Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e203631333137.roa
File:                     3231362e3132322e3136352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          0HB4vg4itCsAupTPwjaYBWKLxhOyGjqJD+IlrF54Xlw=
Subject key identifier:   90:7C:B9:93:98:95:36:C8:F7:91:E3:CB:54:E0:EF:85:4A:12:88:87
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       52086F60B618F28003EDD5495E9B8A41F67C9200
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 24 Jun 2022 17:38:27 +0000
ROA not before:           Fri 24 Jun 2022 17:33:27 +0000
ROA not after:            Fri 23 Jun 2023 17:38:27 +0000
asID:                     61317
IP address blocks:        216.122.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:6f:60:b6:18:f2:80:03:ed:d5:49:5e:9b:8a:41:f6:7c:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 24 17:33:27 2022 GMT
            Not After : Jun 23 17:38:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:9e:6b:ee:00:57:da:e2:8f:a6:b0:4d:2c:
                    21:59:9a:3b:e1:0b:55:5f:39:73:7e:c6:06:94:75:
                    d2:b7:53:2e:0d:aa:b9:4c:c9:4a:ed:ca:fd:0b:e1:
                    8a:8e:7c:40:88:3b:83:df:5f:b4:2b:ba:da:e5:1b:
                    7f:4c:65:2e:bd:83:2e:88:4d:cd:16:83:c0:27:23:
                    5a:84:ee:0f:25:1c:47:c6:69:8f:db:ba:13:80:bb:
                    62:9a:27:c5:3a:79:cf:67:d4:2a:07:d1:c0:11:b8:
                    f8:51:33:f0:cd:5f:99:a6:f5:14:45:35:ef:ea:f4:
                    37:67:ed:81:5b:26:f1:17:f9:c6:19:47:5c:87:3f:
                    dc:16:11:ee:79:04:ac:8a:ab:75:78:f5:15:75:37:
                    1a:3f:08:4a:5a:6e:9b:80:9e:92:ec:13:82:80:72:
                    02:a7:c8:7a:47:56:e2:df:38:84:28:04:e2:3c:c7:
                    81:ee:e5:f9:0e:b9:ba:7a:95:02:33:ce:94:e1:a0:
                    0c:c3:3f:a3:30:f2:59:f4:16:54:e4:5f:22:63:cc:
                    cd:66:50:4d:de:7b:09:22:d4:e2:96:1e:c9:3c:d1:
                    ad:76:19:d3:1d:54:27:c2:2c:a6:76:c9:f1:d9:6d:
                    44:50:86:ec:c3:64:aa:8d:5e:4f:55:c1:2d:d9:de:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7C:B9:93:98:95:36:C8:F7:91:E3:CB:54:E0:EF:85:4A:12:88:87
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:26:57:d1:b4:43:07:e1:f1:cb:62:78:71:b4:a8:c4:a0:01:
         2f:6c:2b:15:b6:03:65:8f:dd:69:6b:46:63:2d:9d:c2:4d:55:
         41:f7:ad:6b:3a:25:fd:eb:66:38:5a:35:98:95:59:b1:79:90:
         75:9b:1f:dd:16:e6:35:11:58:48:7e:cd:4f:7e:4c:ab:17:97:
         a8:c2:f6:b6:90:8e:21:41:74:01:7d:a8:1b:5e:f8:52:c5:d9:
         b0:f1:01:21:21:58:71:d0:f0:2c:bf:68:82:9a:34:55:a5:7a:
         ca:10:f5:6d:62:41:2e:2e:8e:c9:64:c9:1e:b1:13:ce:d5:47:
         82:9b:9c:dd:45:5d:ff:e1:74:1f:49:b7:26:c9:66:93:53:ad:
         49:26:88:19:97:2e:c6:39:98:8e:18:ab:57:8b:16:cf:20:bf:
         85:71:6f:97:08:d7:ae:83:6b:e3:e7:ad:6d:aa:e6:e5:3b:1f:
         44:70:ee:a5:90:4f:01:a0:6b:c9:7d:78:a0:c8:d2:ca:84:c9:
         c9:16:90:8e:27:e2:dd:3d:ba:a2:95:fc:42:70:06:e5:3c:71:
         24:6a:af:20:64:26:98:c6:fe:df:b6:04:f8:b5:43:82:e6:c0:
         ec:ee:2a:cf:56:fd:67:47:62:e8:89:40:22:53:cb:a2:6a:8e:
         92:5e:e0:d1
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUUghvYLYY8oAD7dVJXpuKQfZ8kgAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA2MjQxNzMzMjdaFw0yMzA2MjMxNzM4MjdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q5RjlFNkJFRTAwNTdEQUUy
OEZBNkIwNEQyQzIxNTk5QTNCRTEwQjU1NUYzOTczN0VDNjA2OTQ3NUQyQjc1MzJF
MERBQUI5NENDOTRBRURDQUZEMEJFMThBOEU3QzQwODgzQjgzREY1RkI0MkJCQURB
RTUxQjdGNEM2NTJFQkQ4MzJFODg0RENEMTY4M0MwMjcyMzVBODRFRTBGMjUxQzQ3
QzY2OThGREJCQTEzODBCQjYyOUEyN0M1M0E3OUNGNjdENDJBMDdEMUMwMTFCOEY4
NTEzM0YwQ0Q1Rjk5QTZGNTE0NDUzNUVGRUFGNDM3NjdFRDgxNUIyNkYxMTdGOUM2
MTk0NzVDODczRkRDMTYxMUVFNzkwNEFDOEFBQjc1NzhGNTE1NzUzNzFBM0YwODRB
NUE2RTlCODA5RTkyRUMxMzgyODA3MjAyQTdDODdBNDc1NkUyREYzODg0MjgwNEUy
M0NDNzgxRUVFNUY5MEVCOUJBN0E5NTAyMzNDRTk0RTFBMDBDQzMzRkEzMzBGMjU5
RjQxNjU0RTQ1RjIyNjNDQ0NENjY1MDREREU3QjA5MjJENEUyOTYxRUM5M0NEMUFE
NzYxOUQzMUQ1NDI3QzIyQ0E2NzZDOUYxRDk2RDQ0NTA4NkVDQzM2NEFBOEQ1RTRG
NTVDMTJERDlERTc4RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzZ+ea+4AV9rij6awTSwhWZo74QtVXzlzfsYGlHXSt1MuDaq5TMlK
7cr9C+GKjnxAiDuD31+0K7ra5Rt/TGUuvYMuiE3NFoPAJyNahO4PJRxHxmmP27oT
gLtimifFOnnPZ9QqB9HAEbj4UTPwzV+ZpvUURTXv6vQ3Z+2BWybxF/nGGUdchz/c
FhHueQSsiqt1ePUVdTcaPwhKWm6bgJ6S7BOCgHICp8h6R1bi3ziEKATiPMeB7uX5
Drm6epUCM86U4aAMwz+jMPJZ9BZU5F8iY8zNZlBN3nsJItTilh7JPNGtdhnTHVQn
wiymdsnx2W1EUIbsw2SqjV5PVcEt2d548wIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FJB8uZOYlTbI95Hjy1Tg74VKEoiHMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADYeqUwDQYJKoZIhvcNAQELBQADggEBALwmV9G0Qwfh8ctieHG0
qMSgAS9sKxW2A2WP3WlrRmMtncJNVUH3rWs6Jf3rZjhaNZiVWbF5kHWbH90W5jUR
WEh+zU9+TKsXl6jC9raQjiFBdAF9qBte+FLF2bDxASEhWHHQ8Cy/aIKaNFWlesoQ
9W1iQS4ujslkyR6xE87VR4KbnN1FXf/hdB9JtybJZpNTrUkmiBmXLsY5mI4Yq1eL
Fs8gv4Vxb5cI166Da+PnrW2q5uU7H0Rw7qWQTwGga8l9eKDI0sqEyckWkI4n4t09
uqKV/EJwBuU8cSRqryBkJpjG/t+2BPi1Q4LmwOzuKs9W/WdHYuiJQCJTy6JqjpJe
4NE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org