Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          CRd8JjRF7GqPUTp647Nn9kDMU7hQIInJ4jfzZlooB5g=
Subject key identifier:   C3:E9:4C:74:6B:9D:EF:D7:15:DD:71:9F:A7:99:C6:EA:85:D9:AC:25
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1B94619C4AC10CEB11B8700850E67563FA4ABE23
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:57:03 +0000
ROA not before:           Wed 06 Jul 2022 10:52:03 +0000
ROA not after:            Wed 05 Jul 2023 10:57:03 +0000
asID:                     7018
IP address blocks:        206.206.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:61:9c:4a:c1:0c:eb:11:b8:70:08:50:e6:75:63:fa:4a:be:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:52:03 2022 GMT
            Not After : Jul  5 10:57:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:a6:6b:98:d5:d0:c5:1b:8f:f4:43:d6:ad:
                    bd:90:d7:0e:0a:53:17:4d:dc:29:48:55:0d:e3:cc:
                    5b:3d:3b:5c:3d:b6:05:cf:26:3c:e5:41:53:8b:1f:
                    1d:34:46:ba:2b:10:47:42:9f:97:04:56:54:bd:b9:
                    d9:53:ab:6c:1b:ba:b4:c6:33:42:bb:bc:90:2a:6c:
                    0a:b6:92:9f:1f:ef:27:19:a7:67:09:31:ac:e5:13:
                    f5:bb:09:37:60:d4:ff:ba:6d:26:11:57:3c:03:a6:
                    7f:2d:d8:5c:8c:e6:95:5a:3e:1a:63:95:30:e0:ad:
                    a5:03:48:0c:11:37:b0:c9:8f:c0:87:6c:c1:58:ee:
                    c3:d6:59:31:d8:7a:35:77:f3:da:86:30:1b:50:c7:
                    51:a5:c0:9b:6c:82:2f:67:49:d2:37:c5:98:8a:1c:
                    6b:bb:39:d6:8e:5c:b1:02:b1:04:5d:a7:1e:ac:28:
                    10:97:05:e3:f0:f7:d2:8b:06:d9:8a:3c:f1:c7:7d:
                    4f:9a:4a:6f:00:df:14:71:3c:d7:31:44:81:ea:75:
                    a0:f7:a8:20:23:85:5e:9e:42:6f:6f:8d:38:af:75:
                    a4:2b:82:f1:fd:f3:eb:6c:3c:77:55:74:1f:93:3d:
                    12:6b:dd:9b:b0:1b:be:a3:07:33:77:63:d5:f7:dd:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:4C:74:6B:9D:EF:D7:15:DD:71:9F:A7:99:C6:EA:85:D9:AC:25
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:c6:f6:55:65:39:6d:48:6d:4d:75:07:68:25:c6:8d:92:
         c3:9c:c4:02:6c:de:69:84:ed:3e:45:56:c7:7b:f6:e2:96:c5:
         e8:48:0a:58:79:63:78:35:f1:3b:01:ac:1b:a4:d7:89:38:35:
         a4:4a:6f:02:c9:ca:8c:6d:c7:2d:b8:c4:43:cb:4d:ac:09:af:
         79:4f:28:8f:33:63:a9:3b:d9:e0:43:60:0a:5f:ad:b3:d2:31:
         91:d3:77:16:58:91:e8:62:9e:c2:b1:46:fb:2a:d5:03:28:a6:
         8c:7e:dd:a0:03:74:87:41:e8:0d:40:a4:8b:6a:10:fa:bb:bc:
         88:fa:c1:ee:8e:4a:fb:28:ce:1b:e4:b0:24:88:52:4d:a1:57:
         d0:2a:69:8e:bc:4f:9f:0a:3a:9f:8e:c4:25:ca:3d:56:cd:2e:
         fb:60:2a:ec:19:54:36:83:e0:2c:35:0f:2d:90:6c:a4:06:5e:
         5e:9f:d2:bc:26:21:80:9b:e0:50:38:0e:2c:89:85:ec:52:f3:
         4d:64:82:72:a9:78:a3:0a:e3:18:bd:89:a8:b4:2d:35:7e:63:
         8b:8c:16:a6:ca:05:88:c2:ca:4e:5a:54:e1:b7:0b:af:12:10:
         db:52:6b:21:71:e3:d5:99:71:62:ef:5d:f7:de:69:53:eb:46:
         66:46:10:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org