Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136322e302f32342d3234203d3e20313336373434.roa
File:                     3231362e3132322e3136322e302f32342d3234203d3e20313336373434.roa (raw, json)
Hash identifier:          jW0L9Vf+FnjCY2N5Epls7kIK47H/4ZJbGjUq01PYugg=
Subject key identifier:   D5:A7:7D:34:AD:46:51:B9:70:26:97:E0:07:EB:90:00:72:40:C8:63
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       33FF675D6DE232BA3ECB184B733459BE31275FCC
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136322e302f32342d3234203d3e20313336373434.roa
Signing time:             Tue 08 Feb 2022 11:32:34 +0000
ROA not before:           Tue 08 Feb 2022 11:27:34 +0000
ROA not after:            Tue 07 Feb 2023 11:32:34 +0000
asID:                     136744
IP address blocks:        216.122.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ff:67:5d:6d:e2:32:ba:3e:cb:18:4b:73:34:59:be:31:27:5f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb  8 11:27:34 2022 GMT
            Not After : Feb  7 11:32:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:21:b5:5c:06:23:fc:06:11:4a:6a:1f:82:
                    43:25:b7:92:2c:70:7b:11:28:c5:a6:ec:76:bf:90:
                    77:f6:30:a9:ee:97:87:b3:5b:77:0e:05:86:1e:e3:
                    08:85:9a:a8:ed:ec:42:41:2f:90:65:8b:5a:30:eb:
                    98:3c:b7:21:1a:e7:1b:37:31:9b:56:a7:7b:ef:d6:
                    ff:d2:53:c1:bc:cb:0a:c6:44:ce:28:50:54:e6:00:
                    91:f1:a4:5e:d6:96:bf:ed:98:03:74:07:2a:64:1d:
                    ff:e3:1f:d7:21:1a:02:be:7a:8e:ff:52:f8:af:43:
                    54:b2:46:ac:35:13:81:27:7a:ea:d4:1b:7a:d3:3d:
                    d0:94:3d:55:3a:79:6f:38:07:6d:f2:d2:06:f5:9b:
                    b2:09:eb:ed:49:d6:d7:61:9d:9a:fa:1c:70:9c:5c:
                    ae:3a:75:b2:d4:ad:c0:68:a7:0b:86:34:56:00:c4:
                    48:c3:83:fb:76:a0:2b:9f:36:ad:1d:72:f7:51:b9:
                    7c:f4:16:82:d8:19:98:63:b0:64:3a:1a:84:1f:80:
                    9f:63:98:cc:99:1e:60:4c:a9:b1:4d:ea:d9:c4:14:
                    f6:53:1d:4d:da:25:6e:16:36:ec:ec:8c:33:83:fd:
                    12:9b:08:a0:26:0b:f0:11:d4:17:3f:bf:40:21:72:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A7:7D:34:AD:46:51:B9:70:26:97:E0:07:EB:90:00:72:40:C8:63
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136322e302f32342d3234203d3e20313336373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:68:29:70:04:8e:7b:00:08:6d:e5:81:fb:ba:30:c6:90:
         bc:6d:5e:4e:50:e9:76:84:8e:44:61:48:dc:0e:9d:96:dd:17:
         60:f7:8f:27:fc:22:8d:d1:f5:a4:9f:82:96:93:e3:b2:bf:28:
         a9:37:78:66:8c:06:87:af:86:75:c6:78:c2:63:a3:1b:24:c5:
         51:1c:49:27:84:eb:db:d0:10:3d:9e:74:27:83:0f:e5:7a:88:
         5d:36:a9:49:d4:0a:e3:12:3a:77:c8:7e:bf:30:0c:ee:5d:d1:
         51:12:36:76:47:b4:8b:ab:62:1a:c4:31:40:7a:a4:af:be:f9:
         a3:94:ae:57:e3:b5:3f:43:d5:3d:f4:30:3c:1c:ba:e6:06:0a:
         ba:8e:53:80:36:57:3a:ad:00:19:fd:57:06:56:73:01:32:20:
         56:ab:87:93:f1:49:0b:34:65:16:4c:13:f0:06:59:4e:d8:71:
         f6:1c:4d:fe:5c:b7:af:29:fe:dc:91:e3:80:a8:d5:e5:4c:1d:
         19:10:9a:87:d9:63:dc:71:60:fe:61:57:c2:2c:d5:8b:0c:a9:
         6e:dc:31:c5:bb:df:0f:30:46:c0:fd:40:1d:49:bc:76:24:eb:
         86:82:65:d3:69:ec:3b:d7:28:52:e3:f6:1e:d8:95:d8:8b:6d:
         23:e2:d2:87
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUM/9nXW3iMro+yxhLczRZvjEnX8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjAyMDgxMTI3MzRaFw0yMzAyMDcxMTMyMzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2QTIxQjU1QzA2MjNGQzA2
MTE0QTZBMUY4MjQzMjVCNzkyMkM3MDdCMTEyOEM1QTZFQzc2QkY5MDc3RjYzMEE5
RUU5Nzg3QjM1Qjc3MEUwNTg2MUVFMzA4ODU5QUE4RURFQzQyNDEyRjkwNjU4QjVB
MzBFQjk4M0NCNzIxMUFFNzFCMzczMTlCNTZBNzdCRUZENkZGRDI1M0MxQkNDQjBB
QzY0NENFMjg1MDU0RTYwMDkxRjFBNDVFRDY5NkJGRUQ5ODAzNzQwNzJBNjQxREZG
RTMxRkQ3MjExQTAyQkU3QThFRkY1MkY4QUY0MzU0QjI0NkFDMzUxMzgxMjc3QUVB
RDQxQjdBRDMzREQwOTQzRDU1M0E3OTZGMzgwNzZERjJEMjA2RjU5QkIyMDlFQkVE
NDlENkQ3NjE5RDlBRkExQzcwOUM1Q0FFM0E3NUIyRDRBREMwNjhBNzBCODYzNDU2
MDBDNDQ4QzM4M0ZCNzZBMDJCOUYzNkFEMUQ3MkY3NTFCOTdDRjQxNjgyRDgxOTk4
NjNCMDY0M0ExQTg0MUY4MDlGNjM5OENDOTkxRTYwNENBOUIxNERFQUQ5QzQxNEY2
NTMxRDREREEyNTZFMTYzNkVDRUM4QzMzODNGRDEyOUIwOEEwMjYwQkYwMTFENDE3
M0ZCRjQwMjE3MjEwRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2ohtVwGI/wGEUpqH4JDJbeSLHB7ESjFpux2v5B39jCp7peHs1t3
DgWGHuMIhZqo7exCQS+QZYtaMOuYPLchGucbNzGbVqd779b/0lPBvMsKxkTOKFBU
5gCR8aRe1pa/7ZgDdAcqZB3/4x/XIRoCvnqO/1L4r0NUskasNROBJ3rq1Bt60z3Q
lD1VOnlvOAdt8tIG9ZuyCevtSdbXYZ2a+hxwnFyuOnWy1K3AaKcLhjRWAMRIw4P7
dqArnzatHXL3Ubl89BaC2BmYY7BkOhqEH4CfY5jMmR5gTKmxTerZxBT2Ux1N2iVu
Fjbs7Iwzg/0SmwigJgvwEdQXP79AIXIQ9QIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FNWnfTStRlG5cCaX4AfrkAByQMhjMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzQz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6ojANBgkqhkiG9w0BAQsFAAOCAQEATqloKXAEjnsACG3l
gfu6MMaQvG1eTlDpdoSORGFI3A6dlt0XYPePJ/wijdH1pJ+ClpPjsr8oqTd4ZowG
h6+GdcZ4wmOjGyTFURxJJ4Tr29AQPZ50J4MP5XqIXTapSdQK4xI6d8h+vzAM7l3R
URI2dke0i6tiGsQxQHqkr775o5SuV+O1P0PVPfQwPBy65gYKuo5TgDZXOq0AGf1X
BlZzATIgVquHk/FJCzRlFkwT8AZZTthx9hxN/ly3ryn+3JHjgKjV5UwdGRCah9lj
3HFg/mFXwizViwypbtwxxbvfDzBGwP1AHUm8diTrhoJl02nsO9coUuP2HtiV2Itt
I+LShw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org