Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e20313430393437.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e20313430393437.roa (raw, json)
Hash identifier:          p7NI1BWXWERLbkeScO+m37vB2jAqaEgz5FEgXuzMej0=
Subject key identifier:   72:82:6B:A4:79:F7:12:B0:13:36:2F:B7:6D:60:D7:50:5C:76:00:8D
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       46421218382EE88E77026B115BE4993AD861DFD1
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e20313430393437.roa
Signing time:             Thu 02 Jun 2022 04:13:19 +0000
ROA not before:           Thu 02 Jun 2022 04:08:19 +0000
ROA not after:            Thu 01 Jun 2023 04:13:19 +0000
asID:                     140947
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:42:12:18:38:2e:e8:8e:77:02:6b:11:5b:e4:99:3a:d8:61:df:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Jun  2 04:08:19 2022 GMT
            Not After : Jun  1 04:13:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:ea:ac:31:ad:a5:b4:d4:1a:75:3f:0c:3a:
                    3d:e7:e9:46:49:ef:a0:03:90:f3:ee:41:54:9b:bd:
                    08:53:82:a0:b5:d4:d1:46:c7:6f:5c:87:63:43:d3:
                    d0:59:25:f0:6d:d2:f1:03:29:94:13:45:05:1e:a9:
                    52:88:f3:4e:6c:2c:3b:8a:3a:90:bb:3d:f8:15:e6:
                    4f:6a:2b:bb:ec:e4:55:a2:9f:3e:78:d7:7c:5d:f5:
                    8b:3c:f1:d4:51:9c:d6:53:c9:07:02:9a:7a:73:68:
                    b4:ea:3a:26:00:e3:2b:7d:c5:a8:84:d6:68:a5:79:
                    0b:0b:09:b9:8d:72:45:cb:fb:65:f6:7b:b0:fd:d9:
                    1e:2f:d7:d4:4b:dc:4e:29:98:d4:3e:2a:86:3f:64:
                    e5:65:d7:94:dd:23:d5:61:74:32:3f:b0:f9:a4:e9:
                    47:6a:6d:43:57:49:7e:c8:52:02:60:70:d0:fd:18:
                    5b:1f:e2:dc:3f:87:a5:74:02:22:42:75:89:15:50:
                    86:2c:55:6f:8e:b4:e9:5b:ce:bf:c2:f6:4e:7f:de:
                    4d:fd:61:bd:5c:bf:ce:83:85:32:e3:ad:33:75:8d:
                    e7:a0:3c:68:e6:8d:3c:2f:64:45:fe:61:a9:07:4b:
                    8a:7c:9b:37:ab:20:26:59:cc:4b:96:a5:39:ba:89:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:6B:A4:79:F7:12:B0:13:36:2F:B7:6D:60:D7:50:5C:76:00:8D
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e20313430393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:3d:d1:49:df:3e:1e:44:bf:44:30:94:e3:0d:af:05:a8:dc:
         cb:98:19:a0:eb:c5:6e:61:9e:7a:32:9b:ec:f2:0f:4e:45:7d:
         69:ee:0e:fd:a5:a2:24:8e:1c:c8:31:b2:42:9b:49:94:08:ba:
         c7:15:07:cb:dd:49:de:fc:1a:28:af:f4:a6:4b:2c:82:58:a8:
         48:69:45:ca:9a:d4:d0:1f:b9:e1:2c:a4:65:5e:57:1b:f9:a0:
         c8:bb:55:1d:30:aa:2a:4e:c5:4a:27:f1:47:90:bd:a6:52:cb:
         75:98:57:ba:60:53:a6:e2:74:3c:f4:0f:cd:17:0d:7d:74:d1:
         f8:38:48:e1:df:4c:ec:97:d7:02:29:8d:e0:a8:78:75:ed:01:
         a0:3d:48:99:c2:4e:7a:86:90:b3:73:06:5d:c2:5a:7e:67:aa:
         b3:4e:b2:af:d6:81:25:6e:d8:16:26:56:d6:82:b1:d0:56:19:
         1e:62:10:28:d3:7f:e2:fe:c9:38:bb:38:5d:a3:e4:01:58:bf:
         62:b4:d5:f8:85:73:79:6e:f2:1d:3f:ed:40:03:63:e4:6d:65:
         c9:2f:8e:cd:0c:18:49:23:52:45:43:3e:ac:45:8a:ac:34:e4:
         51:15:29:74:90:c2:95:31:9f:7d:3a:ad:f9:8c:95:b8:bd:c1:
         f8:14:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org