Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa
File:                     3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          FwWejCYO6Fg94r0vE59W1u0UY+GptEmrbVRSb80shcg=
Subject key identifier:   17:B8:15:B1:63:6A:27:0B:12:D6:94:A5:71:10:C7:8E:4F:98:F7:3F
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       CD9D9258A340487E8ADEFFC04102EB15CDC36B
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa
Signing time:             Wed 09 Feb 2022 15:23:27 +0000
ROA not before:           Wed 09 Feb 2022 15:18:27 +0000
ROA not after:            Wed 08 Feb 2023 15:23:27 +0000
asID:                     397423
IP address blocks:        216.122.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cd:9d:92:58:a3:40:48:7e:8a:de:ff:c0:41:02:eb:15:cd:c3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb  9 15:18:27 2022 GMT
            Not After : Feb  8 15:23:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:64:4e:e0:09:1d:2e:19:43:3f:3a:e5:5b:
                    22:37:f4:3b:65:d7:b4:be:22:ba:9f:66:c5:8e:cb:
                    66:89:29:58:62:97:fa:97:79:48:73:88:45:bd:ec:
                    96:89:94:5c:c2:f9:9b:f8:a2:ac:24:45:65:9e:2e:
                    89:31:b5:81:87:ed:1e:3e:4a:2f:12:38:8b:77:1e:
                    aa:da:ba:df:b9:f2:d4:54:98:4e:d1:12:af:af:c4:
                    94:ba:72:2a:43:62:99:2f:08:cc:d8:72:1c:29:ea:
                    c9:2b:41:87:57:c7:6a:2c:f7:f2:7d:4e:7c:6c:24:
                    24:02:89:8d:9b:d8:3f:9d:8b:66:c1:bb:78:62:c3:
                    97:d5:21:f0:50:fd:40:5a:03:59:b8:e3:11:26:c2:
                    7b:ba:bb:c9:34:ce:8c:22:04:6a:81:19:40:fd:b8:
                    65:dd:ee:d8:41:f8:8d:8f:4e:3a:a1:b3:c7:9c:ae:
                    6f:74:03:52:90:e5:1c:bc:ec:49:b4:c3:81:74:39:
                    9e:c0:00:ea:ad:53:2d:a8:81:ec:25:d3:e6:36:6e:
                    8b:89:38:be:f2:cb:bf:72:62:6b:c2:53:b6:b3:1f:
                    f0:f2:54:45:ec:1b:96:ad:1d:f0:2d:35:3e:72:f1:
                    cc:96:81:cb:e5:85:b9:e2:b7:bc:11:c4:4d:ea:bc:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B8:15:B1:63:6A:27:0B:12:D6:94:A5:71:10:C7:8E:4F:98:F7:3F
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:5c:97:f2:f1:6b:e6:f0:3f:c9:2e:ab:a6:cb:e5:c3:23:
         0b:61:9b:f0:b1:30:29:41:82:29:25:7f:e2:21:3e:7d:48:d7:
         8c:c2:ba:00:f7:45:e9:6b:35:b6:17:1f:2d:32:54:3d:30:ba:
         9b:0a:f0:48:e3:9b:de:38:90:49:46:7c:2f:cf:98:ad:78:f6:
         ec:1f:18:15:26:ce:45:78:30:f5:e6:28:95:26:6d:1e:5d:b8:
         20:9c:4f:b5:66:5e:c0:0b:4a:c3:36:80:31:30:4c:76:3f:8c:
         b5:8b:d0:a2:ef:22:66:fa:3f:3f:ee:56:57:6a:b3:d5:a5:40:
         66:04:4b:7a:d7:06:71:65:ab:c0:e8:41:5c:69:1a:30:08:40:
         67:e0:e6:f0:0a:57:14:0c:92:c3:9c:ac:50:a4:e2:49:70:3c:
         d7:b9:4e:f4:88:64:31:5e:81:b8:95:f9:e1:ac:29:fd:14:18:
         b7:b6:1a:c3:48:0e:bf:40:3c:cb:2e:6f:b7:7a:8a:0b:e3:ea:
         d3:e4:27:10:56:09:ac:f7:90:61:a4:e9:29:39:f6:c7:25:88:
         f1:c4:54:68:19:09:12:f8:25:e2:30:51:2e:f1:df:14:43:8c:
         95:23:35:1f:de:5b:b9:09:07:bd:ac:bc:26:47:bd:64:41:86:
         d0:92:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org