Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          LeROAsWSQ0kCAIoN6VIHiD3WPtshO1eEqoruesVLIzk=
Subject key identifier:   4F:85:FC:BF:C3:A6:D1:5E:05:86:CC:DD:E9:3B:DA:B3:BF:68:47:94
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       43DD1F110C289AD58BBB172D6C0144DE65733B35
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 05 Apr 2022 15:05:17 +0000
ROA not before:           Tue 05 Apr 2022 15:00:17 +0000
ROA not after:            Tue 04 Apr 2023 15:05:17 +0000
asID:                     212238
IP address blocks:        192.109.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:dd:1f:11:0c:28:9a:d5:8b:bb:17:2d:6c:01:44:de:65:73:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  5 15:00:17 2022 GMT
            Not After : Apr  4 15:05:17 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:96:59:15:b5:ba:22:99:c5:7f:dc:cb:13:
                    54:82:d8:28:8e:81:f0:08:14:4a:0a:7f:bb:cd:a1:
                    24:3b:03:41:ce:58:a6:2b:32:bf:26:2d:83:69:96:
                    d0:85:05:68:d7:e3:97:be:c8:1c:af:35:9b:0e:3c:
                    01:3a:10:ae:b9:86:22:11:1a:5a:4a:4f:e6:9c:5a:
                    4e:70:f0:8c:ea:3d:ea:3f:75:8e:c7:ce:9b:4c:97:
                    ca:0b:43:ea:09:47:ca:29:9c:66:d6:a7:cc:a5:ef:
                    79:ad:41:83:f7:ca:b8:e3:07:13:8c:ee:4e:7d:65:
                    6a:9d:17:c7:15:86:ff:c6:16:2d:d9:31:f1:14:f6:
                    1b:c0:cd:b4:ab:30:19:25:65:72:a5:38:0c:79:1d:
                    f6:52:4a:60:b5:3e:76:21:64:35:fc:dd:7d:3e:9b:
                    ec:b8:93:c9:fb:cf:98:39:64:a7:74:7d:1b:f2:ca:
                    cb:5f:a5:3c:70:3a:b1:ce:40:83:b7:19:67:cd:6b:
                    02:ee:e8:16:e0:da:48:88:39:fc:56:c7:9c:9c:3e:
                    43:4e:46:69:26:62:3a:03:1c:99:4d:fc:7f:0b:59:
                    72:46:ca:f5:88:32:ba:d2:74:d1:19:ea:36:7a:04:
                    51:e3:19:17:1f:79:07:44:ad:f5:76:d4:ea:a0:16:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:FC:BF:C3:A6:D1:5E:05:86:CC:DD:E9:3B:DA:B3:BF:68:47:94
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:4e:2f:4f:04:37:a9:47:4a:e0:51:8d:7e:d3:e7:ec:2f:
         32:29:90:46:4e:59:1c:b0:a7:9e:cd:c8:f7:31:81:2c:64:32:
         98:64:6a:bf:56:fc:e2:e5:56:7c:81:60:9a:4b:e9:86:ca:cd:
         2f:7a:8d:44:02:88:8f:73:a8:6a:91:5e:f3:59:e8:60:bc:d7:
         97:31:15:d4:5c:39:f9:ad:d9:91:41:eb:95:64:ac:da:8e:de:
         e5:58:f0:a1:77:35:03:a4:f4:e2:c3:93:a7:98:01:12:f4:db:
         a0:ac:07:71:69:d4:30:46:d4:91:74:f7:c1:73:c2:af:2d:42:
         70:3b:e0:25:ed:5b:9a:1a:7b:ff:b3:d8:74:02:fc:34:2b:88:
         79:7c:fd:47:65:57:07:aa:9b:e2:33:69:93:b5:45:9e:2a:6f:
         74:8b:cd:df:3b:a0:41:b9:d2:43:89:39:5e:4b:78:90:44:db:
         7e:10:b2:3e:50:1a:cb:95:15:34:f6:d8:6a:30:48:b3:0a:a2:
         93:b3:17:41:d3:0f:05:ac:3b:7a:fb:58:b8:ad:c7:21:dc:13:
         93:e7:59:70:e2:60:5a:51:08:a8:72:a5:2c:12:db:cf:72:26:
         fd:96:9e:af:05:e2:c4:10:a7:98:3a:c5:48:63:c0:e5:82:d9:
         01:2a:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org