Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa
File:                     3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          /3RgFlN3AtL06Npfq82aLYbYWvU+f0rO3oBT/IlFSmw=
Subject key identifier:   53:F4:F5:23:97:D9:45:FE:35:72:EC:AA:2F:79:3A:55:F4:D5:CF:B8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       09774B4C1079D9B38341A4E9015104ABAFDC1521
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa
Signing time:             Wed 22 Jun 2022 03:37:35 +0000
ROA not before:           Wed 22 Jun 2022 03:32:35 +0000
ROA not after:            Wed 21 Jun 2023 03:37:35 +0000
asID:                     207326
IP address blocks:        216.122.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:77:4b:4c:10:79:d9:b3:83:41:a4:e9:01:51:04:ab:af:dc:15:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 22 03:32:35 2022 GMT
            Not After : Jun 21 03:37:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:cb:e6:15:c9:7a:07:da:e5:97:5a:88:02:
                    f9:c1:5c:a8:0c:8d:13:da:5a:f4:68:0c:a1:bb:22:
                    08:83:de:fb:76:4d:e1:30:82:2b:06:4f:24:1f:72:
                    f2:45:10:aa:a1:3f:43:10:ca:52:98:90:eb:a4:db:
                    89:56:0a:9a:10:1b:b0:17:47:6b:6d:55:3c:42:35:
                    7d:45:fd:21:ce:ea:79:93:4c:01:9c:a6:d0:4b:66:
                    b7:b8:ad:be:d2:93:21:c6:e8:97:06:4a:27:28:14:
                    a8:42:3b:59:5f:67:ac:94:1f:40:64:5f:2a:be:ef:
                    c4:62:b8:28:96:0d:20:90:d8:fa:1e:f0:0d:58:8e:
                    b8:31:5e:50:f6:a5:c0:6a:d6:f1:50:01:32:0e:22:
                    ee:e6:c9:9b:df:b4:ac:a9:8a:cb:e7:81:44:5f:3e:
                    33:34:eb:ba:fe:ce:dd:1c:0e:3e:2e:34:d5:d8:dd:
                    4d:94:89:43:98:2a:64:f1:a6:6c:12:d8:74:46:15:
                    7b:42:4a:e5:6c:1e:99:4e:ae:96:db:42:ae:6e:5a:
                    c4:76:05:36:88:44:7f:e4:59:e0:01:7b:d6:8f:dd:
                    0b:b6:87:9a:1a:a4:0e:bf:03:0d:0e:bc:e3:fe:cd:
                    86:c4:0b:85:05:ec:ec:13:4f:f9:d5:bb:95:10:d8:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F4:F5:23:97:D9:45:FE:35:72:EC:AA:2F:79:3A:55:F4:D5:CF:B8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:09:e2:0c:f1:52:b9:09:d0:bb:2a:58:80:e3:8d:e2:9f:89:
         be:b4:d9:9f:45:9b:f1:85:bc:65:ef:c6:ff:9f:03:e9:ad:34:
         66:94:7f:71:f6:dc:98:36:28:6c:99:2c:d4:ad:cc:66:d8:44:
         bf:c4:4c:ad:2c:a8:03:3c:0d:00:d0:82:f1:7b:c6:70:38:f3:
         4e:69:c7:76:b3:b4:c5:7e:af:98:d6:cc:55:15:95:e3:ca:9f:
         00:ff:cb:d2:bb:f6:a7:db:c1:da:38:43:3b:a4:a6:f0:2d:bd:
         c9:04:77:60:9e:9a:a8:f6:8e:e5:43:a1:92:98:d7:6e:28:75:
         83:76:17:b2:f9:38:26:7d:8a:9f:34:0e:5d:3b:41:bf:91:73:
         6d:28:93:cb:ed:35:17:42:88:9b:e3:cb:80:d0:75:76:13:f9:
         f8:bd:17:35:d9:19:a0:12:a8:e1:67:3a:63:8f:64:22:a4:4a:
         58:ee:2a:be:82:ac:79:51:97:ce:e7:53:9d:63:a2:3a:1a:7c:
         54:34:92:3c:4c:b3:b1:51:42:98:e9:9f:56:cf:5b:07:72:e7:
         4c:7b:8c:91:fc:5f:87:66:19:b5:e3:07:43:35:82:29:0b:5f:
         8a:e5:15:84:5d:b6:e9:4e:2f:97:67:66:bf:a2:e9:b3:75:0a:
         0d:a8:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org