Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e38372e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          FdaG8CikXfe6hnBMjHVBXBDrMODYM5pFcNK2vsZOIQE=
Subject key identifier:   33:75:40:35:CC:34:74:6C:EB:AA:CE:94:79:81:D1:94:6D:9D:45:DA
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6A2CF2BE1B375C02E5E467F1AE2AA91511A20E16
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 11:00:04 +0000
ROA not before:           Wed 06 Jul 2022 10:55:04 +0000
ROA not after:            Wed 05 Jul 2023 11:00:04 +0000
asID:                     1299
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:f2:be:1b:37:5c:02:e5:e4:67:f1:ae:2a:a9:15:11:a2:0e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:55:04 2022 GMT
            Not After : Jul  5 11:00:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:a3:21:df:33:f1:5d:bf:13:ab:4a:cb:0d:
                    f5:2e:0b:f0:7f:9b:f7:c5:4f:aa:b8:5b:bc:fa:2e:
                    ca:90:94:24:87:cc:92:80:55:e0:8f:a4:ef:63:99:
                    a7:4a:21:85:7a:08:28:86:db:d5:cf:fb:ad:dc:5f:
                    0e:e0:db:c1:61:a7:04:6c:76:4f:15:0a:c4:f7:d8:
                    c6:48:b3:e4:ef:5a:98:99:cc:72:2b:39:8b:a3:9d:
                    53:bf:9f:5d:b5:ff:e9:86:9a:73:6c:39:14:a9:a2:
                    ac:23:89:8e:e0:f2:7e:08:d3:72:11:5a:a2:62:bb:
                    88:0e:f9:24:6a:42:4a:f5:64:1b:f1:d8:82:64:79:
                    60:84:39:81:d3:ac:28:b2:8d:27:ea:7e:9d:24:9e:
                    91:01:e7:d2:fe:56:ae:fc:a1:4f:fe:19:06:a3:c3:
                    a1:bc:66:63:27:f4:0f:ea:4e:4f:b8:43:f9:4f:7e:
                    79:f5:5a:c4:6f:8d:bf:c6:0d:e1:38:9d:cb:9d:0a:
                    fa:4e:d0:eb:a7:c5:23:80:0b:4e:c7:82:57:9d:28:
                    06:af:42:43:bc:a0:6b:c1:2e:55:0a:57:5a:75:1c:
                    10:60:1e:5a:2c:ac:50:13:29:7b:42:10:e5:b8:8c:
                    b8:df:63:20:83:f4:65:71:fa:70:f8:eb:88:59:04:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:75:40:35:CC:34:74:6C:EB:AA:CE:94:79:81:D1:94:6D:9D:45:DA
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:de:8f:78:ac:2e:2d:84:e0:82:13:49:1b:61:a9:e8:fd:01:
         67:be:17:35:c8:84:5f:a3:d3:ae:90:db:b9:4e:2a:2a:46:14:
         7a:60:20:b5:1c:66:7c:b8:f5:ce:ec:5c:99:9a:00:4e:34:a3:
         b0:bd:c0:de:11:6e:32:64:7c:9c:91:2e:02:41:1f:51:23:5c:
         61:8d:53:5e:e5:c7:6b:7b:90:21:84:a9:ea:68:a9:a4:db:0c:
         4a:39:e6:fb:58:98:e7:c4:32:f6:99:0b:b6:4a:34:b5:78:68:
         c1:17:78:90:a9:43:b9:1f:55:62:7d:07:70:64:8f:4c:af:f4:
         a9:51:21:c7:0a:5e:fd:88:3b:4e:de:48:63:49:f8:42:a4:37:
         20:76:35:41:87:24:de:35:a2:e1:9b:b1:7f:fe:bd:6a:7f:68:
         66:db:c8:e3:5e:30:03:c3:f8:a7:45:7d:b4:e6:83:89:94:2c:
         9f:69:9a:21:e1:30:ba:e1:f7:7c:cb:2e:cc:9e:38:fb:ff:f9:
         69:6b:b8:51:39:48:87:fc:35:7c:23:cc:ca:5c:1d:c5:20:27:
         47:8a:08:77:f6:ea:d0:f0:c4:3f:b9:a7:c7:2f:3e:f9:fe:fb:
         1d:ff:bc:99:dc:1d:38:80:ea:dc:cc:fd:8b:80:ed:78:2f:e0:
         a2:0a:5b:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org