Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e39302e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          E+7vvcBlN4PEPl+wc97AgmKWSp2/O4yMPIObmbb2bRE=
Subject key identifier:   CD:78:E7:BF:16:F0:AF:B5:CE:F8:86:AC:5C:CA:A8:D1:0C:ED:08:FA
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1DCCC9831CFE1FC54F6D2429F305B31911123E04
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa
Signing time:             Wed 06 Jul 2022 11:01:08 +0000
ROA not before:           Wed 06 Jul 2022 10:56:08 +0000
ROA not after:            Wed 05 Jul 2023 11:01:08 +0000
asID:                     1299
IP address blocks:        206.206.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cc:c9:83:1c:fe:1f:c5:4f:6d:24:29:f3:05:b3:19:11:12:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:56:08 2022 GMT
            Not After : Jul  5 11:01:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:69:b6:0f:92:2c:97:4d:37:1d:0a:cc:16:7c:
                    c5:75:49:de:f8:38:17:3f:f6:e0:3c:91:e7:4e:09:
                    bd:2e:76:74:5f:a2:21:ba:b8:05:f9:e7:a4:ff:5d:
                    55:50:08:0c:c5:29:e0:fc:55:37:49:39:1b:da:1c:
                    90:47:d0:e0:2d:ce:96:3d:da:51:52:a1:da:ee:9c:
                    97:dd:2d:06:24:71:3a:73:e3:8c:04:74:34:ec:69:
                    2f:77:a2:ac:15:2c:3c:59:03:22:46:42:ef:6b:69:
                    d6:62:a4:91:98:3a:91:6f:09:44:71:33:81:4b:2d:
                    93:3a:11:80:07:1f:ea:0d:6c:9f:59:4e:67:16:c2:
                    06:aa:1a:fb:39:c6:ee:c7:52:e5:bd:b1:e4:f4:90:
                    aa:f8:cc:00:46:ee:87:1d:24:28:a3:ef:67:ba:75:
                    db:80:94:1e:93:b6:a7:f5:6d:d9:04:51:61:51:ea:
                    0b:72:ea:d9:7c:6c:9f:78:23:9f:42:c6:ea:31:aa:
                    ca:79:92:66:bb:61:4c:40:97:33:ef:13:16:ed:6e:
                    f1:8d:52:75:7e:4f:0f:b6:c6:87:4a:e8:70:5f:e3:
                    89:19:6b:a2:2b:b5:ab:73:22:2b:da:e1:bb:4e:f0:
                    af:bf:a2:4b:86:06:fc:66:4f:8f:cf:16:74:68:18:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:E7:BF:16:F0:AF:B5:CE:F8:86:AC:5C:CA:A8:D1:0C:ED:08:FA
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:26:29:15:31:b1:67:b3:63:c9:7f:d6:dd:46:11:df:bf:
         c6:2b:d4:8d:fa:0b:f8:d0:28:10:50:84:c3:a8:7d:94:33:d8:
         f0:5c:4b:ee:d3:2e:d8:ac:69:62:d0:22:9a:01:73:cf:5c:65:
         43:08:5f:7a:b2:76:a8:9d:7e:7c:17:05:97:85:1a:60:61:d1:
         8c:90:2e:97:43:9e:60:bc:00:08:19:e1:fa:23:94:6f:cf:5f:
         6b:ba:6f:b8:10:69:bd:74:43:4b:61:c1:e5:97:e7:83:f8:d6:
         bc:b7:6b:b3:ba:82:e1:c1:46:7a:76:8b:7d:d3:70:f6:f6:f9:
         d7:45:a7:a2:7a:cc:7d:34:44:65:e4:40:4a:c4:1a:8c:94:dc:
         2f:e1:04:25:e0:61:8b:ee:8d:7b:59:99:d3:52:53:89:c0:21:
         36:48:b5:9b:84:74:8d:e6:4f:80:50:b7:8a:13:86:8a:63:4a:
         c3:e8:70:60:b7:bf:a9:2b:e3:5f:b5:6f:17:26:4f:80:c8:34:
         81:c6:a9:30:d2:4a:be:01:b0:0d:7b:c5:89:b1:ee:fe:66:b6:
         ea:84:94:58:a0:e2:d2:09:d6:fe:04:63:c2:b5:6d:db:98:16:
         4c:3f:08:be:8d:66:9c:af:b8:85:71:c8:18:51:a7:c8:d4:a5:
         4f:a4:be:8a
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUHczJgxz+H8VPbSQp8wWzGRESPgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA3MDYxMDU2MDhaFw0yMzA3MDUxMTAxMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y2OUI2MEY5MjJDOTc0RDM3
MUQwQUNDMTY3Q0M1NzU0OURFRjgzODE3M0ZGNkUwM0M5MUU3NEUwOUJEMkU3Njc0
NUZBMjIxQkFCODA1RjlFN0E0RkY1RDU1NTAwODBDQzUyOUUwRkM1NTM3NDkzOTFC
REExQzkwNDdEMEUwMkRDRTk2M0REQTUxNTJBMURBRUU5Qzk3REQyRDA2MjQ3MTNB
NzNFMzhDMDQ3NDM0RUM2OTJGNzdBMkFDMTUyQzNDNTkwMzIyNDY0MkVGNkI2OUQ2
NjJBNDkxOTgzQTkxNkYwOTQ0NzEzMzgxNEIyRDkzM0ExMTgwMDcxRkVBMEQ2QzlG
NTk0RTY3MTZDMjA2QUExQUZCMzlDNkVFQzc1MkU1QkRCMUU0RjQ5MEFBRjhDQzAw
NDZFRTg3MUQyNDI4QTNFRjY3QkE3NURCODA5NDFFOTNCNkE3RjU2REQ5MDQ1MTYx
NTFFQTBCNzJFQUQ5N0M2QzlGNzgyMzlGNDJDNkVBMzFBQUNBNzk5MjY2QkI2MTRD
NDA5NzMzRUYxMzE2RUQ2RUYxOEQ1Mjc1N0U0RjBGQjZDNjg3NEFFODcwNUZFMzg5
MTk2QkEyMkJCNUFCNzMyMjJCREFFMUJCNEVGMEFGQkZBMjRCODYwNkZDNjY0RjhG
Q0YxNjc0NjgxODZDNjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz2m2D5Isl003HQrMFnzFdUne+DgXP/bgPJHnTgm9LnZ0X6IhurgF
+eek/11VUAgMxSng/FU3STkb2hyQR9DgLc6WPdpRUqHa7pyX3S0GJHE6c+OMBHQ0
7Gkvd6KsFSw8WQMiRkLva2nWYqSRmDqRbwlEcTOBSy2TOhGABx/qDWyfWU5nFsIG
qhr7Ocbux1LlvbHk9JCq+MwARu6HHSQoo+9nunXbgJQek7an9W3ZBFFhUeoLcurZ
fGyfeCOfQsbqMarKeZJmu2FMQJcz7xMW7W7xjVJ1fk8PtsaHSuhwX+OJGWuiK7Wr
cyIr2uG7TvCvv6JLhgb8Zk+PzxZ0aBhsZQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FM14578W8K+1zviGrFzKqNEM7Qj6MB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGP
BggrBgEFBQcwC4aBgnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMDM2MmUz
MjMwMzYyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMyMzkzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAM7OWjANBgkqhkiG9w0BAQsFAAOCAQEAkvkmKRUxsWezY8l/1t1GEd+/
xivUjfoL+NAoEFCEw6h9lDPY8FxL7tMu2KxpYtAimgFzz1xlQwhferJ2qJ1+fBcF
l4UaYGHRjJAul0OeYLwACBnh+iOUb89fa7pvuBBpvXRDS2HB5Zfng/jWvLdrs7qC
4cFGenaLfdNw9vb510WnonrMfTREZeRASsQajJTcL+EEJeBhi+6Ne1mZ01JTicAh
Nki1m4R0jeZPgFC3ihOGimNKw+hwYLe/qSvjX7VvFyZPgMg0gcapMNJKvgGwDXvF
ibHu/ma26oSUWKDi0gnW/gRjwrVt25gWTD8Ivo1mnK+4hXHIGFGnyNSlT6S+ig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org