Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20343030333834.roa
File:                     3231362e3132322e3138352e302f32342d3234203d3e20343030333834.roa (raw, json)
Hash identifier:          NR3aHE9n7Oe6vv9zoPudU/1x+cLFH39CJAxSq1AdwB4=
Subject key identifier:   29:C7:DF:62:79:2B:C1:CA:D0:03:5C:46:85:B1:F8:4A:AC:F7:48:C1
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6DC1EF80661A2CA47E343139B61A77D19868A684
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20343030333834.roa
Signing time:             Wed 27 Apr 2022 15:25:08 +0000
ROA not before:           Wed 27 Apr 2022 15:20:08 +0000
ROA not after:            Wed 26 Apr 2023 15:25:08 +0000
asID:                     400384
IP address blocks:        216.122.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c1:ef:80:66:1a:2c:a4:7e:34:31:39:b6:1a:77:d1:98:68:a6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 27 15:20:08 2022 GMT
            Not After : Apr 26 15:25:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:e4:f1:2c:d0:8d:c5:75:a4:2d:1c:fa:ca:
                    ab:2d:8d:ed:f1:49:dc:d6:5f:d5:ec:38:d2:dd:d4:
                    ea:f1:85:06:98:54:45:23:56:10:56:e4:ee:b4:c7:
                    3b:5f:07:56:4f:da:bc:b1:af:d2:34:2c:ba:cf:d4:
                    1f:08:58:f5:dc:27:6a:cc:84:5b:eb:8f:39:06:e2:
                    06:8c:c7:84:ef:89:3d:89:2b:8d:b3:98:73:dd:21:
                    5e:47:09:e5:05:77:dc:a2:00:2c:91:db:cf:7c:76:
                    fa:6a:42:0f:07:65:7a:f9:29:59:76:6d:11:bb:c8:
                    09:6a:27:bc:34:4d:54:56:7a:62:65:87:53:bc:de:
                    92:63:1b:44:56:5e:eb:66:5d:cc:6c:95:20:34:2b:
                    0f:c7:46:53:89:6c:91:b6:8b:97:2e:9e:a2:43:29:
                    af:11:d8:81:a0:16:a1:ee:8b:c7:4c:20:b6:6b:5e:
                    7e:d1:d3:34:40:e8:a4:85:47:34:5c:29:ee:ae:d0:
                    f9:62:aa:89:b0:2d:08:c0:e8:37:82:6b:16:47:0f:
                    75:1c:cc:e5:03:28:f2:c9:4a:bd:a9:4b:ad:12:21:
                    99:c4:d7:0e:a9:39:a6:a3:c3:45:14:8c:f1:c1:49:
                    7c:e9:37:b3:df:a9:7c:50:6b:0e:cb:ef:20:b0:9f:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:DF:62:79:2B:C1:CA:D0:03:5C:46:85:B1:F8:4A:AC:F7:48:C1
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20343030333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:9b:c3:f4:c6:ab:d9:89:a1:7b:e6:c6:b6:95:42:05:a8:
         3d:ce:e4:dc:7f:a1:8d:e8:c2:53:49:03:0e:57:07:f6:df:08:
         b8:b6:a4:5b:ba:5a:73:6a:9a:04:77:16:f1:5d:af:3b:07:4f:
         64:55:85:c0:a1:50:a8:bb:b7:92:fb:44:37:ab:3c:5d:37:d8:
         5f:df:6e:65:c0:c7:c6:42:db:02:b4:78:65:65:8b:96:70:60:
         32:38:97:74:5b:50:52:1b:42:29:f9:0a:e3:eb:22:b8:e9:a6:
         e1:1f:3a:7a:27:9e:f9:fc:92:59:7a:62:fb:ad:9d:80:38:7f:
         f0:07:2d:e2:cf:e8:a8:87:38:ae:fe:22:d8:0f:80:c6:21:7a:
         5a:a1:48:31:41:f0:73:5f:08:f2:c5:19:c1:75:99:40:ec:45:
         df:27:e3:bc:b1:a1:f1:5b:20:f0:95:99:e0:ca:5b:0b:e8:85:
         d8:99:b9:c6:54:8c:5d:ec:ce:67:a9:da:0a:1c:b7:c4:09:45:
         27:bc:56:85:d4:f2:c7:30:ea:00:d5:1a:d6:bc:87:cf:7a:4a:
         62:95:72:9c:dd:47:02:d7:45:a6:7d:d0:e7:aa:ec:0c:35:4d:
         74:3f:2d:91:c8:bb:58:71:aa:22:f2:99:28:96:51:a4:ef:0f:
         2b:3e:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org