Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3234203d3e203439333932.roa
File:                     3231362e3132322e3138382e302f32322d3234203d3e203439333932.roa (raw, json)
Hash identifier:          Z0zvZLMmNO8VkUrHDh/cIKbzQydhpbY0vCG+ZHDuA2Q=
Subject key identifier:   35:33:50:D2:A8:DC:9C:A9:95:5D:07:70:62:90:65:33:3C:09:9E:4F
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       76E07B9CDACF8AB009D457A96C36E1566D40BCE7
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3234203d3e203439333932.roa
Signing time:             Wed 23 Feb 2022 14:04:06 +0000
ROA not before:           Wed 23 Feb 2022 13:59:06 +0000
ROA not after:            Wed 22 Feb 2023 14:04:06 +0000
asID:                     49392
IP address blocks:        216.122.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e0:7b:9c:da:cf:8a:b0:09:d4:57:a9:6c:36:e1:56:6d:40:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 23 13:59:06 2022 GMT
            Not After : Feb 22 14:04:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:48:24:ba:8e:19:cc:e7:a3:cc:13:c5:98:f4:
                    7b:23:fe:4e:47:76:96:f5:58:82:17:0d:4d:ef:a3:
                    20:d6:27:f1:57:43:93:61:01:78:03:c8:05:7b:76:
                    1c:14:d2:8e:94:d7:92:2e:b4:d7:90:98:44:6a:c7:
                    de:11:e3:66:32:7e:64:1f:1c:cc:35:89:a3:be:3f:
                    57:6b:66:d6:cd:b1:4c:a0:64:04:8d:77:b0:de:03:
                    26:a8:4f:ab:e3:26:2c:29:a8:39:7b:69:6e:3e:33:
                    e3:b5:2a:8e:72:52:d3:77:65:1b:bc:c2:a2:be:67:
                    51:15:b4:f5:4e:a8:bf:91:20:b0:8c:a0:a9:b4:fd:
                    64:d6:97:53:02:47:c9:92:6b:38:a6:c6:6b:37:36:
                    c2:57:87:d6:7b:ef:25:b3:a9:52:95:be:b0:ce:de:
                    c1:68:dd:91:31:d1:9a:6a:9b:c2:3a:f1:25:7a:55:
                    06:b0:3d:89:33:a8:42:0d:a3:06:cb:f4:55:f0:17:
                    85:b5:75:0d:52:67:70:07:89:60:55:67:46:40:77:
                    d5:71:ed:69:d5:a4:db:b5:f5:1e:5e:ca:34:ce:cb:
                    ca:36:13:20:9f:94:59:ba:35:5a:f0:c4:00:f5:e0:
                    86:90:81:f0:1d:82:b6:65:37:13:b2:d6:37:cb:37:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:50:D2:A8:DC:9C:A9:95:5D:07:70:62:90:65:33:3C:09:9E:4F
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3234203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:49:76:ff:3a:4f:65:28:37:ec:94:b5:72:1f:a3:fa:5e:94:
         17:7e:1d:d6:91:1b:7f:36:cc:81:46:de:ca:88:5c:58:5e:e8:
         91:ed:04:d4:df:be:9e:68:11:6a:23:88:2c:78:c6:a0:24:8d:
         8b:ab:c8:e9:b6:0a:df:77:c1:6d:4a:22:42:7f:0c:7d:a0:52:
         0d:78:f7:e9:78:7c:17:22:b3:e6:51:28:04:aa:30:bc:e5:65:
         03:f0:36:e1:27:a6:4a:4a:e9:04:20:11:df:e9:ca:a8:d4:69:
         aa:55:79:bd:c8:26:f3:67:44:88:6c:c8:61:10:b0:d2:42:30:
         29:93:c6:4a:e0:2e:59:3c:e1:db:fd:ef:d2:a9:92:52:23:1b:
         83:90:6b:ec:67:1d:1d:44:36:65:79:b9:6d:f5:d2:bc:9d:a1:
         65:18:78:8b:ac:60:f6:bf:47:50:5a:a6:5c:99:be:b0:ec:b3:
         58:96:01:a2:02:be:0f:d9:fc:09:c4:c3:b6:93:9a:9e:c5:7f:
         0d:f8:fa:16:ab:07:e8:70:9a:bc:c7:39:43:9d:ad:8e:90:9c:
         f8:38:3e:1d:ba:5d:95:6c:52:e3:53:90:81:50:3b:a4:91:d6:
         35:07:47:d2:cf:44:77:7b:8b:f7:cd:31:f3:52:b2:86:7c:76:
         1b:54:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org