFArVSo98iV6r4XanG1E1O2qq0VGR1WpQV83TD1vcYVFVrUA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org