Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e38392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          8ZNY0KhHMg8cUZtP/pbC7iuF/alB77O5/PFW7VcbCoA=
Subject key identifier:   E9:B4:AC:78:09:1F:01:27:0F:70:A5:07:04:EC:43:AB:09:A0:94:4B
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       077BC33CC6C8532FA872DC72B07C43FDEF6DE44C
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 11:00:38 +0000
ROA not before:           Wed 06 Jul 2022 10:55:38 +0000
ROA not after:            Wed 05 Jul 2023 11:00:38 +0000
asID:                     7018
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:c3:3c:c6:c8:53:2f:a8:72:dc:72:b0:7c:43:fd:ef:6d:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:55:38 2022 GMT
            Not After : Jul  5 11:00:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:8d:c7:ce:cc:38:6d:f9:b6:bb:10:3d:31:
                    06:fd:d5:29:13:4a:cf:7f:f9:f4:fe:34:51:2b:3f:
                    e3:09:a4:05:84:a3:01:bc:c8:df:47:ad:37:78:c0:
                    bd:cd:3a:18:aa:40:62:33:2e:23:6c:b2:d0:49:a0:
                    c0:55:d5:69:a7:48:ab:a0:2d:35:97:e2:03:67:fa:
                    6c:e4:32:be:34:1f:2b:5e:38:30:9c:1d:6b:4f:a3:
                    ca:15:44:74:f1:41:df:ef:55:28:b9:d2:82:79:28:
                    9e:1d:7d:a2:45:33:b1:b5:7e:c8:5a:fb:31:25:eb:
                    bc:ec:7a:c4:50:c7:3c:17:60:83:cf:49:1c:a7:4b:
                    36:56:1a:87:e5:40:f4:33:76:80:f5:6f:81:b6:9d:
                    97:f3:dc:f7:a0:44:e0:4f:10:a8:bb:3c:16:76:87:
                    e6:14:0a:94:d6:99:87:36:58:be:be:6f:0e:51:e4:
                    aa:37:62:cf:97:24:ec:11:ae:43:f7:a2:e1:bb:14:
                    e8:18:de:8e:02:b9:87:a6:2f:95:e5:e4:c8:8e:e4:
                    05:5a:7e:0f:1b:8e:86:8d:ba:f9:84:30:f9:d0:5c:
                    d6:b3:bc:20:18:51:34:b8:74:c7:9b:4c:c9:57:b7:
                    cf:9b:ac:01:66:2a:8d:c2:9d:d2:32:13:5a:ea:c0:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B4:AC:78:09:1F:01:27:0F:70:A5:07:04:EC:43:AB:09:A0:94:4B
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e38392e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a0:97:94:e3:7e:95:fa:25:8d:6f:0b:3c:06:a8:f1:03:86:
         de:cb:0b:80:39:01:57:0a:f9:1f:bb:cd:1d:31:ee:a4:bb:0b:
         59:6e:a4:4f:e3:a9:80:e1:a0:89:40:fd:2f:67:5a:e8:32:b6:
         32:38:6f:ed:ac:ee:65:a2:cb:5d:f3:63:33:8d:f4:d5:b6:77:
         e0:b2:36:71:bc:0a:08:7c:13:59:a2:cd:ba:8d:1d:98:50:13:
         3e:dc:69:95:96:97:eb:2d:d3:da:06:b6:1c:86:34:66:03:7c:
         a3:2f:5f:62:94:95:98:c3:50:29:f1:f5:ad:05:d7:2c:a7:2e:
         33:cb:07:9f:c2:4a:5e:c3:41:37:7a:ff:eb:42:8a:d8:41:4e:
         65:59:fd:97:b2:2a:8d:99:79:66:a1:b5:d4:da:84:b7:8d:53:
         eb:77:2b:bb:31:85:df:ca:98:42:14:e5:c2:12:d9:2c:de:3e:
         9e:aa:d2:a2:85:a3:32:0c:38:d8:c2:86:d8:ff:92:0c:5f:bf:
         7a:6f:b2:af:d7:83:78:d8:5d:b4:9d:67:ef:c5:4f:78:1f:a2:
         22:6b:5b:80:29:68:0e:30:46:7b:1c:6c:c6:a5:e9:10:3e:00:
         18:77:20:f6:8e:b4:b0:ec:15:9f:0d:73:ed:5c:0a:b7:f9:87:
         c9:98:e6:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org