Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa
File:                     3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa (raw, json)
Hash identifier:          /uHqBws8CxIFbRyuhv9dAvwqF9BFigJBaOcTyJ7NTo0=
Subject key identifier:   BF:36:2A:CD:07:44:90:B7:1D:10:1B:37:86:7F:6D:CF:C0:2C:31:1F
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       01BC30847EEC3A1EF94CF36C676AABF131BB759C
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa
Signing time:             Fri 25 Feb 2022 17:56:41 +0000
ROA not before:           Fri 25 Feb 2022 17:51:41 +0000
ROA not after:            Fri 24 Feb 2023 17:56:41 +0000
asID:                     395111
IP address blocks:        216.122.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:30:84:7e:ec:3a:1e:f9:4c:f3:6c:67:6a:ab:f1:31:bb:75:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 25 17:51:41 2022 GMT
            Not After : Feb 24 17:56:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:c4:d7:9a:29:f0:7a:d7:d3:8b:34:7d:75:
                    bb:e0:3d:e5:08:81:0b:5e:8f:c4:80:21:bb:4f:52:
                    8c:cd:d3:72:2f:93:c2:d9:ee:11:a4:c6:a7:97:11:
                    71:20:9e:99:87:a8:d8:41:82:f2:27:0d:40:12:52:
                    4a:f0:2c:cf:ef:9b:54:8e:80:8f:2d:9d:b6:16:ed:
                    0d:d9:72:60:40:9d:8a:b9:3a:d2:ca:54:79:be:b6:
                    30:b9:21:e4:fa:22:72:41:1d:b3:f6:98:44:cf:e3:
                    f3:da:33:9b:69:50:71:63:fa:8f:24:2e:85:3a:78:
                    da:85:39:2a:d6:13:3a:9d:a4:ce:38:b8:29:73:12:
                    a7:cd:37:d0:08:b3:7a:1a:24:00:92:e8:6d:2b:68:
                    db:a6:49:47:d6:b8:1c:f9:fa:f8:e2:b1:8c:fa:fb:
                    81:0b:24:39:61:52:78:4f:25:88:c7:fa:e6:9c:26:
                    b5:7c:6a:78:ce:07:40:a4:19:cf:08:89:00:f6:92:
                    b2:b0:9d:5e:ae:cc:bc:1a:07:70:48:a7:d4:b9:0a:
                    00:af:78:d9:75:10:54:08:02:37:af:e8:f2:b5:57:
                    6d:14:44:4e:ee:9c:be:12:d9:87:ee:cf:23:ea:5a:
                    ed:66:fe:90:c8:1d:a9:84:cc:72:e8:86:32:ee:72:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:2A:CD:07:44:90:B7:1D:10:1B:37:86:7F:6D:CF:C0:2C:31:1F
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:2c:32:c3:d1:3d:c7:8d:b4:e1:e4:f9:c5:f8:ed:03:95:
         d5:b8:51:07:54:f5:b1:93:04:56:29:98:d4:f4:df:b1:2d:75:
         d8:aa:42:b5:85:53:e0:f8:b1:63:dc:dd:41:f4:9d:7e:f1:cd:
         38:71:10:18:93:bd:e2:11:ac:c6:77:6f:0c:88:be:a3:a3:ae:
         e1:a4:dd:73:3d:0d:fc:3f:ea:66:52:b7:bb:93:ca:73:e1:26:
         fd:2e:83:76:b6:09:42:f2:90:1b:27:be:df:55:af:7d:db:30:
         d0:d3:f9:2b:5e:5a:85:c9:32:d9:63:7a:fe:e5:82:0f:62:73:
         2b:4c:ed:17:bb:9c:16:d5:34:d1:6a:bb:0e:b5:21:58:c6:7e:
         4b:be:ee:e7:23:5d:ab:94:9e:0c:e3:8d:53:b2:c2:e7:5d:51:
         19:33:07:45:60:a7:96:f8:c4:00:93:f9:c2:a5:1c:a9:fd:b3:
         c0:c7:8c:89:9f:5b:06:4d:37:46:ed:51:23:4f:02:c2:f8:36:
         d1:51:4e:01:48:d5:83:58:8e:d5:39:36:5c:f9:e1:e7:f2:c0:
         64:21:0e:bc:1f:5a:7b:37:33:97:e0:e8:7c:4f:37:f7:57:89:
         2e:8c:8c:36:0e:5a:31:76:91:e0:47:9d:2e:99:f0:56:c8:b1:
         06:df:23:f1
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUAbwwhH7sOh75TPNsZ2qr8TG7dZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjAyMjUxNzUxNDFaFw0yMzAyMjQxNzU2NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhFOUM0RDc5QTI5RjA3QUQ3
RDM4QjM0N0Q3NUJCRTAzREU1MDg4MTBCNUU4RkM0ODAyMUJCNEY1MjhDQ0REMzcy
MkY5M0MyRDlFRTExQTRDNkE3OTcxMTcxMjA5RTk5ODdBOEQ4NDE4MkYyMjcwRDQw
MTI1MjRBRjAyQ0NGRUY5QjU0OEU4MDhGMkQ5REI2MTZFRDBERDk3MjYwNDA5RDhB
QjkzQUQyQ0E1NDc5QkVCNjMwQjkyMUU0RkEyMjcyNDExREIzRjY5ODQ0Q0ZFM0Yz
REEzMzlCNjk1MDcxNjNGQThGMjQyRTg1M0E3OERBODUzOTJBRDYxMzNBOURBNENF
MzhCODI5NzMxMkE3Q0QzN0QwMDhCMzdBMUEyNDAwOTJFODZEMkI2OERCQTY0OTQ3
RDZCODFDRjlGQUY4RTJCMThDRkFGQjgxMEIyNDM5NjE1Mjc4NEYyNTg4QzdGQUU2
OUMyNkI1N0M2QTc4Q0UwNzQwQTQxOUNGMDg4OTAwRjY5MkIyQjA5RDVFQUVDQ0JD
MUEwNzcwNDhBN0Q0QjkwQTAwQUY3OEQ5NzUxMDU0MDgwMjM3QUZFOEYyQjU1NzZE
MTQ0NDRFRUU5Q0JFMTJEOTg3RUVDRjIzRUE1QUVENjZGRTkwQzgxREE5ODRDQzcy
RTg4NjMyRUU3MjcwOUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuOnE15op8HrX04s0fXW74D3lCIELXo/EgCG7T1KMzdNyL5PC2e4R
pManlxFxIJ6Zh6jYQYLyJw1AElJK8CzP75tUjoCPLZ22Fu0N2XJgQJ2KuTrSylR5
vrYwuSHk+iJyQR2z9phEz+Pz2jObaVBxY/qPJC6FOnjahTkq1hM6naTOOLgpcxKn
zTfQCLN6GiQAkuhtK2jbpklH1rgc+fr44rGM+vuBCyQ5YVJ4TyWIx/rmnCa1fGp4
zgdApBnPCIkA9pKysJ1ersy8GgdwSKfUuQoAr3jZdRBUCAI3r+jytVdtFERO7py+
EtmH7s8j6lrtZv6QyB2phMxy6IYy7nJwnwIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FL82Ks0HRJC3HRAbN4Z/bc/ALDEfMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNTMxMzEz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6oTANBgkqhkiG9w0BAQsFAAOCAQEAuYMsMsPRPceNtOHk
+cX47QOV1bhRB1T1sZMEVimY1PTfsS112KpCtYVT4PixY9zdQfSdfvHNOHEQGJO9
4hGsxndvDIi+o6Ou4aTdcz0N/D/qZlK3u5PKc+Em/S6DdrYJQvKQGye+31Wvfdsw
0NP5K15ahcky2WN6/uWCD2JzK0ztF7ucFtU00Wq7DrUhWMZ+S77u5yNdq5SeDOON
U7LC511RGTMHRWCnlvjEAJP5wqUcqf2zwMeMiZ9bBk03Ru1RI08Cwvg20VFOAUjV
g1iO1Tk2XPnh5/LAZCEOvB9aezczl+DofE8391eJLoyMNg5aMXaR4EedLpnwVsix
Bt8j8Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org