Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37362e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          ky8C8lFSfmYhqoM8icS1mVfQE1qGaIqe+Z78aZk03Zw=
Subject key identifier:   76:EF:0D:75:13:25:F7:CB:5F:86:54:C9:20:A3:F6:B1:B6:41:42:49
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       5D3E58C282481C59691ED68A5088C014EE2490CA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:58:33 +0000
ROA not before:           Wed 06 Jul 2022 10:53:33 +0000
ROA not after:            Wed 05 Jul 2023 10:58:33 +0000
asID:                     1299
IP address blocks:        206.206.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3e:58:c2:82:48:1c:59:69:1e:d6:8a:50:88:c0:14:ee:24:90:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:53:33 2022 GMT
            Not After : Jul  5 10:58:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:e8:52:88:84:12:81:5c:50:5c:49:8e:18:
                    ad:66:5a:ff:cb:3e:3e:4c:1d:9b:ab:f2:23:25:68:
                    37:6e:8d:c7:cc:0a:8f:d2:7f:16:f0:1f:a2:8c:20:
                    78:65:d1:49:b4:fa:9a:4f:2f:28:a6:0c:23:e8:c3:
                    68:8c:0f:79:d5:f0:b1:78:16:c0:96:aa:a3:de:a8:
                    b9:d0:1d:52:2e:aa:7d:2b:d6:2d:f7:de:fc:a0:f8:
                    d9:61:c3:ff:51:32:50:89:8a:12:2e:a9:e0:bf:03:
                    f5:65:5c:d3:cb:f2:49:02:39:f2:47:fd:98:81:a1:
                    04:39:d6:dd:5d:33:53:fe:1a:46:15:9e:2c:2e:1a:
                    8a:36:9e:ce:a5:88:f8:4e:b9:c8:3d:20:85:a9:30:
                    e8:35:ac:e2:e0:b7:7d:d9:ee:2a:f3:1b:88:4a:98:
                    ef:20:44:02:22:eb:73:56:f3:0f:60:db:4b:70:7a:
                    9a:30:99:33:49:db:d4:d1:57:89:fb:4c:e7:0d:a5:
                    1a:6c:5d:ac:52:1e:dd:d2:05:ad:3c:ef:0e:f2:f3:
                    cb:eb:d9:f9:b9:17:41:79:e9:87:9a:41:6d:7f:0c:
                    0a:93:cc:97:1b:dc:e6:b0:f9:b9:c6:ed:4a:b5:4a:
                    3f:18:97:7e:7a:20:5f:ea:59:4c:7c:fe:c0:8e:09:
                    f8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EF:0D:75:13:25:F7:CB:5F:86:54:C9:20:A3:F6:B1:B6:41:42:49
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:58:37:82:69:97:c4:40:81:87:52:d4:3c:18:74:21:ba:
         71:87:74:61:d6:98:70:26:7b:53:06:46:d1:35:1a:50:97:be:
         d6:57:92:71:3c:fd:13:7f:84:83:0a:c2:a3:f3:48:31:b5:97:
         9f:c3:e9:78:01:fa:ce:e5:4d:de:ed:e1:9b:0d:1b:dc:97:a4:
         2a:f0:c3:3b:f3:96:7f:97:56:77:cc:34:f0:ab:f1:35:b8:f7:
         61:dd:10:0a:e9:b0:14:c1:80:b1:6f:98:f0:56:02:d1:4a:55:
         ad:f0:1c:ba:7c:34:c1:1b:a1:50:51:66:38:a7:ce:2c:11:a5:
         4b:41:78:dd:71:c2:b1:cc:5a:a1:1f:f3:54:7e:10:b4:aa:47:
         58:f2:3b:69:ec:f4:9b:79:21:68:80:cc:ef:ff:ff:ef:ba:a5:
         75:ae:3d:36:71:b9:7a:db:f4:28:cc:3b:c4:7e:34:09:01:8e:
         10:93:38:e4:37:7b:19:e7:73:b1:75:b4:1d:26:56:98:cc:d2:
         da:a1:b0:38:21:c5:bc:3e:84:0f:69:d1:05:e6:8a:70:b7:45:
         7f:91:62:16:82:9e:da:53:36:ed:93:52:57:b2:af:45:b2:d6:
         8b:0c:0e:71:21:86:3b:ed:a1:b0:5e:7e:a3:c9:00:21:89:d5:
         4d:ea:17:be
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUXT5YwoJIHFlpHtaKUIjAFO4kkMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDYxMDUzMzNaFw0yMzA3MDUxMDU4MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUMwRUU4NTI4ODg0MTI4MTVD
NTA1QzQ5OEUxOEFENjY1QUZGQ0IzRTNFNEMxRDlCQUJGMjIzMjU2ODM3NkU4REM3
Q0MwQThGRDI3RjE2RjAxRkEyOEMyMDc4NjVEMTQ5QjRGQTlBNEYyRjI4QTYwQzIz
RThDMzY4OEMwRjc5RDVGMEIxNzgxNkMwOTZBQUEzREVBOEI5RDAxRDUyMkVBQTdE
MkJENjJERjdERUZDQTBGOEQ5NjFDM0ZGNTEzMjUwODk4QTEyMkVBOUUwQkYwM0Y1
NjU1Q0QzQ0JGMjQ5MDIzOUYyNDdGRDk4ODFBMTA0MzlENkRENUQzMzUzRkUxQTQ2
MTU5RTJDMkUxQThBMzY5RUNFQTU4OEY4NEVCOUM4M0QyMDg1QTkzMEU4MzVBQ0Uy
RTBCNzdERDlFRTJBRjMxQjg4NEE5OEVGMjA0NDAyMjJFQjczNTZGMzBGNjBEQjRC
NzA3QTlBMzA5OTMzNDlEQkQ0RDE1Nzg5RkI0Q0U3MERBNTFBNkM1REFDNTIxRURE
RDIwNUFEM0NFRjBFRjJGM0NCRUJEOUY5QjkxNzQxNzlFOTg3OUE0MTZEN0YwQzBB
OTNDQzk3MUJEQ0U2QjBGOUI5QzZFRDRBQjU0QTNGMTg5NzdFN0EyMDVGRUE1OTRD
N0NGRUMwOEUwOUY4NEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnA7oUoiEEoFcUFxJjhitZlr/yz4+TB2bq/IjJWg3bo3HzAqP0n8W
8B+ijCB4ZdFJtPqaTy8opgwj6MNojA951fCxeBbAlqqj3qi50B1SLqp9K9Yt9978
oPjZYcP/UTJQiYoSLqngvwP1ZVzTy/JJAjnyR/2YgaEEOdbdXTNT/hpGFZ4sLhqK
Np7OpYj4TrnIPSCFqTDoNazi4Ld92e4q8xuISpjvIEQCIutzVvMPYNtLcHqaMJkz
SdvU0VeJ+0znDaUabF2sUh7d0gWtPO8O8vPL69n5uRdBeemHmkFtfwwKk8yXG9zm
sPm5xu1KtUo/GJd+eiBf6llMfP7Ajgn4TwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FHbvDXUTJffLX4ZUySCj9rG2QUJJMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGP
BggrBgEFBQcwC4aBgnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAM7OTDANBgkqhkiG9w0BAQsFAAOCAQEAPB9YN4Jpl8RAgYdS1DwYdCG6
cYd0YdaYcCZ7UwZG0TUaUJe+1leScTz9E3+EgwrCo/NIMbWXn8PpeAH6zuVN3u3h
mw0b3JekKvDDO/OWf5dWd8w08KvxNbj3Yd0QCumwFMGAsW+Y8FYC0UpVrfAcunw0
wRuhUFFmOKfOLBGlS0F43XHCscxaoR/zVH4QtKpHWPI7aez0m3khaIDM7///77ql
da49NnG5etv0KMw7xH40CQGOEJM45Dd7GedzsXW0HSZWmMzS2qGwOCHFvD6ED2nR
BeaKcLdFf5FiFoKe2lM27ZNSV7KvRbLWiwwOcSGGO+2hsF5+o8kAIYnVTeoXvg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org