Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e39302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          lUO3ZCN/Wyy1mPW7NHE0sm48ef7bMXlzP23AtPx8nLs=
Subject key identifier:   00:D8:27:33:7C:BC:CE:56:E0:6D:AC:55:33:39:59:6B:47:DE:47:88
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       30EA043A74A8AD3B014107673E48C381F4152168
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Jul 2022 11:01:15 +0000
ROA not before:           Wed 06 Jul 2022 10:56:15 +0000
ROA not after:            Wed 05 Jul 2023 11:01:15 +0000
asID:                     7018
IP address blocks:        206.206.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ea:04:3a:74:a8:ad:3b:01:41:07:67:3e:48:c3:81:f4:15:21:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  6 10:56:15 2022 GMT
            Not After : Jul  5 11:01:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:92:75:b8:4b:45:9c:39:29:23:4a:98:e6:
                    04:9f:45:01:9b:d2:35:23:51:fd:8a:c4:c4:52:9d:
                    a6:7c:f4:a8:cc:73:62:eb:3d:a8:6a:f3:92:bd:6c:
                    14:ce:d9:22:87:6f:1e:05:76:05:ed:da:90:18:04:
                    71:5a:4d:a4:47:38:2d:9a:c9:fc:89:4c:2f:82:1b:
                    06:2d:3f:ab:c1:25:73:bf:fc:05:86:62:f5:58:b2:
                    0c:21:64:91:f3:10:0a:6c:9b:3d:0d:7c:c6:22:f5:
                    01:6f:12:67:1a:54:ff:8d:80:a0:39:7c:84:fb:4b:
                    8f:fb:9d:7b:10:26:a4:c4:0b:b6:e5:aa:44:2f:a2:
                    29:5b:0a:ed:1e:fa:4e:5b:64:12:50:a2:35:25:0d:
                    c5:0b:43:5a:06:b0:d3:fd:4e:ef:27:d8:2e:20:5c:
                    16:ca:0c:52:ac:c9:74:71:6b:c8:b7:42:9e:48:03:
                    c8:8e:c7:41:4b:ff:f2:c1:36:f9:f6:a0:57:f4:12:
                    4d:5e:c4:31:83:c6:41:6f:9e:25:c6:ea:ac:f9:03:
                    ca:54:3b:bf:09:27:df:af:b0:5b:dc:c7:0a:c9:c3:
                    99:82:79:54:da:84:40:0d:9a:84:d9:8e:44:12:40:
                    53:a8:a0:46:1c:e0:b9:c7:66:d1:fc:f8:d1:90:cf:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:27:33:7C:BC:CE:56:E0:6D:AC:55:33:39:59:6B:47:DE:47:88
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39302e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:41:15:2b:59:05:ba:0d:c4:d7:e8:47:59:41:39:ba:a6:
         df:85:c3:49:13:81:99:4e:c9:77:42:c1:01:dc:f7:6d:9f:64:
         bf:9d:60:62:4a:53:55:9b:8b:c9:34:b0:45:e3:9a:31:81:6c:
         d8:68:ec:52:51:a8:60:c6:4e:23:5a:66:6b:de:c2:51:d4:e3:
         ac:1b:84:f2:d2:dd:3c:b8:74:3b:56:01:f8:b3:60:81:29:53:
         ba:8a:57:33:a4:55:e7:84:bf:bc:d5:d6:84:3e:79:44:ea:bd:
         27:47:7a:b0:ab:c6:31:cf:c3:ce:50:68:44:cf:5f:31:bf:82:
         03:90:b6:29:57:7f:76:53:59:b2:79:f9:4e:f8:63:a7:ac:b9:
         24:52:2b:1e:f0:01:87:09:01:13:75:33:80:70:c9:5e:96:e1:
         f3:7e:cb:2d:eb:81:ae:90:9d:7a:ef:01:55:e8:df:72:39:92:
         e0:f7:76:e0:2f:a1:7b:c6:c2:e0:6a:e6:8a:2e:44:2e:9e:a4:
         61:47:10:e7:9b:2d:db:3b:09:40:fc:3d:1e:64:59:c4:99:1d:
         e9:9a:43:af:02:bb:f2:f5:38:44:21:bc:8a:52:12:0d:9b:6d:
         81:90:70:04:fd:cd:86:c0:53:48:87:d7:c9:53:10:56:fc:cb:
         44:53:7c:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org