Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          BeFYFvhz4JH1c8iUNc/1yTqiesTjjxlmIA44lJZZyc8=
Subject key identifier:   04:15:0F:8C:EC:29:85:B2:1B:9D:52:BF:1F:90:4B:CB:7C:EC:2B:02
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       727F0956BC06E534C3C5CDF28952E7C393B50C47
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:57:55 +0000
ROA not before:           Wed 06 Jul 2022 10:52:55 +0000
ROA not after:            Wed 05 Jul 2023 10:57:55 +0000
asID:                     7018
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7f:09:56:bc:06:e5:34:c3:c5:cd:f2:89:52:e7:c3:93:b5:0c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:52:55 2022 GMT
            Not After : Jul  5 10:57:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:94:d4:b0:7b:43:b1:fc:01:4e:71:61:9d:
                    ba:8f:e2:50:05:62:b5:d1:38:a8:ee:0d:d0:a8:02:
                    8c:48:bf:5a:d4:7b:6c:93:f1:75:b9:5e:74:af:a7:
                    69:99:68:a1:e2:b9:16:db:80:98:6b:18:0f:d9:76:
                    64:8e:5d:70:f9:fe:19:94:99:34:28:a7:17:4c:a2:
                    b3:ab:2d:33:6b:aa:98:77:11:cd:8d:0e:b8:9e:93:
                    cc:ca:e6:d9:ba:9f:f8:9b:05:8c:c9:86:de:5f:d2:
                    42:90:be:d2:47:82:20:11:2f:b5:1b:db:f6:91:57:
                    ce:28:43:4c:30:d3:1d:25:67:8b:b4:5f:60:84:95:
                    d6:a1:1b:72:fa:08:30:7a:6a:96:0a:b8:86:d9:86:
                    2d:b2:67:da:23:b0:89:20:2a:5a:19:52:ba:96:c6:
                    ce:22:b9:9f:c7:6f:56:30:35:96:8a:b3:23:ca:17:
                    56:26:f1:fc:f1:96:43:c1:89:ce:f1:29:a2:e8:41:
                    3a:db:44:70:a9:a4:2c:1a:c4:99:a3:ac:47:e0:20:
                    fc:01:13:06:dc:92:dc:ea:e2:1c:ce:fb:37:cf:c6:
                    09:3f:41:a5:2f:62:ad:f8:85:74:b9:ef:56:8a:26:
                    0b:34:7f:49:8d:a7:14:58:ff:5e:6a:c5:28:3e:5c:
                    f7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:0F:8C:EC:29:85:B2:1B:9D:52:BF:1F:90:4B:CB:7C:EC:2B:02
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:10:c2:77:74:7f:b6:8b:e4:02:07:ab:a5:fe:0c:4d:a1:97:
         39:cb:df:28:54:9f:64:35:59:4c:f8:10:bc:73:33:f0:f5:8a:
         c3:b1:b5:26:c5:10:85:1f:5c:9a:75:83:ac:3f:1d:a1:e7:e7:
         0c:49:01:47:df:28:eb:ea:a7:bf:e9:20:4d:6a:ef:45:8a:6c:
         b3:c0:ac:44:92:08:be:a8:50:f8:50:96:8a:d7:ab:6a:c8:c2:
         59:7f:5c:70:60:6d:26:03:0f:f0:71:80:17:31:b5:bb:54:f8:
         e0:48:04:c2:2a:04:e9:3a:7f:42:5d:53:b4:32:26:51:5c:50:
         39:8c:ee:40:4c:49:e4:1a:ce:09:38:e3:fc:9c:57:63:21:16:
         78:d8:ff:4e:6c:5f:28:ba:65:fa:2b:91:6e:12:7d:17:2a:24:
         09:ca:b7:1a:07:5b:6f:22:7f:06:6d:e9:c8:72:59:8b:30:c7:
         af:a0:c7:e8:3a:b8:24:e2:cb:c7:84:aa:62:a1:5d:3e:5b:0c:
         db:dc:43:2e:3f:e7:72:96:ea:7f:bf:23:c0:a9:17:6a:e9:fd:
         80:1e:c9:40:69:bc:88:46:ab:fd:73:51:43:2f:08:a8:94:76:
         6e:79:1c:e3:c1:d3:69:7c:8f:98:ae:0d:b5:d3:bd:1f:50:c4:
         d6:f5:89:8f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org