Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e38372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Q3C95HmNfRyFyKuZtKzSTuwPIqBF8e/QhkRCTvZE8wg=
Subject key identifier:   DC:B5:ED:2D:F8:40:93:3F:44:97:78:FC:46:E2:F2:2E:69:8C:BC:01
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       2299F840519C7976E973017DC670C1BC5728C7E6
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 10:59:58 +0000
ROA not before:           Wed 06 Jul 2022 10:54:58 +0000
ROA not after:            Wed 05 Jul 2023 10:59:58 +0000
asID:                     7018
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:99:f8:40:51:9c:79:76:e9:73:01:7d:c6:70:c1:bc:57:28:c7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:54:58 2022 GMT
            Not After : Jul  5 10:59:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:65:14:0a:b5:e1:d3:be:63:b3:a4:4c:f5:
                    7c:03:1e:c6:39:42:c7:82:f5:ef:ec:48:50:aa:c2:
                    63:90:b6:a8:97:4d:ab:65:71:82:73:a3:1e:71:44:
                    97:16:cb:a9:83:4c:fb:8a:6e:99:ef:94:be:65:2b:
                    f6:65:a1:28:8e:3d:79:01:16:14:49:9d:70:66:9e:
                    2a:99:a0:26:7a:09:af:2f:6e:7a:97:c3:ee:14:0d:
                    b6:f3:6c:59:f7:75:e6:f2:a5:75:a0:db:31:c0:5f:
                    2f:ce:2f:eb:85:cc:24:3a:d9:72:66:9c:4c:aa:ca:
                    c7:27:cb:df:45:06:59:e2:36:71:eb:42:04:6f:78:
                    14:b7:97:d1:a0:a4:8b:87:e8:50:86:9a:78:c8:5d:
                    83:67:4e:7a:7b:8a:ee:f7:bc:53:d2:57:9a:a8:12:
                    57:28:9f:38:4d:0c:1b:16:27:94:c8:d3:6a:67:a8:
                    65:4f:58:bb:7c:8c:a6:3a:05:8c:19:54:7b:46:dd:
                    12:c9:e4:05:d7:43:07:67:ac:5e:44:71:4e:75:57:
                    36:af:b7:1b:9d:5a:0f:85:09:e6:ad:cd:cd:6e:af:
                    ec:c1:36:42:64:f8:4e:d9:94:fd:03:35:45:82:8e:
                    7b:df:fc:7a:d7:06:9e:3d:af:c5:5e:30:4d:8f:c6:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:ED:2D:F8:40:93:3F:44:97:78:FC:46:E2:F2:2E:69:8C:BC:01
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9b:3e:7a:62:63:bb:0e:84:86:d9:34:4b:1c:c0:5c:2c:03:
         c0:d5:f3:c3:fa:f4:fc:0b:07:34:0f:88:1c:61:c8:fd:40:3d:
         e4:79:0f:51:d6:1b:28:77:a8:3b:45:7c:fe:2d:e4:07:3a:51:
         c5:15:05:5f:5b:d1:8d:58:61:66:05:07:f9:17:51:77:f4:28:
         ab:c9:87:05:4b:45:0f:99:a0:47:4b:a7:23:36:d2:1e:c7:07:
         b9:4b:0e:6f:cb:40:68:14:07:43:35:b9:05:e7:8f:a0:0c:2d:
         c4:a7:8a:31:3a:6f:60:51:21:19:f6:82:d6:d6:94:de:8f:e8:
         86:ff:3a:13:19:a5:90:d7:d3:21:9e:70:ff:c6:a5:ac:6f:2d:
         eb:4e:47:30:13:ef:11:58:7e:e7:0d:2b:3f:77:2b:21:5b:3c:
         05:79:7e:91:b4:ee:05:ad:f3:40:41:b3:e2:64:02:f3:bd:86:
         ec:89:50:e7:4f:5b:69:b5:f9:76:77:d2:0b:74:59:89:b9:04:
         33:fc:07:82:65:7e:29:bb:f9:d3:9d:0a:1b:77:73:e1:87:20:
         b2:ef:71:90:aa:25:8e:36:29:1b:9a:f0:e1:00:a8:4e:f3:b5:
         e9:f9:e8:7c:68:da:13:18:1f:08:b5:65:1e:2c:91:f1:38:46:
         ee:91:91:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org