Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32342d3234203d3e20313432343330.roa
File:                     3231362e3132322e3138302e302f32342d3234203d3e20313432343330.roa (raw, json)
Hash identifier:          tOf/IiHQkb3JXvpbT6CtW/f0RlFgwCkmIN68HKc8s2A=
Subject key identifier:   63:93:BB:98:4A:7A:94:FB:AA:12:D2:38:25:AB:31:C9:30:6D:3D:63
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6FE754275A73B2FDD12DB2C7E52F71F0C1A21C78
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32342d3234203d3e20313432343330.roa
Signing time:             Sat 23 Apr 2022 13:54:18 +0000
ROA not before:           Sat 23 Apr 2022 13:49:18 +0000
ROA not after:            Sat 22 Apr 2023 13:54:18 +0000
asID:                     142430
IP address blocks:        216.122.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e7:54:27:5a:73:b2:fd:d1:2d:b2:c7:e5:2f:71:f0:c1:a2:1c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 23 13:49:18 2022 GMT
            Not After : Apr 22 13:54:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d4:69:20:09:6b:2a:5b:f6:c7:bd:d8:10:0f:
                    07:e4:27:6a:fc:55:40:c5:32:13:7f:63:0a:ea:22:
                    89:76:ef:71:e4:42:4d:a0:8e:74:13:d5:fe:64:a8:
                    9c:96:fb:3f:eb:a5:fb:14:8b:2c:03:60:06:06:0c:
                    ff:66:b8:93:1c:3d:b7:e9:41:bb:13:80:bd:4b:77:
                    e5:3d:be:55:bd:94:37:80:df:46:80:91:c3:34:8f:
                    33:87:9e:e8:cc:61:68:9f:b9:f4:b2:63:ab:d1:45:
                    1f:0f:e7:b3:d5:6b:54:e0:63:bc:9d:15:aa:7e:94:
                    d6:02:ef:10:8c:c9:b7:7b:ab:97:48:29:ed:53:97:
                    f9:fd:62:08:46:9a:c5:a3:81:b3:7f:a8:6e:8e:23:
                    5c:4f:3b:7f:65:63:b8:aa:f4:79:0f:18:4b:8e:63:
                    fb:79:08:0b:88:94:db:a9:43:2f:56:60:d5:88:c7:
                    6c:5b:57:9e:cf:bd:5a:34:2d:10:7a:ab:7f:e1:73:
                    cc:10:a7:a1:d6:36:c7:57:14:52:24:b4:b9:cb:c1:
                    a6:ba:18:8c:68:2f:e7:ae:00:86:11:5d:e5:62:87:
                    a9:b3:2f:b8:5f:3f:5c:18:f8:82:f1:11:c5:13:f8:
                    d9:48:30:fc:35:03:8d:8a:18:9b:f5:3a:49:cf:ed:
                    a4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:BB:98:4A:7A:94:FB:AA:12:D2:38:25:AB:31:C9:30:6D:3D:63
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138302e302f32342d3234203d3e20313432343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c5:d1:35:a8:0f:94:35:c6:63:a5:11:ed:73:7f:d1:49:26:
         6e:0f:ed:20:f8:69:52:dd:2f:b4:70:0c:fc:06:d1:78:3b:8c:
         49:54:ed:a1:08:9c:1b:08:54:cd:6a:5b:bd:44:ae:d1:04:c0:
         43:2f:3e:f7:86:97:f9:a2:34:18:e8:33:4f:28:0b:cb:a5:8a:
         2d:a1:3b:76:ca:72:7d:55:c1:2f:4d:9d:c3:1a:91:3f:09:8f:
         f7:25:ae:69:7a:04:b4:bb:bf:52:16:4e:48:ad:85:31:c1:b8:
         51:de:f2:96:f8:65:02:b9:2f:99:bf:f5:b6:6e:d4:54:89:8d:
         07:50:66:dd:98:d5:5d:3c:e5:fd:2d:49:81:b4:34:8e:c6:e9:
         20:19:b4:75:b5:b4:2a:49:48:00:bc:72:6a:ab:39:da:e4:82:
         b0:72:ac:52:34:ba:36:7c:5a:62:1b:4d:5c:54:b3:6c:9c:63:
         10:8f:94:a0:77:98:ed:54:34:07:dd:2b:f7:72:dc:c9:46:4e:
         3d:25:49:13:f2:20:b1:cb:87:46:d2:a9:e2:df:b8:60:4a:8c:
         3b:e6:78:05:5b:3b:a6:a7:c9:73:3d:bf:45:f0:ce:e5:78:dc:
         55:3d:ee:13:06:02:97:5e:20:ee:bf:00:0f:f7:de:9e:e3:1e:
         a3:e0:4a:08
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUb+dUJ1pzsv3RLbLH5S9x8MGiHHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA0MjMxMzQ5MThaFw0yMzA0MjIxMzU0MThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjJENDY5MjAwOTZCMkE1QkY2
QzdCREQ4MTAwRjA3RTQyNzZBRkM1NTQwQzUzMjEzN0Y2MzBBRUEyMjg5NzZFRjcx
RTQ0MjREQTA4RTc0MTNENUZFNjRBODlDOTZGQjNGRUJBNUZCMTQ4QjJDMDM2MDA2
MDYwQ0ZGNjZCODkzMUMzREI3RTk0MUJCMTM4MEJENEI3N0U1M0RCRTU1QkQ5NDM3
ODBERjQ2ODA5MUMzMzQ4RjMzODc5RUU4Q0M2MTY4OUZCOUY0QjI2M0FCRDE0NTFG
MEZFN0IzRDU2QjU0RTA2M0JDOUQxNUFBN0U5NEQ2MDJFRjEwOENDOUI3N0JBQjk3
NDgyOUVENTM5N0Y5RkQ2MjA4NDY5QUM1QTM4MUIzN0ZBODZFOEUyMzVDNEYzQjdG
NjU2M0I4QUFGNDc5MEYxODRCOEU2M0ZCNzkwODBCODg5NERCQTk0MzJGNTY2MEQ1
ODhDNzZDNUI1NzlFQ0ZCRDVBMzQyRDEwN0FBQjdGRTE3M0NDMTBBN0ExRDYzNkM3
NTcxNDUyMjRCNEI5Q0JDMUE2QkExODhDNjgyRkU3QUUwMDg2MTE1REU1NjI4N0E5
QjMyRkI4NUYzRjVDMThGODgyRjExMUM1MTNGOEQ5NDgzMEZDMzUwMzhEOEExODlC
RjUzQTQ5Q0ZFREE0RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8tRpIAlrKlv2x73YEA8H5Cdq/FVAxTITf2MK6iKJdu9x5EJNoI50
E9X+ZKiclvs/66X7FIssA2AGBgz/ZriTHD236UG7E4C9S3flPb5VvZQ3gN9GgJHD
NI8zh57ozGFon7n0smOr0UUfD+ez1WtU4GO8nRWqfpTWAu8QjMm3e6uXSCntU5f5
/WIIRprFo4Gzf6hujiNcTzt/ZWO4qvR5DxhLjmP7eQgLiJTbqUMvVmDViMdsW1ee
z71aNC0Qeqt/4XPMEKeh1jbHVxRSJLS5y8GmuhiMaC/nrgCGEV3lYoepsy+4Xz9c
GPiC8RHFE/jZSDD8NQONihib9TpJz+2k6QIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FGOTu5hKepT7qhLSOCWrMckwbT1jMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjM0MzMz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6tDANBgkqhkiG9w0BAQsFAAOCAQEAP8XRNagPlDXGY6UR
7XN/0Ukmbg/tIPhpUt0vtHAM/AbReDuMSVTtoQicGwhUzWpbvUSu0QTAQy8+94aX
+aI0GOgzTygLy6WKLaE7dspyfVXBL02dwxqRPwmP9yWuaXoEtLu/UhZOSK2FMcG4
Ud7ylvhlArkvmb/1tm7UVImNB1Bm3ZjVXTzl/S1JgbQ0jsbpIBm0dbW0KklIALxy
aqs52uSCsHKsUjS6NnxaYhtNXFSzbJxjEI+UoHeY7VQ0B90r93LcyUZOPSVJE/Ig
scuHRtKp4t+4YEqMO+Z4BVs7pqfJcz2/RfDO5XjcVT3uEwYCl14g7r8AD/fenuMe
o+BKCA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org