Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa
File:                     3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          y0M87Os2aa4hxyJyn9LE1SV7NuRFriP+xQR0BOBxe7k=
Subject key identifier:   F4:42:72:12:7A:33:1B:99:57:57:8C:E0:A5:C0:92:00:80:37:6C:B1
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       4BDEE94AD83805009E0929B8057CA20D6767BDA4
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa
Signing time:             Sun 15 May 2022 14:51:45 +0000
ROA not before:           Sun 15 May 2022 14:46:45 +0000
ROA not after:            Sun 14 May 2023 14:51:45 +0000
asID:                     33696
IP address blocks:        216.122.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:de:e9:4a:d8:38:05:00:9e:09:29:b8:05:7c:a2:0d:67:67:bd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 15 14:46:45 2022 GMT
            Not After : May 14 14:51:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:f7:89:a2:6c:b8:ad:4e:69:35:f7:c7:48:
                    e5:7a:3f:b6:19:88:82:62:11:0a:d2:c7:d6:47:0e:
                    a4:8c:27:1c:72:e3:cd:61:32:fb:dd:66:f0:86:28:
                    1c:90:31:91:f6:e0:54:2f:d3:4c:da:ba:7d:6a:f6:
                    04:b4:12:1f:6a:06:27:bc:ac:c7:95:cc:a9:3c:87:
                    9d:71:1d:d2:53:36:1b:ea:5d:ad:0e:09:c1:64:d1:
                    72:fe:ac:69:c1:40:89:e7:2d:b3:6b:b7:bb:2b:5e:
                    2e:53:c5:91:db:5e:c2:8e:30:b7:58:82:ec:56:76:
                    93:da:4d:77:13:52:08:12:49:33:d7:65:e5:2b:26:
                    70:b6:6d:d7:53:dd:c2:de:d2:66:a4:a6:50:47:b9:
                    15:c8:26:92:57:ef:d9:38:80:09:a4:7d:9a:9d:0c:
                    79:6b:d5:be:9b:25:5b:a5:49:15:8b:dc:e4:52:76:
                    cc:31:2c:6e:8c:94:9c:92:1a:c4:bc:76:9e:d6:b5:
                    d6:0d:8d:c4:76:88:26:67:d1:ca:e4:13:27:63:ff:
                    9f:5a:1c:8d:35:bb:ff:a3:58:b4:22:8e:1e:fa:0f:
                    80:d2:a9:c6:ff:41:30:87:e5:60:a7:e2:0e:93:f1:
                    d8:6a:e9:41:e4:f7:43:2b:1f:a0:fb:e7:5d:08:eb:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:42:72:12:7A:33:1B:99:57:57:8C:E0:A5:C0:92:00:80:37:6C:B1
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ad:e4:59:0c:cd:12:4e:e5:dc:ea:3c:4b:fa:44:ec:08:49:
         54:ef:8d:82:09:de:0f:a8:4c:8f:99:e1:df:9e:4e:da:a2:d6:
         f4:29:b2:0c:6f:88:e5:c4:55:8d:89:f9:d6:9d:f3:52:83:96:
         48:c9:07:b4:80:a3:fd:c2:df:91:be:dd:9c:56:2d:07:0f:1c:
         bc:27:26:40:44:0d:aa:52:1f:a8:84:89:c4:8f:1f:dd:15:e3:
         74:79:53:1d:ad:77:f2:41:91:8a:10:25:5d:6b:76:e6:78:73:
         b7:25:cf:f5:85:6b:3b:3b:6b:e2:4a:fe:a9:cf:8e:81:f3:a4:
         94:2b:68:e7:b3:b8:0f:9c:26:d3:51:9d:38:63:42:1d:7a:e6:
         c4:d2:24:c8:8c:6d:59:1c:b5:b1:b0:62:8d:e1:ea:9e:ab:71:
         82:43:a2:55:c5:68:ac:a1:78:fb:97:07:12:f4:9b:ad:be:c6:
         88:75:c9:98:c8:b4:b6:78:8e:1a:2f:ec:af:26:55:00:84:ef:
         c3:dd:81:48:63:84:4d:1f:af:11:81:2f:9d:46:ec:8d:93:5f:
         d0:7b:7e:08:e4:92:62:98:ef:3a:73:8f:74:07:3f:5b:28:dd:
         8f:97:91:ac:84:a7:72:b1:bd:27:a3:ef:72:87:d7:d6:60:c6:
         66:7e:0a:89
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUS97pStg4BQCeCSm4BXyiDWdnvaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA1MTUxNDQ2NDVaFw0yMzA1MTQxNDUxNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBGQUY3ODlBMjZDQjhBRDRF
NjkzNUY3Qzc0OEU1N0EzRkI2MTk4ODgyNjIxMTBBRDJDN0Q2NDcwRUE0OEMyNzFD
NzJFM0NENjEzMkZCREQ2NkYwODYyODFDOTAzMTkxRjZFMDU0MkZEMzRDREFCQTdE
NkFGNjA0QjQxMjFGNkEwNjI3QkNBQ0M3OTVDQ0E5M0M4NzlENzExREQyNTMzNjFC
RUE1REFEMEUwOUMxNjREMTcyRkVBQzY5QzE0MDg5RTcyREIzNkJCN0JCMkI1RTJF
NTNDNTkxREI1RUMyOEUzMEI3NTg4MkVDNTY3NjkzREE0RDc3MTM1MjA4MTI0OTMz
RDc2NUU1MkIyNjcwQjY2REQ3NTNEREMyREVEMjY2QTRBNjUwNDdCOTE1QzgyNjky
NTdFRkQ5Mzg4MDA5QTQ3RDlBOUQwQzc5NkJENUJFOUIyNTVCQTU0OTE1OEJEQ0U0
NTI3NkNDMzEyQzZFOEM5NDlDOTIxQUM0QkM3NjlFRDZCNUQ2MEQ4REM0NzY4ODI2
NjdEMUNBRTQxMzI3NjNGRjlGNUExQzhEMzVCQkZGQTM1OEI0MjI4RTFFRkEwRjgw
RDJBOUM2RkY0MTMwODdFNTYwQTdFMjBFOTNGMUQ4NkFFOTQxRTRGNzQzMkIxRkEw
RkJFNzVEMDhFQjg4NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsPr3iaJsuK1OaTX3x0jlej+2GYiCYhEK0sfWRw6kjCcccuPNYTL7
3WbwhigckDGR9uBUL9NM2rp9avYEtBIfagYnvKzHlcypPIedcR3SUzYb6l2tDgnB
ZNFy/qxpwUCJ5y2za7e7K14uU8WR217CjjC3WILsVnaT2k13E1IIEkkz12XlKyZw
tm3XU93C3tJmpKZQR7kVyCaSV+/ZOIAJpH2anQx5a9W+myVbpUkVi9zkUnbMMSxu
jJSckhrEvHae1rXWDY3EdogmZ9HK5BMnY/+fWhyNNbv/o1i0Io4e+g+A0qnG/0Ew
h+Vgp+IOk/HYaulB5PdDKx+g++ddCOuIUwIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FPRCchJ6MxuZV1eM4KXAkgCAN2yxMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzNjM5MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADYeq8wDQYJKoZIhvcNAQELBQADggEBAL2t5FkMzRJO5dzqPEv6
ROwISVTvjYIJ3g+oTI+Z4d+eTtqi1vQpsgxviOXEVY2J+dad81KDlkjJB7SAo/3C
35G+3ZxWLQcPHLwnJkBEDapSH6iEicSPH90V43R5Ux2td/JBkYoQJV1rduZ4c7cl
z/WFazs7a+JK/qnPjoHzpJQraOezuA+cJtNRnThjQh165sTSJMiMbVkctbGwYo3h
6p6rcYJDolXFaKyhePuXBxL0m62+xoh1yZjItLZ4jhov7K8mVQCE78PdgUhjhE0f
rxGBL51G7I2TX9B7fgjkkmKY7zpzj3QHP1so3Y+XkayEp3KxvSej73KH19ZgxmZ+
Cok=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org