Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Dk1LZCswGTogwCoAFuCRLFiBPLApLNaf5TtIgG0k7Eo=
Subject key identifier:   D4:84:64:1D:7B:D2:FE:61:25:81:F6:68:57:D6:AC:D7:17:6D:EA:14
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       48886467F0A4DF2F43397450A93DC99E574C8E22
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:58:27 +0000
ROA not before:           Wed 06 Jul 2022 10:53:27 +0000
ROA not after:            Wed 05 Jul 2023 10:58:27 +0000
asID:                     398465
IP address blocks:        206.206.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:88:64:67:f0:a4:df:2f:43:39:74:50:a9:3d:c9:9e:57:4c:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:53:27 2022 GMT
            Not After : Jul  5 10:58:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:10:02:7d:08:ca:39:29:ad:86:67:79:e6:
                    b1:d3:46:66:3e:ac:74:82:b2:e1:f1:23:ec:a0:b5:
                    cd:8f:4b:c6:5a:3e:7a:e5:a6:fe:04:85:f9:bf:be:
                    bb:ec:6c:11:ea:69:ca:2a:b9:b1:a6:78:0e:7f:ab:
                    0f:db:c3:f2:a9:ba:ac:7a:79:c0:9b:04:8c:3c:86:
                    47:f3:ea:4b:da:1c:75:50:b2:d2:32:cf:e7:0f:17:
                    c5:63:73:b1:18:ff:b6:e3:5a:31:20:be:14:60:9a:
                    ad:aa:0f:4c:bf:98:46:5f:db:7d:65:14:76:d6:91:
                    69:d8:2c:75:79:ff:43:0d:c6:81:9a:17:8b:3d:8e:
                    f7:f5:ee:02:4a:63:7b:be:97:5e:a2:f2:3f:09:a1:
                    ff:43:9d:fe:1d:e3:31:36:df:6d:e9:3a:30:e0:7f:
                    a4:7c:e7:e3:1e:7d:7f:f2:f1:e4:d7:34:db:03:b0:
                    43:1c:54:3b:02:51:14:7e:6a:c9:2d:7c:dc:81:ba:
                    7d:e8:b3:e0:ee:54:8c:05:19:bf:7c:be:78:f0:9e:
                    bc:48:51:92:b7:73:7d:2e:42:80:67:8e:88:a4:61:
                    4d:ae:2c:0f:65:e4:d2:b1:92:8c:31:66:c2:fd:a2:
                    99:a8:4c:88:9b:cc:be:18:27:ef:76:75:2c:06:b8:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:64:1D:7B:D2:FE:61:25:81:F6:68:57:D6:AC:D7:17:6D:EA:14
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:3c:71:b2:81:f7:04:cf:da:7c:3d:1c:9f:74:ff:56:bf:
         be:8e:26:5a:6b:38:55:02:2b:89:e4:9c:61:29:7e:2a:86:63:
         23:ba:45:da:ad:35:81:95:38:02:66:7f:e9:63:62:2d:f2:a3:
         3c:64:4d:91:e2:65:8c:57:48:b8:b3:39:59:a7:4e:49:ec:8e:
         55:ae:bd:96:bc:97:2f:86:a0:69:13:66:7f:f4:12:2e:e0:6f:
         92:c3:0e:ee:de:10:64:52:e2:dc:af:00:4d:ab:f8:4d:59:20:
         f3:96:bb:16:34:d5:3b:ce:af:f8:3e:55:bc:6f:ea:0e:01:91:
         e7:d0:8c:bf:78:c5:8b:27:67:25:18:b2:55:e4:14:be:e2:27:
         f8:2e:bc:2e:96:3d:32:bb:54:37:ed:4f:dd:16:ab:56:88:4e:
         94:46:cb:df:48:c9:5e:ef:01:c2:06:09:f8:13:a6:53:03:03:
         18:1e:91:19:cd:12:3c:3a:2d:1f:5e:64:07:09:76:33:97:79:
         70:36:82:38:81:b0:ca:8f:53:f2:0c:ac:cb:18:cb:13:21:d1:
         ce:a2:5a:3f:2e:26:df:b5:2e:c6:ba:90:4f:fd:18:3d:29:22:
         cc:79:e0:c0:a2:b6:dc:b3:8a:c1:6d:0c:06:af:b1:2b:43:c1:
         3f:b7:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org