Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39362e302f32322d3234203d3e20323131353835.roa
File:                     3230362e3230362e39362e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          Ym/y2ALbi4xd5Y3ZNm5Ch3XP8H+2IgpZx3mYmvd9p0g=
Subject key identifier:   0A:B6:C7:E5:7C:5D:A5:10:DC:06:48:B5:D7:9E:B0:A6:4C:D4:C7:7F
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       54F8EFCFED8AABF9D153ABA6957AA2817EAB3256
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39362e302f32322d3234203d3e20323131353835.roa
Signing time:             Tue 05 Jul 2022 23:12:25 +0000
ROA not before:           Tue 05 Jul 2022 23:07:25 +0000
ROA not after:            Tue 04 Jul 2023 23:12:25 +0000
asID:                     211585
IP address blocks:        206.206.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f8:ef:cf:ed:8a:ab:f9:d1:53:ab:a6:95:7a:a2:81:7e:ab:32:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  5 23:07:25 2022 GMT
            Not After : Jul  4 23:12:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:f8:54:b5:c5:98:12:fc:d9:94:fc:01:e6:
                    7e:3a:64:91:6f:b8:84:41:ec:a5:8e:0a:4d:2e:33:
                    c1:0f:b8:5d:da:58:c0:79:89:29:2b:be:de:6c:8d:
                    86:ac:0b:be:c5:c3:a9:c7:4e:23:e0:92:78:0a:39:
                    6f:aa:0c:6e:e2:df:c4:18:5a:2b:d4:4d:c6:bc:6f:
                    9f:6b:ef:34:49:11:ff:d8:a9:75:36:49:a2:1d:ef:
                    f4:c2:70:bb:a2:a0:ee:6b:a1:a7:29:28:fe:00:dd:
                    0d:75:bf:17:c7:a5:6f:34:9c:ee:d7:5b:1c:c5:4b:
                    7d:68:88:bf:cc:8f:9e:51:12:e7:24:d6:d8:18:6d:
                    4c:ee:c5:5e:2b:03:cc:e0:0b:43:71:12:7a:18:2a:
                    9c:44:e1:6c:e3:f1:27:52:61:54:21:d6:95:a1:53:
                    8c:74:d2:5a:72:5c:9f:86:8b:08:6c:86:00:9f:c7:
                    35:3b:ab:cd:3e:d9:5d:22:a1:78:34:24:33:76:2c:
                    7a:6a:84:29:06:bc:84:52:5e:f0:d6:c1:44:b5:0c:
                    dd:51:b2:8a:08:82:b6:70:7c:ab:e9:4b:c5:5e:91:
                    11:47:25:e5:a2:fb:ee:cd:0b:28:c8:5e:b4:c1:64:
                    d1:fd:9b:7d:92:da:db:32:da:79:82:60:73:28:b1:
                    85:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B6:C7:E5:7C:5D:A5:10:DC:06:48:B5:D7:9E:B0:A6:4C:D4:C7:7F
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e39362e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:73:95:7b:91:ca:6b:64:d2:8c:22:bf:16:4d:08:dd:c2:
         35:e0:77:e8:57:1a:d8:ed:43:a3:53:cb:fb:40:1b:86:93:ef:
         da:ae:b3:91:f7:70:5b:a1:9f:0d:4f:ae:a7:9b:72:dd:2b:11:
         13:89:a6:6a:88:34:7e:a2:d9:7d:97:eb:a9:bf:db:fd:25:b5:
         4f:60:de:6a:15:0c:81:ca:3c:68:53:8d:da:39:bb:d4:19:f9:
         bd:44:6d:c0:75:4a:18:9d:7b:47:02:2c:c2:f5:1b:21:7c:ea:
         fb:19:1e:28:1c:03:ef:3b:9d:83:c6:42:40:e0:6d:79:d3:fe:
         26:45:a0:cc:17:bf:c8:60:0d:fb:37:c0:1c:0d:01:bc:45:c6:
         7a:86:c0:3e:cd:39:40:b9:52:55:8c:7a:55:10:c0:1a:8c:13:
         2b:fa:ab:93:ce:33:c7:3b:50:1f:8c:49:30:c2:5f:75:c3:b2:
         83:84:bb:26:78:30:b1:f5:54:fc:53:9c:09:77:f0:2c:df:06:
         d7:ac:17:3f:ad:3b:f0:e4:4f:41:8d:cf:f7:38:be:a5:00:79:
         1a:81:8c:30:a6:be:3e:e8:04:34:7e:9c:b3:22:95:82:cd:9e:
         a3:1d:f4:e3:54:63:3c:25:17:31:32:44:57:68:58:cc:b0:8b:
         a2:d9:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org