Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136392e302f32342d3234203d3e203632353739.roa
File:                     3231362e3132322e3136392e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier:          mK07dlhLW2mBEbZJNEevPunLsAntOXVy93cxRy4pw1A=
Subject key identifier:   33:77:26:C3:DA:2D:B6:97:8F:4A:83:01:61:5F:A7:7E:58:7C:B7:84
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       67F03C0CE135F52BFC871723B6140ED505214F60
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136392e302f32342d3234203d3e203632353739.roa
Signing time:             Wed 23 Feb 2022 10:05:39 +0000
ROA not before:           Wed 23 Feb 2022 10:00:39 +0000
ROA not after:            Wed 22 Feb 2023 10:05:39 +0000
asID:                     62579
IP address blocks:        216.122.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f0:3c:0c:e1:35:f5:2b:fc:87:17:23:b6:14:0e:d5:05:21:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 23 10:00:39 2022 GMT
            Not After : Feb 22 10:05:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:45:69:a8:21:88:2b:99:ad:ce:c6:aa:1f:
                    dd:83:b9:f5:a9:fc:e5:87:eb:9c:15:ca:29:47:92:
                    cf:a0:b5:8f:fc:f7:53:25:c3:fc:e2:47:13:42:18:
                    ba:01:75:aa:c1:e9:ce:7a:ea:c3:06:8c:51:41:a3:
                    4b:2a:e9:01:c9:bf:3d:14:2a:30:f3:f0:46:56:50:
                    95:59:ff:47:c9:34:1d:77:d1:d1:36:34:37:3b:91:
                    ae:48:6f:08:e1:a8:a7:94:1c:5d:7b:54:79:e6:c3:
                    b7:14:6d:65:32:97:20:ab:31:23:a9:22:d9:58:ce:
                    f9:d3:74:0e:9f:6f:78:e3:d5:3a:50:dd:c7:8d:99:
                    42:76:bb:b2:08:21:8c:88:dc:24:20:2f:e8:23:c8:
                    ba:e4:c3:36:ea:bf:d3:d3:d3:6a:b2:5a:d4:9e:b4:
                    e5:ae:7b:42:31:33:b3:18:4d:6a:7b:5b:e5:a7:b3:
                    9c:28:d1:e6:46:86:84:3a:ed:52:35:44:35:f2:4b:
                    18:7e:4c:6c:73:52:cf:a6:06:20:cf:66:7c:65:b2:
                    fc:b4:db:ed:04:65:b1:5d:0a:c6:c5:8b:cf:4d:b4:
                    20:ad:48:f9:c5:15:83:5f:5f:8b:10:71:82:30:28:
                    53:e3:2b:03:ca:16:4c:31:8a:bd:06:53:1f:8e:07:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:26:C3:DA:2D:B6:97:8F:4A:83:01:61:5F:A7:7E:58:7C:B7:84
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136392e302f32342d3234203d3e203632353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f7:74:0a:43:40:77:b6:8f:94:b7:7b:12:ca:c5:42:c9:03:
         be:3c:a0:7c:e8:ef:fa:7f:d5:47:9c:b6:02:22:af:44:67:86:
         b5:a1:b2:a0:d4:07:a6:84:34:35:39:f0:55:1c:13:25:cf:3e:
         1e:32:62:ee:3e:e2:a9:96:d6:df:11:3b:b2:d4:cf:a5:ad:72:
         e1:c0:15:e7:9b:22:a3:aa:97:29:9c:a5:b1:7a:a4:c8:18:1b:
         78:a9:9d:8c:4e:44:df:6e:4b:bd:bb:93:78:0e:ae:39:f7:b6:
         4a:ef:b0:5e:dc:ab:06:1d:3d:74:61:f7:ad:90:84:07:72:c7:
         5b:55:8b:61:2f:cc:d5:72:ef:1d:e1:a9:c1:23:74:64:fe:ab:
         fc:d0:a7:d5:bf:6b:2f:33:79:df:a2:8b:90:6a:e8:fa:a3:a1:
         0f:2e:7a:87:d1:67:59:1f:d8:80:09:42:fb:0d:ea:27:bd:70:
         55:3a:2a:fc:52:e6:d6:9c:d8:2f:da:25:fb:65:54:8f:47:1d:
         53:c6:e9:c3:0a:7c:12:95:2f:4a:f2:b2:68:38:54:4d:af:39:
         06:1e:91:cc:65:4d:ef:35:5e:83:2e:78:be:10:3d:79:f6:86:
         8d:f5:86:a4:e6:59:7b:2f:bb:5b:ae:5a:81:0c:4a:d9:7f:3a:
         13:9b:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org