Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa
File:                     3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ZystQWb2szGtVP+lgzwLDPu8BT0AfJ89F2Kt5xpDJTg=
Subject key identifier:   2F:38:41:75:55:95:72:AC:10:FC:07:DE:EE:A4:25:44:C8:AE:15:66
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       0CE587041CF45DF7F2B617A3F047B0D8B230F87C
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 13 Apr 2022 06:51:28 +0000
ROA not before:           Wed 13 Apr 2022 06:46:28 +0000
ROA not after:            Wed 12 Apr 2023 06:51:28 +0000
asID:                     61317
IP address blocks:        192.109.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e5:87:04:1c:f4:5d:f7:f2:b6:17:a3:f0:47:b0:d8:b2:30:f8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr 13 06:46:28 2022 GMT
            Not After : Apr 12 06:51:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:30:2d:0e:c0:ec:32:fd:0c:1b:6a:da:ea:
                    b4:ce:e9:f4:08:67:d7:c7:84:94:ea:4b:6f:ea:a0:
                    81:27:a8:5e:68:cf:69:c5:45:b7:a3:2e:42:aa:4d:
                    68:2d:0d:fa:b3:d6:5d:5c:f4:b1:3c:fa:f0:3f:45:
                    37:e7:d5:3f:69:50:97:61:4c:56:fd:dc:65:02:4a:
                    09:c7:d0:a8:a2:02:df:f9:2d:ff:e0:a2:92:95:cc:
                    64:d8:e8:49:66:09:c8:84:e4:26:33:e2:ac:89:17:
                    ac:50:68:2e:88:a7:be:82:6b:b3:fd:6a:0c:7c:49:
                    23:d6:ff:62:9e:84:07:78:44:00:a8:60:df:b7:64:
                    4d:b8:eb:13:25:48:b7:ac:47:1f:07:f6:90:e3:08:
                    be:df:bc:69:10:0d:a9:65:37:6f:91:82:aa:1d:31:
                    f7:f5:1f:d1:ee:87:74:9a:d2:a2:f7:4d:8d:5b:4f:
                    8c:9f:ec:73:41:03:55:b5:a1:f7:33:5f:46:e8:ae:
                    f7:7d:71:5a:9f:a7:e1:41:8d:61:13:ac:57:48:1f:
                    5d:4a:04:7c:4b:cb:4c:3f:84:cf:43:2f:99:88:04:
                    00:41:45:c8:6d:1c:69:ef:4c:a4:a7:90:04:59:bd:
                    9b:5c:66:9e:8d:42:5b:05:33:49:3f:90:06:f4:d2:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:38:41:75:55:95:72:AC:10:FC:07:DE:EE:A4:25:44:C8:AE:15:66
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3136352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:a8:45:a1:ec:69:e7:5b:23:d1:f1:f6:e0:22:ec:12:ab:55:
         b1:a2:29:38:17:18:88:74:62:c9:97:05:d8:41:31:1e:6d:9a:
         57:1d:5e:dc:fd:d8:a3:3d:d1:c5:4e:cc:1c:fd:c2:84:7a:0f:
         1f:05:c2:3a:bb:44:50:fb:a5:7c:8b:2d:f1:3c:f8:d1:ea:af:
         dd:6a:27:42:91:60:90:8e:25:df:df:d1:1e:ac:f3:62:3c:94:
         56:8e:ab:11:13:39:ea:f6:70:6a:30:55:e0:eb:dd:4b:66:c2:
         ca:43:5a:ab:88:ca:37:0f:e7:f5:38:ea:be:cd:55:f8:21:03:
         b0:6c:e9:65:6a:8a:c6:83:30:e6:09:36:02:74:77:ec:e7:f7:
         e5:35:33:d3:f9:d8:cb:fc:fc:5b:cc:0c:72:05:bb:67:e1:8d:
         8c:f1:13:82:6d:01:f1:90:41:f7:3f:b1:06:f4:c1:99:7f:49:
         0e:3b:90:d0:fc:f4:6e:bf:60:01:d8:44:00:3d:d4:2f:f9:42:
         7b:f1:13:65:ec:fc:99:85:e6:54:3f:2e:cf:17:21:1a:93:76:
         fd:91:04:c7:bb:2d:36:50:df:f2:75:e1:14:c0:5f:92:d3:65:
         a2:0a:e3:78:18:ac:55:1f:70:9c:32:6b:80:b9:4c:30:f7:06:
         11:f5:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org