Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e38382e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          jQHzDFNwdQBEQt3EXPTO9t9WxE5GehMq/DQ0IMW3rm4=
Subject key identifier:   96:93:33:39:10:57:8D:F7:29:37:76:C8:C9:30:D0:EB:DD:42:A1:09
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1C7ADD4470EE0F983FB4946AA698374AA3C1024E
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 10:59:31 +0000
ROA not before:           Wed 06 Jul 2022 10:54:31 +0000
ROA not after:            Wed 05 Jul 2023 10:59:31 +0000
asID:                     1299
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7a:dd:44:70:ee:0f:98:3f:b4:94:6a:a6:98:37:4a:a3:c1:02:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:54:31 2022 GMT
            Not After : Jul  5 10:59:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:c0:97:3c:39:3e:0b:b0:9b:4f:64:86:38:
                    28:ce:95:2a:30:24:60:f8:1e:67:bf:5e:28:af:78:
                    4e:8d:12:9f:cc:f1:53:ec:c3:a1:29:4b:ce:98:48:
                    ba:e9:0a:2f:dd:29:1a:8d:6f:e6:0b:de:71:bc:f0:
                    8a:c4:b4:a8:b4:5c:f6:5d:69:3e:c6:e6:28:b9:0c:
                    ba:3a:a4:36:d3:30:cb:24:b2:17:71:ce:c3:7d:31:
                    2c:6b:85:f9:96:48:94:84:3a:87:4f:5d:06:bc:40:
                    08:2e:e2:e5:9e:7a:54:f7:09:35:71:d9:6c:44:57:
                    27:95:3c:ed:a2:c3:ea:6d:44:26:ab:fe:b3:75:de:
                    6d:9e:a7:f2:df:67:61:53:e8:bf:fd:88:aa:d3:38:
                    78:34:5d:59:0c:37:53:2c:14:69:a1:9f:4d:c5:b0:
                    5b:c1:28:0c:0d:c5:58:c9:02:cc:96:5b:70:9d:26:
                    21:23:47:a3:87:2a:5c:ff:93:ea:71:5b:ea:af:13:
                    df:1b:9d:de:f9:1a:07:2b:6e:79:98:83:f1:7d:4f:
                    17:50:5d:e0:7b:da:3c:0c:48:20:2e:e3:9d:1f:5b:
                    3c:53:bc:33:7d:7b:29:11:10:85:73:b5:c6:26:d4:
                    4f:d0:75:6b:81:e8:44:ea:6c:38:de:92:29:e3:c0:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:33:39:10:57:8D:F7:29:37:76:C8:C9:30:D0:EB:DD:42:A1:09
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:c7:5d:7f:b3:d5:e4:8c:78:3c:a7:cd:c4:02:f3:33:fd:
         c4:69:a7:19:db:bf:75:eb:4c:54:52:f3:44:fd:90:53:6b:a7:
         c0:67:82:a2:70:7c:96:e6:ea:8d:59:eb:55:26:9b:db:c9:34:
         80:de:8d:7a:db:ea:8c:25:50:96:c0:7a:6f:86:a5:c5:cc:6a:
         13:9c:1d:b3:b9:78:12:d3:49:a2:3a:34:ec:4a:83:70:ad:75:
         54:28:9b:82:ed:b2:c0:2d:88:7b:34:49:ae:a4:c9:fb:2a:7e:
         fe:bf:df:ed:a0:81:ea:bb:f0:d7:93:30:39:39:85:ee:c6:23:
         85:45:a4:b9:e7:6e:5f:4b:bb:9b:fa:78:5b:46:63:53:17:4c:
         a6:45:e9:43:73:9d:5e:fc:ff:86:17:73:9c:01:5c:ef:52:d6:
         e9:b5:84:17:36:4d:fc:64:90:7c:8c:73:da:ac:79:e4:23:01:
         6e:a7:32:4e:5b:09:80:d0:0f:bd:c3:b3:61:e1:10:cd:58:73:
         33:83:ff:21:35:74:18:4e:d2:1b:0f:37:ce:31:7f:b0:08:ed:
         bd:76:05:f0:a5:27:41:88:0b:d4:ee:6f:13:9a:29:64:1b:07:
         52:19:20:19:61:c4:75:a1:73:e6:a1:be:c5:17:d9:f3:38:50:
         fe:a9:28:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org