Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e38372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          JTWNEk1CpU3+19MWn06VXHqSGrE3L9T6tHxGdsqc7LY=
Subject key identifier:   A9:13:9E:8A:BF:24:38:09:69:09:20:0F:15:41:22:1F:EB:F4:88:1B
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       578F29180F39A4B90F3126661AC186A7504272F4
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 11:00:12 +0000
ROA not before:           Wed 06 Jul 2022 10:55:12 +0000
ROA not after:            Wed 05 Jul 2023 11:00:12 +0000
asID:                     398465
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8f:29:18:0f:39:a4:b9:0f:31:26:66:1a:c1:86:a7:50:42:72:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:55:12 2022 GMT
            Not After : Jul  5 11:00:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:e0:2e:9d:d7:04:03:67:ff:33:19:9a:96:
                    70:4e:ff:38:72:f7:49:8c:12:e6:ec:7b:2c:c1:1f:
                    ab:92:ad:77:b3:2d:ae:ae:70:4d:2a:0c:c0:a5:d3:
                    c4:52:b4:e1:95:f4:96:70:59:76:ba:d7:d6:b3:f6:
                    b7:eb:58:eb:9f:e1:6d:04:a0:a2:05:13:b9:b2:58:
                    f2:05:52:33:1d:c1:8b:f9:a6:87:39:e2:48:de:33:
                    80:6e:9a:f0:5c:00:d7:ba:8e:02:34:0c:bc:84:7e:
                    53:0a:02:f9:4d:05:fe:e9:16:50:84:fa:cc:af:c6:
                    5e:d7:85:34:21:df:38:10:d1:be:bb:32:54:a6:8c:
                    b1:51:9d:da:08:60:a3:9d:18:dd:af:b4:d7:bb:8f:
                    af:92:16:07:d6:95:d9:58:bc:4b:a8:6c:22:a9:d4:
                    0a:72:10:0f:43:59:44:c8:15:42:7e:4f:b9:d8:66:
                    51:8b:90:76:b1:22:56:e7:fe:b4:ae:6b:35:7c:c5:
                    35:76:29:1a:d0:02:20:4c:34:f7:3d:0f:13:e2:31:
                    21:b5:24:d4:f6:15:62:74:04:47:38:58:b5:34:72:
                    1f:f5:80:88:e6:f5:b9:dd:00:49:c0:80:0c:cb:8f:
                    1c:9b:4b:9d:85:4d:ae:03:60:81:a6:06:0b:aa:bd:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:13:9E:8A:BF:24:38:09:69:09:20:0F:15:41:22:1F:EB:F4:88:1B
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c3:03:8f:fe:68:3e:9f:48:87:02:a4:a5:77:b8:d0:59:aa:
         2e:47:09:e8:b6:21:19:cb:00:7f:f0:2b:3f:fb:6c:a1:77:e7:
         0d:a6:53:77:c5:75:0f:c7:21:44:4a:a2:8a:ff:bb:64:75:b0:
         ce:f6:47:a6:aa:7e:36:95:4b:c0:aa:64:61:3f:69:3b:17:65:
         b2:70:e5:a8:5a:e0:b9:6a:cb:bb:7b:b8:84:4c:eb:13:8c:28:
         d5:9d:8b:87:4f:26:c0:83:25:96:2a:48:32:4f:76:f0:d9:87:
         7c:52:ff:ff:e4:b1:6f:4d:6d:35:28:e9:d3:57:be:85:9e:fc:
         88:ba:bd:e7:fe:a7:42:36:a0:c0:7c:fd:c5:08:06:fb:de:75:
         e2:1b:f4:1c:8c:e7:19:5a:a2:34:9f:f7:e5:2c:b2:d1:20:f8:
         fd:8f:12:ef:5d:df:69:df:a0:32:7c:3b:d9:d2:22:8d:c9:25:
         64:62:8c:f9:42:1d:3e:1a:7e:29:3e:1f:03:31:20:6c:f4:4f:
         1d:02:32:d2:34:a8:79:18:a4:9d:be:6c:b6:1f:9e:81:a2:16:
         48:14:3f:8f:f7:bd:1e:a6:3a:bd:6f:06:5b:ed:6b:4b:80:81:
         62:76:8d:3e:61:11:08:a2:45:4d:b0:c1:8b:76:54:9c:b9:57:
         f6:c6:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org