Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e203631333137.roa
File:                     3231362e3132322e3138322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          KJpRKxkvWERnl01EYpvIb7wWKZCATQR0RMOpe7SQkmk=
Subject key identifier:   07:E6:DC:17:62:6F:1C:28:3F:21:23:55:6A:C5:C3:32:10:CC:64:30
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6460837385C9822B5EEA63DB33C8C5E47ACCE75B
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 25 Apr 2022 04:32:07 +0000
ROA not before:           Mon 25 Apr 2022 04:27:07 +0000
ROA not after:            Mon 24 Apr 2023 04:32:07 +0000
asID:                     61317
IP address blocks:        216.122.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:60:83:73:85:c9:82:2b:5e:ea:63:db:33:c8:c5:e4:7a:cc:e7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 25 04:27:07 2022 GMT
            Not After : Apr 24 04:32:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:4e:3d:03:ad:fc:14:b3:31:80:f4:1f:27:
                    7e:f2:b1:8c:e7:3a:23:01:da:b7:2d:12:4f:68:68:
                    92:ef:81:43:fc:3d:5f:c4:e6:8d:72:1e:ac:6e:4c:
                    bc:36:72:1f:d4:3d:e0:af:2e:62:bb:c1:83:41:3c:
                    e7:d3:75:97:04:1d:3c:79:58:b9:2e:51:af:c6:ce:
                    d1:5c:28:fc:29:0f:f0:d5:6f:e1:99:88:e6:07:f7:
                    16:b5:85:9b:5c:d1:5b:53:7c:3c:d4:0a:bd:a6:b9:
                    dc:db:69:68:aa:36:90:0a:ad:de:8e:d3:d9:36:43:
                    d4:2e:55:6c:4a:ea:74:0f:a5:c7:6e:c5:53:36:16:
                    80:21:89:c6:23:7e:35:cd:50:9c:87:ce:6d:61:e3:
                    1e:e8:6c:38:c9:bf:f4:5f:8f:a2:43:a8:23:ea:b9:
                    3d:fe:94:7c:ba:e2:3c:c3:d0:60:19:77:73:1f:bb:
                    ee:34:a5:f5:fa:22:c9:83:d9:52:3a:90:e9:c7:ab:
                    f0:83:bf:ef:df:78:ad:8b:ab:a6:a4:6b:66:40:0e:
                    4f:b6:73:aa:be:15:df:2c:93:d4:aa:d7:c3:a0:4d:
                    5a:cc:88:2c:06:6d:4c:53:13:51:d0:ae:94:93:99:
                    00:c7:74:07:3b:86:c9:1a:56:e8:d8:ad:54:40:e7:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E6:DC:17:62:6F:1C:28:3F:21:23:55:6A:C5:C3:32:10:CC:64:30
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:58:e6:cb:8a:2c:ce:40:7d:70:b3:9d:94:a5:50:6c:14:
         9d:89:7d:94:4f:df:fd:4a:0f:05:af:06:c4:32:04:60:66:8c:
         37:d9:30:86:4d:7f:43:d5:d3:11:6c:c7:60:97:e4:91:d2:99:
         d3:72:47:db:e0:13:c2:2b:1d:8f:29:d9:9d:82:b0:1d:d4:ca:
         63:82:14:30:c5:69:fa:d0:c7:3a:09:03:85:6a:b2:f6:fe:66:
         18:90:a6:b0:aa:51:d5:82:91:4b:7e:86:03:21:ef:53:f7:ec:
         90:f0:1a:35:66:1b:0d:cf:ba:58:2c:45:83:04:1b:ed:67:41:
         d7:24:c5:09:18:0e:44:36:d1:50:4b:98:54:66:15:93:de:b7:
         50:94:9a:26:9a:33:75:c4:78:7a:43:38:69:93:b0:f1:d9:2c:
         21:42:53:39:d7:51:d2:71:48:32:96:f0:66:c2:34:a8:15:dc:
         3a:9c:60:3a:e9:f8:db:f8:da:db:0b:4e:43:e7:0d:17:92:e8:
         f0:de:85:f7:6b:25:7b:d0:86:8a:6b:73:44:20:16:74:f0:d3:
         20:9c:0c:a9:8a:8d:ab:ca:86:f8:3c:74:ba:3f:dd:90:35:76:
         e8:e1:78:4b:b8:7e:d9:ad:ba:af:53:d8:fd:fa:f2:7d:84:56:
         8b:2e:00:18
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUZGCDc4XJgite6mPbM8jF5HrM51swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA0MjUwNDI3MDdaFw0yMzA0MjQwNDMyMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQ4RDRFM0QwM0FERkMxNEIz
MzE4MEY0MUYyNzdFRjJCMThDRTczQTIzMDFEQUI3MkQxMjRGNjg2ODkyRUY4MTQz
RkMzRDVGQzRFNjhENzIxRUFDNkU0Q0JDMzY3MjFGRDQzREUwQUYyRTYyQkJDMTgz
NDEzQ0U3RDM3NTk3MDQxRDNDNzk1OEI5MkU1MUFGQzZDRUQxNUMyOEZDMjkwRkYw
RDU2RkUxOTk4OEU2MDdGNzE2QjU4NTlCNUNEMTVCNTM3QzNDRDQwQUJEQTZCOURD
REI2OTY4QUEzNjkwMEFBRERFOEVEM0Q5MzY0M0Q0MkU1NTZDNEFFQTc0MEZBNUM3
NkVDNTUzMzYxNjgwMjE4OUM2MjM3RTM1Q0Q1MDlDODdDRTZENjFFMzFFRTg2QzM4
QzlCRkY0NUY4RkEyNDNBODIzRUFCOTNERkU5NDdDQkFFMjNDQzNEMDYwMTk3Nzcz
MUZCQkVFMzRBNUY1RkEyMkM5ODNEOTUyM0E5MEU5QzdBQkYwODNCRkVGREY3OEFE
OEJBQkE2QTQ2QjY2NDAwRTRGQjY3M0FBQkUxNURGMkM5M0Q0QUFEN0MzQTA0RDVB
Q0M4ODJDMDY2RDRDNTMxMzUxRDBBRTk0OTM5OTAwQzc3NDA3M0I4NkM5MUE1NkU4
RDhBRDU0NDBFNzZBN0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5I1OPQOt/BSzMYD0Hyd+8rGM5zojAdq3LRJPaGiS74FD/D1fxOaN
ch6sbky8NnIf1D3gry5iu8GDQTzn03WXBB08eVi5LlGvxs7RXCj8KQ/w1W/hmYjm
B/cWtYWbXNFbU3w81Aq9prnc22loqjaQCq3ejtPZNkPULlVsSup0D6XHbsVTNhaA
IYnGI341zVCch85tYeMe6Gw4yb/0X4+iQ6gj6rk9/pR8uuI8w9BgGXdzH7vuNKX1
+iLJg9lSOpDpx6vwg7/v33iti6umpGtmQA5PtnOqvhXfLJPUqtfDoE1azIgsBm1M
UxNR0K6Uk5kAx3QHO4bJGlbo2K1UQOdqfQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FAfm3BdibxwoPyEjVWrFwzIQzGQwMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAHYerYwDQYJKoZIhvcNAQELBQADggEBAJx7WObLiizOQH1ws52U
pVBsFJ2JfZRP3/1KDwWvBsQyBGBmjDfZMIZNf0PV0xFsx2CX5JHSmdNyR9vgE8Ir
HY8p2Z2CsB3UymOCFDDFafrQxzoJA4Vqsvb+ZhiQprCqUdWCkUt+hgMh71P37JDw
GjVmGw3PulgsRYMEG+1nQdckxQkYDkQ20VBLmFRmFZPet1CUmiaaM3XEeHpDOGmT
sPHZLCFCUznXUdJxSDKW8GbCNKgV3DqcYDrp+Nv42tsLTkPnDReS6PDehfdrJXvQ
hoprc0QgFnTw0yCcDKmKjavKhvg8dLo/3ZA1dujheEu4ftmtuq9T2P368n2EVosu
ABg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org