Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32342d3234203d3e203139343337.roa
File:                     3231362e3132322e3138322e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          WZ/kDho6Re6tXfGg4STRlBaE+6HYJ8uVkza/jX7Oess=
Subject key identifier:   A0:35:B0:42:9C:E9:82:9F:49:E6:6F:6B:28:57:AE:85:A9:15:CE:F5
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       45C2F7F95D9F6FDEF89ABA19ECF4A2A17745C4DA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 15 Jun 2022 10:08:00 +0000
ROA not before:           Wed 15 Jun 2022 10:03:00 +0000
ROA not after:            Wed 14 Jun 2023 10:08:00 +0000
asID:                     19437
IP address blocks:        216.122.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c2:f7:f9:5d:9f:6f:de:f8:9a:ba:19:ec:f4:a2:a1:77:45:c4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 15 10:03:00 2022 GMT
            Not After : Jun 14 10:08:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:15:71:8d:49:5e:4f:6b:80:8c:2a:a3:58:5c:
                    48:b2:69:28:ee:cd:05:aa:3b:5c:a1:d7:94:f6:a4:
                    b7:bc:36:6c:87:ff:f0:1b:bf:1f:f0:fc:ce:63:95:
                    6e:ce:81:cd:06:94:9d:1c:f6:4f:86:40:90:1e:8d:
                    c6:10:f2:b4:a5:c6:c0:8b:26:06:f0:26:36:d2:72:
                    1b:ba:6d:24:97:30:46:c8:61:ad:73:8b:5e:a0:86:
                    fe:27:b2:61:47:2c:50:60:5c:26:03:2e:33:b8:4d:
                    83:c6:8b:b3:33:d8:92:40:16:5c:ab:35:8d:a0:c7:
                    88:3a:5e:27:1e:d1:f3:d2:a0:2f:5d:a9:f7:e1:db:
                    67:f9:b8:b2:cc:c4:8c:90:9b:2a:71:58:46:08:36:
                    4f:70:5e:28:d2:5e:98:6a:f2:d7:e2:51:cb:09:64:
                    ef:61:f8:b0:6f:b4:2a:d8:87:f2:1a:89:49:58:d9:
                    b4:bd:92:0e:e4:45:15:03:8b:96:b3:72:25:ce:f5:
                    ff:e0:b1:0e:03:a0:fa:1d:31:42:6d:96:4f:03:d2:
                    90:84:b3:4a:18:e4:fb:54:41:26:3c:b5:5e:e6:2c:
                    d5:99:54:a0:bc:00:2f:0c:25:42:67:1f:50:76:ea:
                    13:7c:75:4d:ac:c9:0f:a4:23:34:93:c0:9a:a3:df:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:B0:42:9C:E9:82:9F:49:E6:6F:6B:28:57:AE:85:A9:15:CE:F5
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:8d:1d:fa:67:f4:65:ec:fb:86:04:9a:4a:b9:64:78:cf:a6:
         1b:08:47:d1:02:12:4e:7d:bf:fe:84:39:6e:a7:c3:2f:d7:83:
         8e:64:e6:6f:22:8d:76:45:e8:cf:be:90:52:f5:e8:5f:dc:6d:
         8f:e5:a0:15:ed:50:41:5b:f4:9e:a4:28:de:4c:5a:1c:59:6a:
         11:cc:6c:48:e5:ff:e8:97:89:93:29:78:7e:02:41:22:5b:48:
         29:51:d6:e4:cc:c5:b0:74:1f:93:07:1e:67:62:c5:22:1d:70:
         51:fa:08:af:ca:8e:b0:fe:ae:45:69:82:f1:40:84:4b:32:e5:
         b1:9d:9e:d0:d6:ce:b1:d2:3e:0e:6a:57:a3:4a:ef:99:93:3d:
         03:87:72:9b:08:72:80:ff:12:2f:c5:e8:21:f1:15:59:2e:01:
         d5:aa:e7:19:6f:de:36:11:ac:88:84:ab:72:81:55:1c:4f:a9:
         1f:ce:f8:eb:9f:e1:ca:54:d4:ec:88:b1:a2:60:b7:34:28:7e:
         75:09:cb:d4:20:ae:97:87:a2:8b:15:c0:8d:46:d4:05:a1:18:
         d6:88:01:6b:e0:59:c3:bc:13:cf:b7:1a:c4:a4:2b:f8:da:82:
         b1:dd:89:a8:ca:5c:72:ed:da:55:40:05:ad:ab:02:06:c1:71:
         3b:29:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org