Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          dbCQxU2oDFPLmXJuFP2iBHmpQNgm7h/lXGZ/EJbgFWM=
Subject key identifier:   CC:06:FC:D5:02:6A:1A:DA:FA:84:0D:EC:01:2E:04:C4:99:48:16:01
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       7D1F2F4D67BC0D65CE4899317B3540631EFABD9B
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:58:45 +0000
ROA not before:           Wed 06 Jul 2022 10:53:45 +0000
ROA not after:            Wed 05 Jul 2023 10:58:45 +0000
asID:                     7018
IP address blocks:        206.206.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1f:2f:4d:67:bc:0d:65:ce:48:99:31:7b:35:40:63:1e:fa:bd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:53:45 2022 GMT
            Not After : Jul  5 10:58:45 2023 GMT
        Subject: CN=3082010A0282010100F2E38C43F0A45E66E2AA5BC3302B76C1B3B331EB8A284213A1F4333C2EDD629E4EE688E01A38BD01C0E84C1EE9DE666B8F24ED368AAF2A27FC0429C1F0121C1FB418DB9818F3990E6023D3360DA35B0772F5D607693CA4D6249DF1DB1038C8D31C08CD31BDF66F150876664EB9E9CD8C9236FDE7337F736C79DAAE9805512925F86A83F7F675EE3691F404F57D2AFC46D36715113D4F5513724A3E006C644658F56D30D68DEDE54B001BC40F3F5113142D3E092C656642B9BEA49AF359A7E022C07FD3B29E4FE1E8A8FEEEF4D66471C7A8E3E5B1D5BA43A69AC568E495F0BA5C96C59A95057C3C8E754CE428A8581BFBE2E1D8BAC676F7A1D753DBCB1042BD450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e3:8c:43:f0:a4:5e:66:e2:aa:5b:c3:30:2b:
                    76:c1:b3:b3:31:eb:8a:28:42:13:a1:f4:33:3c:2e:
                    dd:62:9e:4e:e6:88:e0:1a:38:bd:01:c0:e8:4c:1e:
                    e9:de:66:6b:8f:24:ed:36:8a:af:2a:27:fc:04:29:
                    c1:f0:12:1c:1f:b4:18:db:98:18:f3:99:0e:60:23:
                    d3:36:0d:a3:5b:07:72:f5:d6:07:69:3c:a4:d6:24:
                    9d:f1:db:10:38:c8:d3:1c:08:cd:31:bd:f6:6f:15:
                    08:76:66:4e:b9:e9:cd:8c:92:36:fd:e7:33:7f:73:
                    6c:79:da:ae:98:05:51:29:25:f8:6a:83:f7:f6:75:
                    ee:36:91:f4:04:f5:7d:2a:fc:46:d3:67:15:11:3d:
                    4f:55:13:72:4a:3e:00:6c:64:46:58:f5:6d:30:d6:
                    8d:ed:e5:4b:00:1b:c4:0f:3f:51:13:14:2d:3e:09:
                    2c:65:66:42:b9:be:a4:9a:f3:59:a7:e0:22:c0:7f:
                    d3:b2:9e:4f:e1:e8:a8:fe:ee:f4:d6:64:71:c7:a8:
                    e3:e5:b1:d5:ba:43:a6:9a:c5:68:e4:95:f0:ba:5c:
                    96:c5:9a:95:05:7c:3c:8e:75:4c:e4:28:a8:58:1b:
                    fb:e2:e1:d8:ba:c6:76:f7:a1:d7:53:db:cb:10:42:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:FC:D5:02:6A:1A:DA:FA:84:0D:EC:01:2E:04:C4:99:48:16:01
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:de:96:23:a5:22:ae:8d:e1:49:86:2d:5a:d5:cf:15:7b:7e:
         3e:7b:a3:16:e8:36:5f:25:a6:ea:fd:da:36:28:ac:7a:28:8c:
         8d:05:61:9e:93:e6:9f:72:63:39:68:8c:c1:5b:02:d7:83:07:
         1d:49:a9:75:f1:f0:76:54:93:ee:7e:89:8a:2f:23:d7:89:ce:
         fc:80:91:a8:61:f0:d4:74:8f:9c:ce:b1:82:ff:e9:36:88:7b:
         db:95:3c:a3:2a:87:94:b9:bd:96:1b:80:9b:68:6b:bc:69:3a:
         4a:8c:6c:b2:04:da:04:b6:e8:14:76:6e:5c:51:2f:4e:ab:cd:
         b6:e8:b0:97:d1:a8:81:c3:ec:89:5e:f7:b4:86:3e:8c:81:8e:
         ee:8f:b8:31:76:07:18:d2:e8:3a:71:4d:e6:5a:6e:db:06:ed:
         47:ac:e8:7c:4e:0d:44:79:0d:33:1b:09:62:16:2e:24:6d:18:
         59:92:06:24:41:64:1c:96:4e:af:5f:dc:10:61:26:0e:17:e8:
         21:52:e5:c2:6b:53:c2:3f:41:55:24:f7:54:9c:6c:69:4a:12:
         f6:16:e0:32:3e:7d:fe:d9:da:dc:89:4d:46:c1:fa:e7:30:3e:
         9c:15:88:9b:fc:24:b5:0c:1f:03:fb:a6:20:1a:e1:e3:3a:4f:
         4c:a8:48:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org