Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa
File:                     3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          8xQG3b9uWB24aIjxfKx2+kk5Qd0aBcyiQGqks2LR2Fg=
Subject key identifier:   3A:6F:7F:29:66:EB:BF:3D:38:FF:BA:37:A1:C7:CF:EF:4E:FC:0B:AD
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       76DA6C60742BAEAE7A3B78A71C7EF7FD71E441A7
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 15 Jun 2022 10:07:46 +0000
ROA not before:           Wed 15 Jun 2022 10:02:46 +0000
ROA not after:            Wed 14 Jun 2023 10:07:46 +0000
asID:                     19437
IP address blocks:        216.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:da:6c:60:74:2b:ae:ae:7a:3b:78:a7:1c:7e:f7:fd:71:e4:41:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 15 10:02:46 2022 GMT
            Not After : Jun 14 10:07:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:61:78:18:85:e2:76:3f:7d:e6:ee:fc:06:
                    e6:f3:8b:86:d1:7e:bb:3e:07:e1:dd:f8:42:8d:df:
                    dc:24:6e:cd:71:10:b0:b7:16:b0:dc:27:3b:38:74:
                    4c:2d:07:e2:5f:de:e7:97:69:78:56:3c:8a:4f:8f:
                    5a:d9:0e:e8:67:4f:cf:74:bb:eb:8b:f8:c8:3e:50:
                    d1:3f:6b:54:5a:bb:ed:a5:ed:52:2b:10:1f:4a:36:
                    ca:ad:bd:71:80:cd:0e:07:31:38:a9:f0:07:1e:f2:
                    7f:81:3b:3a:bb:9a:46:78:c7:0e:73:84:18:0b:b5:
                    b3:51:3c:d6:31:50:b6:b4:1c:ac:b3:00:c6:92:e4:
                    f6:10:bf:84:a5:30:5d:47:69:15:4b:c1:72:bd:50:
                    84:63:52:d1:a9:8f:9a:c8:0b:ac:9d:0d:bc:71:d0:
                    ae:c6:7a:91:e8:a4:b4:37:57:64:80:be:26:bf:73:
                    bb:71:c9:f9:f6:0c:c1:22:b1:6e:35:c9:b9:f0:c0:
                    32:ec:1f:47:3a:33:35:d4:32:2e:c7:ac:bb:50:02:
                    de:5d:90:80:07:a3:58:b5:28:3b:f4:54:9c:2f:37:
                    2d:98:32:e6:75:5c:a2:e3:82:90:70:a8:cb:96:20:
                    8b:44:89:b4:19:47:7d:2d:9b:10:c7:4a:46:e6:9c:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6F:7F:29:66:EB:BF:3D:38:FF:BA:37:A1:C7:CF:EF:4E:FC:0B:AD
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:57:9f:f6:1d:5e:66:f7:39:2e:08:cc:a6:0e:92:83:08:73:
         b6:e9:40:23:55:8a:28:cc:b8:3e:fc:ad:d5:00:fa:5f:dd:96:
         a6:f1:e8:e1:e6:1a:78:ff:93:90:af:bb:87:8d:41:df:84:d5:
         ba:e8:3c:42:b2:34:11:9f:26:5b:e3:24:66:4f:7c:96:36:3c:
         a8:9b:77:da:51:42:14:03:94:ca:70:60:68:79:9e:83:80:3f:
         0b:a7:86:22:77:2d:23:05:4c:d5:ce:4e:38:eb:7d:c4:30:87:
         12:63:ff:0e:b2:03:7e:80:60:d5:b2:fd:eb:8e:ae:9f:7c:66:
         48:71:48:f4:db:59:4f:1b:cc:e6:f8:50:ac:73:23:72:71:53:
         56:1c:b7:e7:19:d3:e2:a7:9b:c9:5a:11:98:f6:c0:fe:2e:3d:
         3e:a2:02:8f:06:a7:6d:2b:83:99:79:4b:d9:62:7f:27:68:2d:
         3b:98:84:87:71:ec:84:6d:ff:dc:d0:87:1e:65:cb:46:96:fa:
         ec:8f:3c:dc:2d:ad:ae:32:79:4e:a5:21:e4:fd:e2:bf:91:5b:
         43:02:d5:25:6a:ab:36:6b:59:8d:2f:14:ca:ad:4a:cc:6e:46:
         a8:8d:7d:d6:db:b1:88:7a:64:30:63:e2:cc:7d:c6:f1:44:e2:
         4c:b2:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org