Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203239383032.roa
File:                     3231362e3132322e3138372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          B5jyYflml/YRg634UhM7dQTRUwRlRdhaZQzgxqeqYYQ=
Subject key identifier:   8B:88:A7:74:C0:13:1B:C3:DF:CD:88:8C:F0:F0:A4:F7:C6:E2:DC:44
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       2BA7E421FFD0595EAD8A7D57E22D530363A15A4A
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 10 May 2022 18:14:52 +0000
ROA not before:           Tue 10 May 2022 18:09:52 +0000
ROA not after:            Tue 09 May 2023 18:14:52 +0000
asID:                     29802
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:e4:21:ff:d0:59:5e:ad:8a:7d:57:e2:2d:53:03:63:a1:5a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 10 18:09:52 2022 GMT
            Not After : May  9 18:14:52 2023 GMT
        Subject: CN=3082010A0282010100EBAD4E81F92BDEF7012784C0CA0A6332F31B3B0F7863DC3B71A81025CD91905CBF8BB451C8C743DD65764E2C7A4FD5924988E98ECE3793C9561FB7219177DCF1AE97613075057F8DB692190F383903C6FEEAAB4655976671AA03AFE163634992B7AA5EDAB7F278A429472F480F9C2792FD9B4B6F067095402F4A5815DC94357059114987A0B1255291E8AACFAC6ADAC2613E9F49C6B62AECC3A6FB158C429D5ADA0F74148C656972F72EAB6C955E8ED8EC18274493AE7D5FBADDFECB5DAD8202F355A17595BC1C2A53EA88F4F9C672B453C39F67AC7992DE55179B095DB59E1CD70C618EE6D7D5276935AA72FCD5F7FF758F91D0E66D97A0F636F70261EE17BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ad:4e:81:f9:2b:de:f7:01:27:84:c0:ca:0a:
                    63:32:f3:1b:3b:0f:78:63:dc:3b:71:a8:10:25:cd:
                    91:90:5c:bf:8b:b4:51:c8:c7:43:dd:65:76:4e:2c:
                    7a:4f:d5:92:49:88:e9:8e:ce:37:93:c9:56:1f:b7:
                    21:91:77:dc:f1:ae:97:61:30:75:05:7f:8d:b6:92:
                    19:0f:38:39:03:c6:fe:ea:ab:46:55:97:66:71:aa:
                    03:af:e1:63:63:49:92:b7:aa:5e:da:b7:f2:78:a4:
                    29:47:2f:48:0f:9c:27:92:fd:9b:4b:6f:06:70:95:
                    40:2f:4a:58:15:dc:94:35:70:59:11:49:87:a0:b1:
                    25:52:91:e8:aa:cf:ac:6a:da:c2:61:3e:9f:49:c6:
                    b6:2a:ec:c3:a6:fb:15:8c:42:9d:5a:da:0f:74:14:
                    8c:65:69:72:f7:2e:ab:6c:95:5e:8e:d8:ec:18:27:
                    44:93:ae:7d:5f:ba:dd:fe:cb:5d:ad:82:02:f3:55:
                    a1:75:95:bc:1c:2a:53:ea:88:f4:f9:c6:72:b4:53:
                    c3:9f:67:ac:79:92:de:55:17:9b:09:5d:b5:9e:1c:
                    d7:0c:61:8e:e6:d7:d5:27:69:35:aa:72:fc:d5:f7:
                    ff:75:8f:91:d0:e6:6d:97:a0:f6:36:f7:02:61:ee:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:A7:74:C0:13:1B:C3:DF:CD:88:8C:F0:F0:A4:F7:C6:E2:DC:44
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:94:a7:82:32:3b:7a:fc:14:bd:ca:a6:a3:4f:ba:5b:4c:75:
         9b:0b:9e:4b:ef:e9:18:6d:2b:f1:b4:e4:04:d2:15:11:7e:65:
         6b:1c:0f:8b:d4:40:49:9b:03:64:cd:c6:50:87:30:cf:7e:46:
         6d:bb:4f:13:ba:8f:06:37:39:be:6a:3b:16:2d:78:11:bd:32:
         d1:b6:a3:b0:1d:7a:d3:48:4c:23:ab:e4:8f:25:21:f9:75:10:
         0c:7b:8d:c5:13:2b:08:6f:a5:4a:3f:75:be:90:2f:25:51:90:
         61:c1:43:8f:dc:64:6a:d7:3b:af:71:6c:94:98:63:87:84:35:
         3b:c3:e4:b0:ed:fc:b9:e5:a0:db:4d:98:7d:ee:f2:73:0a:3a:
         ac:d4:1f:d3:55:df:1e:50:36:57:82:8e:92:f2:b0:ed:6e:40:
         6c:b3:fa:bc:f1:04:73:1f:3b:43:3f:f2:bc:c0:7c:fb:93:86:
         76:13:d1:4e:06:55:1b:ef:34:b3:c4:df:a5:38:48:a9:ec:66:
         50:f6:ff:94:50:d9:8c:7b:4c:85:50:61:57:6d:ae:9b:f9:3c:
         a5:94:37:1b:dc:bb:32:0b:da:ce:7e:8b:d4:0a:b0:d8:43:f3:
         e0:7c:1d:0c:a5:24:26:23:3f:38:54:3d:47:49:e9:11:de:c2:
         f9:09:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org