Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa
File:                     3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier:          kIc+g4ZbIgGjuJoFLSFjWIE7nm6UAAK52QtZ45DSgTU=
Subject key identifier:   0B:30:BB:99:71:9F:5F:9F:0C:0A:1D:47:A5:8B:FD:E2:3C:1B:46:07
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       342FCEF21B54A0AE999E345D69E6B1B2633BCEE8
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa
Signing time:             Thu 16 Jun 2022 05:53:12 +0000
ROA not before:           Thu 16 Jun 2022 05:48:12 +0000
ROA not after:            Thu 15 Jun 2023 05:53:12 +0000
asID:                     7922
IP address blocks:        216.122.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2f:ce:f2:1b:54:a0:ae:99:9e:34:5d:69:e6:b1:b2:63:3b:ce:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 16 05:48:12 2022 GMT
            Not After : Jun 15 05:53:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:7e:d3:26:50:3c:13:68:24:aa:1c:b7:90:
                    2c:09:f0:58:f1:1f:5c:6e:f4:0b:65:42:e2:46:75:
                    86:49:9f:1b:16:b1:7b:aa:ca:74:62:23:19:44:b0:
                    3d:60:4e:25:cf:84:84:03:14:41:35:43:17:04:4e:
                    0b:12:cf:96:6c:dd:93:11:ad:5a:e5:49:68:05:36:
                    d4:23:cd:b4:95:ee:0c:d2:d4:bb:ba:0b:c0:39:67:
                    b8:9f:a9:1b:3d:25:e5:f0:d1:7b:60:f7:9b:3a:f8:
                    60:a1:fc:75:f8:89:9a:57:92:03:9b:c9:94:23:c1:
                    82:84:45:46:b5:eb:d6:c9:4d:6f:9a:73:fa:38:60:
                    ac:f2:ed:ed:00:d7:44:d6:6f:62:02:be:39:df:07:
                    96:dc:23:7a:1b:2b:5e:38:0d:e0:00:45:0e:3f:3c:
                    a1:39:a9:bc:77:13:71:08:4b:06:8c:84:ec:0d:cb:
                    33:fa:8e:f5:5c:18:0f:90:95:49:9d:31:9c:f7:1b:
                    5c:41:be:cb:85:0c:bc:6a:1e:90:aa:4b:87:b3:0f:
                    1a:3b:36:cb:66:47:ac:c1:06:41:4e:0a:6a:53:76:
                    7d:ef:41:fb:cd:bd:ca:67:aa:08:a0:1d:6d:15:59:
                    0c:75:6e:d8:fc:68:55:5a:01:4d:93:94:bf:bc:31:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:30:BB:99:71:9F:5F:9F:0C:0A:1D:47:A5:8B:FD:E2:3C:1B:46:07
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:da:6c:ad:d1:b6:a9:9f:3b:d8:28:a5:5b:c4:21:8c:b3:6e:
         b0:a7:50:30:95:a4:5b:79:5a:4b:06:22:38:cf:2c:b1:7f:70:
         09:32:4f:88:21:67:d6:da:d1:49:8f:ed:4d:c0:2f:c4:a6:e5:
         c2:c3:40:28:6a:e6:9f:61:3b:88:2c:9e:6f:f8:9d:90:2d:a0:
         15:33:81:31:3a:10:d7:10:44:2e:2a:ef:09:85:7e:1e:de:ac:
         73:05:79:76:8e:1e:9b:48:71:34:6d:62:df:2a:05:ef:e5:e7:
         96:ba:a4:d6:4c:18:4a:a2:f8:59:fc:e6:88:23:a8:36:6b:44:
         47:16:d8:2f:64:1c:c0:22:7e:71:8c:fc:30:bc:7d:22:6b:ba:
         ea:91:5e:72:eb:0a:52:40:d1:e3:c8:27:bf:b2:90:fd:f9:88:
         6c:5b:3e:88:a9:8e:e1:68:c6:7d:50:13:ab:bb:0a:d3:a6:e2:
         a1:d5:2e:cc:d7:76:c8:bf:f3:bc:3c:6a:3c:0b:c1:50:df:3e:
         58:cd:68:a1:dc:1e:94:73:a4:e2:47:c3:e0:72:20:3b:a6:00:
         9b:c1:40:ac:8d:c4:88:42:13:b4:b0:cb:4b:1e:a4:eb:dc:cf:
         7d:6c:e9:66:f6:c5:68:82:9b:a4:81:06:df:b3:55:fe:8c:cc:
         5e:98:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org