Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          EGuoCupk+ezCbbqr0NEfQ/SV97YzMR+c5DaiJIdrXY0=
Subject key identifier:   B5:C2:DE:9A:2F:72:14:CD:07:86:77:82:2D:83:C2:3B:54:16:A1:F8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       0D0A11DDFF428AB41CBA651165706CE831703CC6
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 06 Jul 2022 10:59:18 +0000
ROA not before:           Wed 06 Jul 2022 10:54:18 +0000
ROA not after:            Wed 05 Jul 2023 10:59:18 +0000
asID:                     398465
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:11:dd:ff:42:8a:b4:1c:ba:65:11:65:70:6c:e8:31:70:3c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:54:18 2022 GMT
            Not After : Jul  5 10:59:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:f3:15:8b:54:8e:ea:9d:41:98:81:4f:bc:
                    6d:79:40:1e:b6:cb:56:ef:1e:e3:02:96:aa:4b:0d:
                    ea:cf:e8:a0:4d:c1:a6:00:3f:99:cd:8a:32:30:5e:
                    f6:b8:51:1b:61:6a:bc:03:a2:11:e0:0a:49:61:08:
                    2c:8b:ff:d4:04:66:87:ec:df:99:4f:1f:7d:d4:f4:
                    e1:22:63:41:ee:28:e2:85:99:c6:38:f8:2b:0b:fb:
                    00:43:ca:4a:45:6c:a5:93:9e:db:52:02:f0:de:44:
                    3e:cb:b0:62:6a:93:e1:a3:21:ca:5b:6f:ca:cb:c0:
                    5d:eb:84:26:58:db:cc:f9:db:2a:67:1b:49:7c:57:
                    2e:a5:13:f3:47:c6:f0:07:83:87:71:3d:8b:85:99:
                    b8:a7:a5:52:ff:a0:49:f3:75:f7:4f:4c:d7:f8:ca:
                    0d:1a:ec:69:bb:fc:f0:ff:f5:ca:7f:99:3b:21:7b:
                    3b:cc:dc:7c:d2:bf:00:06:cb:2d:60:0e:7a:22:6a:
                    5c:83:c5:37:5f:eb:05:4f:df:31:f4:7b:34:fe:d6:
                    9c:1e:b6:03:54:98:96:91:c2:3a:9d:77:11:63:bc:
                    bf:18:fb:dd:84:27:87:f2:fb:2a:77:73:b3:d4:72:
                    63:3f:36:df:31:7b:31:e6:55:82:11:b4:4f:52:e2:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:DE:9A:2F:72:14:CD:07:86:77:82:2D:83:C2:3B:54:16:A1:F8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:34:b8:81:bd:d1:b8:d2:af:70:c0:9a:38:46:09:58:82:9b:
         93:28:8e:8e:ed:cb:e3:a4:a7:20:7b:80:67:89:57:cd:6d:2e:
         6f:67:17:e6:dd:c6:41:02:38:79:8a:0b:a7:c5:50:e9:b9:08:
         9d:e6:86:a8:b0:61:99:69:9b:a5:4a:78:20:87:ef:b0:26:77:
         38:e9:19:e5:77:4c:27:da:28:aa:ee:0a:de:37:65:6f:9a:e0:
         82:72:e2:5d:fa:f4:50:97:fb:27:dd:2e:b2:50:72:b9:92:ae:
         34:ee:a9:79:c6:56:0b:09:cf:e1:3a:56:51:72:6b:b3:de:d3:
         c5:c7:8a:9f:70:5e:13:e2:e1:c7:74:09:6b:4a:23:45:a0:07:
         66:21:ea:6c:5e:03:6d:ff:1f:2c:8b:74:e5:fa:97:73:d3:4d:
         16:1b:4b:40:8e:5e:07:1e:ed:52:48:df:aa:69:98:0d:33:61:
         81:9e:ac:ed:81:f6:a8:22:81:e6:04:1c:30:95:c2:64:af:fb:
         fb:77:14:d9:4b:2c:da:5a:5e:d2:d9:29:c4:da:39:5d:dd:ca:
         f5:4e:54:09:d1:33:f7:cc:c8:96:4a:41:09:bb:b9:9a:b5:1a:
         13:8d:14:fe:96:0b:da:fe:cd:5e:cb:6a:30:fa:2f:ab:75:a1:
         76:a4:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org