Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          weD9W8Xs7GOcD61QddjyytZSG2girqhzD6hRVcx82C8=
Subject key identifier:   2F:A6:ED:CF:B2:19:D4:09:35:AE:A7:88:4B:1F:98:BD:8B:2A:0F:F0
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       06325427E35B8214143929FF32B22E3C1150B4EF
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:58:11 +0000
ROA not before:           Wed 06 Jul 2022 10:53:11 +0000
ROA not after:            Wed 05 Jul 2023 10:58:11 +0000
asID:                     398465
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:32:54:27:e3:5b:82:14:14:39:29:ff:32:b2:2e:3c:11:50:b4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:53:11 2022 GMT
            Not After : Jul  5 10:58:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:00:52:0a:ee:03:01:af:12:4f:2b:67:a9:
                    cf:4a:03:b7:f1:35:17:70:d7:d0:bd:60:f6:48:af:
                    4c:c3:84:8d:c7:51:52:38:26:dd:0e:44:c7:25:5d:
                    f7:29:20:06:dd:d6:42:2c:a1:60:a7:e7:41:0c:c7:
                    33:22:b3:e2:a0:a9:6e:30:ae:98:42:b4:49:cd:a3:
                    c3:ec:d5:2b:0d:b4:2c:0f:d8:44:d2:fa:67:1a:76:
                    af:c6:e6:a2:3d:28:60:e9:5d:98:80:34:03:ba:9a:
                    c4:cc:24:7d:62:90:00:6c:b9:94:b3:b5:d1:87:6b:
                    93:72:25:1a:ba:b1:54:90:a0:ee:3b:a0:0b:92:ce:
                    ce:52:f1:f6:fc:0d:d6:e9:02:e6:bc:05:6c:05:9a:
                    3b:00:de:43:18:9b:50:b9:5b:06:3b:2a:59:4d:56:
                    ad:88:81:2e:a4:d8:60:e7:94:8d:66:66:82:fe:44:
                    d1:e4:c9:e0:bf:08:27:8c:fe:09:63:39:24:48:65:
                    4b:1e:47:0e:97:39:91:3f:22:24:ca:07:69:1d:f8:
                    b2:4c:c8:f9:3a:78:31:3f:00:22:4c:3e:35:46:ff:
                    e5:e4:91:26:d7:a0:30:ef:30:d3:9e:32:18:fa:ef:
                    53:6d:62:ab:36:f8:67:78:a7:1b:90:43:d8:56:5d:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:ED:CF:B2:19:D4:09:35:AE:A7:88:4B:1F:98:BD:8B:2A:0F:F0
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0c:4b:c3:73:7d:1a:3a:ab:b6:a6:42:0b:43:2a:4d:37:12:
         1b:4d:60:71:1f:f9:21:83:be:6d:53:73:a6:ef:a5:5b:ef:ad:
         6f:55:b1:eb:cc:ce:f1:97:83:f1:d1:78:af:f9:c1:cb:24:e4:
         e6:be:07:24:e9:58:26:a0:03:28:aa:14:3c:1c:3b:9d:d9:47:
         14:17:a7:1d:c7:76:18:cc:fa:09:11:58:da:4b:e4:5d:85:54:
         51:91:e8:89:74:2e:8b:77:27:f9:29:55:46:b1:c7:84:c6:72:
         21:63:a9:d7:a5:c7:12:ca:95:d2:02:6e:7b:64:ed:83:5d:30:
         49:bc:62:74:e2:37:33:e1:c6:1c:2f:81:23:c4:b6:7a:84:d1:
         5b:7a:f4:d3:f5:a3:32:fc:d8:d1:d2:d0:77:7a:05:da:b3:d8:
         57:67:ab:13:2a:88:47:f0:cf:7d:66:c1:51:ed:c9:18:02:53:
         7b:67:17:49:73:ed:99:a4:25:63:be:7f:59:2b:09:95:6b:4a:
         43:1b:0a:e1:25:c9:66:dd:c7:b6:9d:1f:31:2d:10:46:80:8e:
         a7:57:c3:c1:e4:1b:8d:c8:95:f7:c5:61:60:a5:d6:fd:53:55:
         b1:d6:72:10:7c:a5:6b:d1:9c:4b:26:e7:5b:36:05:48:c5:8f:
         b6:87:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org