Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203430363736.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          Dj/JKcpqRuIJT+ODx5VldBM0UalxAwdFqo5L8jFMI1k=
Subject key identifier:   52:5E:25:0F:5A:E7:35:C3:9A:92:E4:C0:8D:86:3C:BB:DF:1C:A2:50
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       5161597F814597E1E16659BBCBAE0988FEC6FDC6
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 04 Apr 2022 19:54:21 +0000
ROA not before:           Mon 04 Apr 2022 19:49:21 +0000
ROA not after:            Mon 03 Apr 2023 19:54:21 +0000
asID:                     40676
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:61:59:7f:81:45:97:e1:e1:66:59:bb:cb:ae:09:88:fe:c6:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  4 19:49:21 2022 GMT
            Not After : Apr  3 19:54:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:c4:0d:85:71:d3:15:f5:9a:5f:f0:ca:26:
                    8b:59:ed:8d:a2:7c:ef:a4:e8:2d:6a:2b:e5:d6:4c:
                    26:1f:2c:69:2a:46:5a:02:7b:55:9c:16:b0:e8:04:
                    1e:1d:24:6a:73:8a:b9:1c:c4:45:e3:cc:f4:ac:49:
                    dc:e1:6a:e4:a8:94:c9:4e:56:8f:7c:ca:7d:ab:42:
                    20:34:a0:65:3c:d8:d9:55:d4:23:9e:86:2f:8f:9c:
                    32:91:c1:2c:73:7d:fc:0b:45:9b:29:65:7c:94:57:
                    87:80:69:84:05:d5:9b:70:6a:a6:b9:f6:61:99:10:
                    8b:c5:2a:68:c5:02:c9:1e:f7:78:0f:64:98:f6:df:
                    a7:68:04:ea:08:56:b8:53:0d:eb:70:4d:33:fe:76:
                    10:85:e6:d1:f3:ea:2b:9a:af:79:19:02:94:91:f2:
                    36:f7:f0:88:d2:94:4c:e0:ed:59:c4:e3:a3:5c:4a:
                    34:d0:af:c5:cf:94:68:a1:00:6c:9d:f6:dd:54:73:
                    59:2d:b6:f4:94:24:6e:f3:22:ec:81:5a:34:e5:b4:
                    03:37:4a:72:a9:22:9e:6f:8e:0b:08:b1:51:93:b8:
                    e0:87:16:a5:0a:47:23:40:06:fb:31:35:a9:d3:31:
                    2c:40:54:4d:7f:58:5c:0a:d6:01:ac:32:7a:93:5a:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5E:25:0F:5A:E7:35:C3:9A:92:E4:C0:8D:86:3C:BB:DF:1C:A2:50
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:85:ae:a8:e0:a1:7e:89:30:cb:08:e4:ab:94:c6:98:dc:
         9f:e4:fe:16:a2:84:eb:5c:bf:73:db:b4:d7:00:f8:42:80:03:
         e2:f5:12:2f:9f:54:cb:2d:3b:a7:98:34:15:60:97:c7:7e:ed:
         c8:0d:dc:4b:5f:fa:77:0c:a8:7e:9b:67:26:00:6b:fd:d5:ad:
         1c:98:e7:9d:9b:c7:90:20:98:6b:18:9c:59:c6:1d:71:bc:bb:
         ab:93:93:47:a5:8e:19:c5:f1:60:ba:1d:1b:63:f3:52:41:d9:
         35:7b:06:06:9f:fe:93:49:d7:b6:67:84:79:dc:91:e5:7b:a4:
         9a:b2:19:30:3c:51:31:a5:52:70:4f:42:24:43:8c:10:5f:b0:
         46:ff:2b:25:d5:fd:56:af:03:d6:9b:61:ff:7d:0a:a8:06:ed:
         fb:14:78:7e:73:40:61:94:cb:1f:24:f7:a1:a3:b8:f8:38:f1:
         ae:ce:e5:78:de:eb:70:28:33:cf:42:65:99:82:9d:70:87:93:
         db:95:9a:5b:8b:be:ed:e2:99:d4:f2:6e:04:1a:e1:86:62:4d:
         34:ee:18:df:1a:27:33:c3:62:f2:f7:80:b9:70:43:55:90:be:
         76:7a:37:19:0e:7a:30:66:86:cc:01:07:50:0b:76:52:cb:11:
         bb:8a:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org