Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32322d3234203d3e203439333932.roa
File:                     3231362e3132322e3138302e302f32322d3234203d3e203439333932.roa (raw, json)
Hash identifier:          nrEFVKTKZjB/cdYUvlyL2A/bt6V6Nrt0LdEQuk3uxgM=
Subject key identifier:   9B:7E:98:6E:A6:F4:7E:A6:7B:B7:6C:F0:A6:77:F9:5E:B2:44:44:74
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       42024337C3D24B80641C5642E2B7B4FED5B62857
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32322d3234203d3e203439333932.roa
Signing time:             Wed 23 Feb 2022 14:03:02 +0000
ROA not before:           Wed 23 Feb 2022 13:58:02 +0000
ROA not after:            Wed 22 Feb 2023 14:03:02 +0000
asID:                     49392
IP address blocks:        216.122.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:02:43:37:c3:d2:4b:80:64:1c:56:42:e2:b7:b4:fe:d5:b6:28:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 23 13:58:02 2022 GMT
            Not After : Feb 22 14:03:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:79:d2:0b:50:1d:92:9c:8a:d2:2e:18:ef:
                    cf:5b:af:27:28:22:20:05:74:90:4f:44:ba:65:3e:
                    e0:86:5d:b6:32:88:11:99:ce:09:c8:24:46:c0:d0:
                    c9:0f:2a:9b:25:95:4f:e6:6d:f2:54:71:96:09:ce:
                    4f:37:28:2d:69:65:fb:38:ee:6b:75:f4:d9:d7:5f:
                    59:5b:e5:13:ff:aa:e2:c7:6b:b2:37:c2:77:1c:1c:
                    a7:a2:95:a1:3d:50:62:25:e6:22:4b:c7:09:11:b2:
                    0d:c5:8f:ef:9f:77:be:59:5d:6c:05:61:19:f1:b3:
                    d3:80:34:4c:bf:1e:02:7a:c8:26:47:b8:4a:3f:0b:
                    da:7b:30:cf:1b:b9:4c:a7:19:dc:53:b0:b4:35:b0:
                    3d:87:4c:f4:42:c2:6c:2d:70:32:9a:e5:e6:c6:59:
                    a0:c7:2c:b1:b1:77:51:b9:8a:c6:6d:81:5b:39:1a:
                    a6:50:b3:91:79:f7:3d:10:65:61:bb:93:81:77:3f:
                    2d:d1:93:49:c9:80:8d:07:0d:3b:e0:e4:a0:2c:b1:
                    91:dc:2d:6e:68:fd:32:32:f7:71:88:14:61:18:a9:
                    5c:50:78:52:56:e5:1b:88:6c:90:eb:2e:2d:30:11:
                    4e:d6:41:bc:13:dd:19:27:d8:8a:0d:a3:e3:c2:20:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7E:98:6E:A6:F4:7E:A6:7B:B7:6C:F0:A6:77:F9:5E:B2:44:44:74
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32322d3234203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:86:da:df:6e:94:ce:9b:49:9f:c2:6b:12:51:3f:ce:9d:
         7d:69:9c:60:df:a3:7e:5f:2d:2f:38:d3:7c:de:1f:61:19:68:
         96:73:27:6a:b2:8b:1f:1f:10:88:fd:65:4e:f6:37:6c:9d:3d:
         45:85:c2:a1:60:8d:b1:30:e0:b8:29:78:c6:a4:e8:c4:0d:ed:
         35:0b:49:8c:b9:76:32:ca:1b:88:ed:ba:6b:7f:17:ad:67:b5:
         26:30:ee:27:23:a3:65:8e:ee:c0:1a:6b:85:21:d1:be:f6:8c:
         47:b7:9e:a5:f6:92:99:c4:8d:e5:8c:91:62:1d:d3:36:77:90:
         29:b4:ed:15:7d:30:26:25:c2:81:07:d3:b7:f9:49:1c:d4:16:
         7e:6f:b3:42:89:7d:b7:b0:42:0d:9b:2f:bf:4c:f5:90:88:b4:
         86:ac:61:d3:43:34:13:cf:16:f1:38:a5:39:f0:38:2f:27:e8:
         ed:df:a0:0c:15:8a:58:5b:64:fb:f5:e1:b9:cf:9e:0f:77:26:
         d1:2e:9f:7b:4b:e4:78:f0:99:c0:4c:3e:a8:1e:72:cd:1a:8e:
         b6:40:4a:e2:9f:d7:e5:fd:37:cf:c1:ec:e9:bc:4f:36:41:02:
         1c:ba:9c:b0:71:75:5c:6f:af:7b:b4:c1:8c:98:e2:b2:e3:7e:
         ce:94:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org