Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e38392e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          QuJVReFY+9V1J4JnTLfNtbutfBYZcvoHEHs3sPHj178=
Subject key identifier:   86:BA:D8:27:E3:AA:52:C3:38:74:7F:46:48:C6:65:2B:4F:45:EB:41
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       65966F32794DD24410646D9E18CB849858097CFA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 11:00:28 +0000
ROA not before:           Wed 06 Jul 2022 10:55:28 +0000
ROA not after:            Wed 05 Jul 2023 11:00:28 +0000
asID:                     1299
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:6f:32:79:4d:d2:44:10:64:6d:9e:18:cb:84:98:58:09:7c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:55:28 2022 GMT
            Not After : Jul  5 11:00:28 2023 GMT
        Subject: CN=3082010A0282010100E6BB724136532B3DB3D5A3EC3BDA5041FE46FE76E9EA719668D37BC8CC82161855114D33D2BB5447C8B3EB88947546D1C72AFCDE336B253DB9ECEB597A761F779D22B2E04598F53F4E16C334C1BF743A0E1A8C2C5D05562080E3839214FB8D55BB7B4C2FA0C7FAA3DDBDA6B03BDBDF6D6C5751F3BE01E08A0533CF2AC8C508E75AAF1DA0C587F17CABB3B019283340551020C496C63B4C8DB63883538476871F676F332F558061D8F40C4BEA2421F768EE81005B63BCE79A197F333A02EC89A197E1B32A2DF3ECCA02C26A40DB765560065B2BFC6A9401B4FEE29CEF4CD3E6148D3A6C40BF266B087F2B52CA501201C5E3AEA4BA1A6141B417176E9374E80C9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bb:72:41:36:53:2b:3d:b3:d5:a3:ec:3b:da:
                    50:41:fe:46:fe:76:e9:ea:71:96:68:d3:7b:c8:cc:
                    82:16:18:55:11:4d:33:d2:bb:54:47:c8:b3:eb:88:
                    94:75:46:d1:c7:2a:fc:de:33:6b:25:3d:b9:ec:eb:
                    59:7a:76:1f:77:9d:22:b2:e0:45:98:f5:3f:4e:16:
                    c3:34:c1:bf:74:3a:0e:1a:8c:2c:5d:05:56:20:80:
                    e3:83:92:14:fb:8d:55:bb:7b:4c:2f:a0:c7:fa:a3:
                    dd:bd:a6:b0:3b:db:df:6d:6c:57:51:f3:be:01:e0:
                    8a:05:33:cf:2a:c8:c5:08:e7:5a:af:1d:a0:c5:87:
                    f1:7c:ab:b3:b0:19:28:33:40:55:10:20:c4:96:c6:
                    3b:4c:8d:b6:38:83:53:84:76:87:1f:67:6f:33:2f:
                    55:80:61:d8:f4:0c:4b:ea:24:21:f7:68:ee:81:00:
                    5b:63:bc:e7:9a:19:7f:33:3a:02:ec:89:a1:97:e1:
                    b3:2a:2d:f3:ec:ca:02:c2:6a:40:db:76:55:60:06:
                    5b:2b:fc:6a:94:01:b4:fe:e2:9c:ef:4c:d3:e6:14:
                    8d:3a:6c:40:bf:26:6b:08:7f:2b:52:ca:50:12:01:
                    c5:e3:ae:a4:ba:1a:61:41:b4:17:17:6e:93:74:e8:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BA:D8:27:E3:AA:52:C3:38:74:7F:46:48:C6:65:2B:4F:45:EB:41
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:58:1e:5d:d0:47:2d:bf:76:6b:80:40:3a:3a:f5:34:ce:93:
         92:4a:fd:0a:8c:4d:18:0b:fa:fa:8c:65:a5:0a:b3:c5:29:bc:
         6b:f1:c7:fd:17:8c:ec:09:be:88:c7:9c:4c:29:9b:09:0d:b8:
         79:ef:ab:cf:ed:62:f8:ac:c8:93:20:0d:b7:9a:b7:0b:20:08:
         74:63:9b:a6:1f:f3:83:f8:3e:b0:df:1b:79:69:1a:79:92:2e:
         49:64:9d:0b:51:61:0d:9b:19:61:5c:ad:b7:8c:34:11:41:95:
         71:18:dd:16:da:2d:d0:bb:ad:ea:c4:de:cb:b6:18:fd:81:8e:
         85:6f:30:06:69:93:53:ff:08:00:d6:2f:30:2a:f7:ee:d9:46:
         bc:57:f4:94:34:dc:fd:4b:a8:dc:89:cd:30:7d:77:65:bb:18:
         27:ca:ea:42:ef:72:8e:2c:81:39:71:dd:97:f8:62:16:ce:66:
         ac:a8:a2:5f:a9:1b:0d:0d:77:ef:02:ff:54:4b:d6:75:05:6d:
         5b:0c:36:c5:d0:79:82:c6:ae:62:fa:d5:78:09:0f:f3:e6:8a:
         fa:20:df:d1:a1:17:d6:88:7d:47:5c:64:8a:46:cc:c0:f9:8c:
         a5:18:e7:39:ca:9e:3c:05:0f:09:13:10:63:8d:f8:4b:b9:ac:
         f8:60:24:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org