Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          DrXZHW2sAvp00+rVeJPAteNJlxpZonjq89kRawb/R8A=
Subject key identifier:   74:D8:65:AD:C1:05:FB:F8:0F:7E:94:CF:9A:11:21:EA:4C:DC:EA:4E
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       286FD97CFFEB256A0B98D2F802F503C0F8CCA8D1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 11 Apr 2022 13:05:46 +0000
ROA not before:           Mon 11 Apr 2022 13:00:46 +0000
ROA not after:            Mon 10 Apr 2023 13:05:46 +0000
asID:                     40676
IP address blocks:        216.122.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6f:d9:7c:ff:eb:25:6a:0b:98:d2:f8:02:f5:03:c0:f8:cc:a8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 11 13:00:46 2022 GMT
            Not After : Apr 10 13:05:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2b:45:41:27:10:9c:89:2b:9b:c0:80:36:a9:
                    7e:6c:d7:a7:d8:12:be:77:ae:40:3d:50:76:47:9b:
                    e5:ac:6d:79:10:7f:ed:d4:91:18:15:76:2d:dd:7e:
                    18:c4:61:fe:e8:11:91:d5:cc:15:e6:a6:cb:f5:56:
                    ce:7d:0c:2e:8c:14:f3:d6:ff:c2:2a:64:d5:20:a9:
                    06:21:04:70:df:fa:45:05:ec:53:85:04:54:55:36:
                    90:93:6f:46:fe:0b:90:e0:76:8f:13:ae:c0:f3:62:
                    e6:ad:15:38:67:e4:47:42:44:0e:28:a9:62:43:f6:
                    9d:eb:b5:c1:c4:bb:5c:b5:89:4d:7f:f1:55:9a:42:
                    89:42:70:81:cb:a1:a9:af:b6:c8:89:d4:3f:e7:31:
                    eb:3f:89:2d:39:1e:d0:80:0a:0c:5c:96:a9:67:39:
                    04:bb:c9:05:cd:26:7f:b5:af:81:1e:38:5f:c8:26:
                    4a:00:21:ad:46:69:12:df:6a:97:8d:a1:be:9c:54:
                    9e:4b:63:bc:78:07:b8:bc:af:33:55:1e:cf:8c:19:
                    94:b5:98:49:15:42:6f:81:b2:2e:89:19:73:04:87:
                    0f:17:fb:5d:1e:1a:fa:30:5b:73:34:34:a9:ed:ac:
                    6f:99:cd:fa:64:de:85:4d:4e:84:0f:42:f0:3c:e1:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D8:65:AD:C1:05:FB:F8:0F:7E:94:CF:9A:11:21:EA:4C:DC:EA:4E
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:83:ad:43:75:93:83:28:ea:f7:c9:7b:c5:44:2d:9f:8a:
         5b:61:c9:ac:dd:dc:6e:a7:14:71:e2:d6:41:fd:a6:a2:88:23:
         ac:3b:dd:8e:be:24:16:b0:e9:e9:4b:f1:36:de:14:32:74:a4:
         ff:7b:2b:7a:d6:8c:d6:ca:07:0a:4d:30:a8:39:53:ef:66:49:
         31:34:72:82:b3:17:bf:f4:55:41:ca:9a:75:09:0f:d8:66:db:
         21:9d:cf:9d:2a:a7:73:4f:3c:8b:76:f5:d0:62:c2:8c:25:0e:
         07:8d:78:4a:1a:c1:97:30:50:3f:b0:1b:6a:6a:e2:75:b6:a1:
         ca:ce:98:eb:a6:8d:0d:c0:f9:5a:1d:3f:6d:34:50:85:b1:4e:
         ff:94:8f:85:94:42:fc:7b:74:3e:ef:84:4e:fe:6a:46:69:4d:
         ac:24:54:05:9f:b7:40:bf:73:60:da:f3:89:92:7d:43:f5:05:
         d0:b4:20:0b:31:5e:a8:1c:cc:04:32:7d:a4:60:66:39:24:e1:
         00:fb:f0:12:84:10:21:ac:60:5f:ed:ea:32:cf:6e:b0:21:79:
         9c:cf:ea:39:2c:b5:19:c6:d8:cd:ab:5f:fa:f0:b5:7b:fc:3c:
         4e:eb:cf:5c:ae:ca:7d:6e:1d:43:51:b2:7c:cf:6f:57:82:b7:
         1d:86:06:17
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUKG/ZfP/rJWoLmNL4AvUDwPjMqNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA0MTExMzAwNDZaFw0yMzA0MTAxMzA1NDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREUyQjQ1NDEyNzEwOUM4OTJC
OUJDMDgwMzZBOTdFNkNEN0E3RDgxMkJFNzdBRTQwM0Q1MDc2NDc5QkU1QUM2RDc5
MTA3RkVERDQ5MTE4MTU3NjJEREQ3RTE4QzQ2MUZFRTgxMTkxRDVDQzE1RTZBNkNC
RjU1NkNFN0QwQzJFOEMxNEYzRDZGRkMyMkE2NEQ1MjBBOTA2MjEwNDcwREZGQTQ1
MDVFQzUzODUwNDU0NTUzNjkwOTM2RjQ2RkUwQjkwRTA3NjhGMTNBRUMwRjM2MkU2
QUQxNTM4NjdFNDQ3NDI0NDBFMjhBOTYyNDNGNjlERUJCNUMxQzRCQjVDQjU4OTRE
N0ZGMTU1OUE0Mjg5NDI3MDgxQ0JBMUE5QUZCNkM4ODlENDNGRTczMUVCM0Y4OTJE
MzkxRUQwODAwQTBDNUM5NkE5NjczOTA0QkJDOTA1Q0QyNjdGQjVBRjgxMUUzODVG
QzgyNjRBMDAyMUFENDY2OTEyREY2QTk3OERBMUJFOUM1NDlFNEI2M0JDNzgwN0I4
QkNBRjMzNTUxRUNGOEMxOTk0QjU5ODQ5MTU0MjZGODFCMjJFODkxOTczMDQ4NzBG
MTdGQjVEMUUxQUZBMzA1QjczMzQzNEE5RURBQzZGOTlDREZBNjRERTg1NEQ0RTg0
MEY0MkYwM0NFMTBGQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3itFQScQnIkrm8CANql+bNen2BK+d65APVB2R5vlrG15EH/t1JEY
FXYt3X4YxGH+6BGR1cwV5qbL9VbOfQwujBTz1v/CKmTVIKkGIQRw3/pFBexThQRU
VTaQk29G/guQ4HaPE67A82LmrRU4Z+RHQkQOKKliQ/ad67XBxLtctYlNf/FVmkKJ
QnCBy6Gpr7bIidQ/5zHrP4ktOR7QgAoMXJapZzkEu8kFzSZ/ta+BHjhfyCZKACGt
RmkS32qXjaG+nFSeS2O8eAe4vK8zVR7PjBmUtZhJFUJvgbIuiRlzBIcPF/tdHhr6
MFtzNDSp7axvmc36ZN6FTU6ED0LwPOEPywIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FHTYZa3BBfv4D36Uz5oRIepM3OpOMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzNjM3MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADYeq8wDQYJKoZIhvcNAQELBQADggEBALhWg61DdZODKOr3yXvF
RC2filthyazd3G6nFHHi1kH9pqKII6w73Y6+JBaw6elL8TbeFDJ0pP97K3rWjNbK
BwpNMKg5U+9mSTE0coKzF7/0VUHKmnUJD9hm2yGdz50qp3NPPIt29dBiwowlDgeN
eEoawZcwUD+wG2pq4nW2ocrOmOumjQ3A+VodP200UIWxTv+Uj4WUQvx7dD7vhE7+
akZpTawkVAWft0C/c2Da84mSfUP1BdC0IAsxXqgczAQyfaRgZjkk4QD78BKEECGs
YF/t6jLPbrAheZzP6jkstRnG2M2rX/rwtXv8PE7rz1yuyn1uHUNRsnzPb1eCtx2G
Bhc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org