Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139302e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3139302e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          PVA6vvzgJaXvOhIXb/hKBqpICX4KoZj/hM2kmirmr0I=
Subject key identifier:   DC:32:A3:66:94:C7:1A:6E:52:C8:A5:E9:C6:6B:0E:F2:E5:58:D2:E5
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       410A665D29023DE9A88E40E8DCB482011CEFDFA1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139302e302f32342d3234203d3e20323131353835.roa
Signing time:             Tue 21 Jun 2022 20:29:39 +0000
ROA not before:           Tue 21 Jun 2022 20:24:39 +0000
ROA not after:            Tue 20 Jun 2023 20:29:39 +0000
asID:                     211585
IP address blocks:        216.122.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0a:66:5d:29:02:3d:e9:a8:8e:40:e8:dc:b4:82:01:1c:ef:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 21 20:24:39 2022 GMT
            Not After : Jun 20 20:29:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:07:cd:92:d1:cd:56:02:3d:11:9c:ef:d2:
                    29:94:1a:d4:44:58:a8:d9:1a:3d:57:75:6e:9a:e1:
                    04:a1:96:b1:fa:88:24:5d:07:d4:15:9e:d2:98:bb:
                    ef:f1:fe:b2:0f:6d:a8:93:ec:71:94:08:d0:62:08:
                    42:a1:7d:d4:9d:10:5f:44:8a:b3:bc:d6:78:1d:ef:
                    c7:3f:e7:d0:92:30:80:14:b9:07:48:ae:a5:61:b6:
                    46:5b:dc:ca:35:24:13:d5:60:42:20:ef:52:c3:a4:
                    f7:c2:d1:fc:b4:3e:68:39:55:3f:7c:df:e9:f2:2a:
                    5f:41:4b:60:8d:86:4d:0d:62:3c:08:b0:3a:00:00:
                    48:49:33:76:88:33:ad:33:20:ae:cd:a1:e8:7e:7b:
                    b1:b7:e0:00:4a:2a:be:4e:00:13:91:47:e2:bc:2f:
                    66:ab:04:5d:29:e8:f2:6d:60:48:50:28:7e:7b:91:
                    b6:ee:5d:ae:a0:b0:d7:15:3d:46:92:88:3c:cb:31:
                    bb:aa:16:8b:b9:29:c1:22:27:dc:49:dd:a0:a6:76:
                    0d:75:5c:f6:97:ca:9f:76:2e:0b:d6:a6:21:0c:fe:
                    10:fe:47:13:a6:2d:b6:f5:f2:09:73:7e:82:d7:52:
                    58:31:aa:ba:5f:c6:82:8d:b3:03:d6:c7:6b:c3:a7:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:A3:66:94:C7:1A:6E:52:C8:A5:E9:C6:6B:0E:F2:E5:58:D2:E5
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139302e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:a5:e1:c8:dc:4e:f4:d7:a8:17:21:da:38:86:45:08:0e:
         51:36:88:6a:c2:d7:c2:a0:81:28:72:bf:1f:e3:40:26:17:cc:
         50:37:87:7c:f7:9f:f7:cf:8e:80:b7:a6:cd:59:61:68:e8:2c:
         91:19:70:7c:b7:ad:05:78:9d:b7:dd:c3:b6:85:cb:bc:13:60:
         db:48:a4:55:04:a6:74:a6:74:3e:d8:35:05:7b:d9:06:59:ea:
         37:89:d2:cb:a0:ee:93:66:2c:10:82:aa:20:c0:17:52:58:f3:
         d9:e8:74:3f:b2:de:ff:27:22:3b:af:7f:16:5b:f0:8b:b5:f4:
         ae:db:7e:83:9d:e4:1f:de:d2:f8:dc:b4:2f:26:1b:94:53:e1:
         b6:b8:3f:51:81:09:c2:e4:bc:df:de:90:07:1a:1d:af:20:10:
         95:3e:fa:52:fd:9e:89:e7:76:39:92:d8:c5:f8:59:2b:c2:49:
         1a:70:2e:50:28:c0:b0:fb:67:6f:0f:55:d4:b5:54:c6:9d:04:
         5c:22:68:f7:7d:f7:de:43:c4:0b:82:09:ec:f2:18:b4:5e:e6:
         33:12:38:8b:ca:ff:a4:33:76:40:da:96:2c:47:da:92:20:ed:
         a5:4c:83:1c:04:a6:98:fc:e1:77:23:bb:83:e8:de:94:d3:3f:
         96:dc:e8:dc
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUQQpmXSkCPemojkDo3LSCARzv36EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA2MjEyMDI0MzlaFw0yMzA2MjAyMDI5MzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTlDNzA3Q0Q5MkQxQ0Q1NjAy
M0QxMTlDRUZEMjI5OTQxQUQ0NDQ1OEE4RDkxQTNENTc3NTZFOUFFMTA0QTE5NkIx
RkE4ODI0NUQwN0Q0MTU5RUQyOThCQkVGRjFGRUIyMEY2REE4OTNFQzcxOTQwOEQw
NjIwODQyQTE3REQ0OUQxMDVGNDQ4QUIzQkNENjc4MURFRkM3M0ZFN0QwOTIzMDgw
MTRCOTA3NDhBRUE1NjFCNjQ2NUJEQ0NBMzUyNDEzRDU2MDQyMjBFRjUyQzNBNEY3
QzJEMUZDQjQzRTY4Mzk1NTNGN0NERkU5RjIyQTVGNDE0QjYwOEQ4NjREMEQ2MjND
MDhCMDNBMDAwMDQ4NDkzMzc2ODgzM0FEMzMyMEFFQ0RBMUU4N0U3QkIxQjdFMDAw
NEEyQUJFNEUwMDEzOTE0N0UyQkMyRjY2QUIwNDVEMjlFOEYyNkQ2MDQ4NTAyODdF
N0I5MUI2RUU1REFFQTBCMEQ3MTUzRDQ2OTI4ODNDQ0IzMUJCQUExNjhCQjkyOUMx
MjIyN0RDNDlEREEwQTY3NjBENzU1Q0Y2OTdDQTlGNzYyRTBCRDZBNjIxMENGRTEw
RkU0NzEzQTYyREI2RjVGMjA5NzM3RTgyRDc1MjU4MzFBQUJBNUZDNjgyOERCMzAz
RDZDNzZCQzNBNzNGM0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmccHzZLRzVYCPRGc79IplBrURFio2Ro9V3VumuEEoZax+ogkXQfU
FZ7SmLvv8f6yD22ok+xxlAjQYghCoX3UnRBfRIqzvNZ4He/HP+fQkjCAFLkHSK6l
YbZGW9zKNSQT1WBCIO9Sw6T3wtH8tD5oOVU/fN/p8ipfQUtgjYZNDWI8CLA6AABI
STN2iDOtMyCuzaHofnuxt+AASiq+TgATkUfivC9mqwRdKejybWBIUCh+e5G27l2u
oLDXFT1Gkog8yzG7qhaLuSnBIifcSd2gpnYNdVz2l8qfdi4L1qYhDP4Q/kcTpi22
9fIJc36C11JYMaq6X8aCjbMD1sdrw6c/OwIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FNwyo2aUxxpuUsil6cZrDvLlWNLlMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM1Mzgz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6vjANBgkqhkiG9w0BAQsFAAOCAQEAM16l4cjcTvTXqBch
2jiGRQgOUTaIasLXwqCBKHK/H+NAJhfMUDeHfPef98+OgLemzVlhaOgskRlwfLet
BXidt93DtoXLvBNg20ikVQSmdKZ0Ptg1BXvZBlnqN4nSy6Duk2YsEIKqIMAXUljz
2eh0P7Le/yciO69/Flvwi7X0rtt+g53kH97S+Ny0LyYblFPhtrg/UYEJwuS8396Q
BxodryAQlT76Uv2eied2OZLYxfhZK8JJGnAuUCjAsPtnbw9V1LVUxp0EXCJo9333
3kPEC4IJ7PIYtF7mMxI4i8r/pDN2QNqWLEfakiDtpUyDHASmmPzhdyO7g+jelNM/
ltzo3A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org