Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1zOKdZEo8FixLlcDWtbEMb8LuOY8aB0kmTJ33/7zaDo=
Subject key identifier:   6B:D1:33:77:DD:7C:D0:BA:DE:A0:2D:AA:AD:AB:F5:D1:AD:1C:22:28
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       3900BC5A926C9533FB0E992BE8A0BDA65003CE45
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 13 Apr 2022 06:50:45 +0000
ROA not before:           Wed 13 Apr 2022 06:45:45 +0000
ROA not after:            Wed 12 Apr 2023 06:50:45 +0000
asID:                     61317
IP address blocks:        193.149.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:00:bc:5a:92:6c:95:33:fb:0e:99:2b:e8:a0:bd:a6:50:03:ce:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr 13 06:45:45 2022 GMT
            Not After : Apr 12 06:50:45 2023 GMT
        Subject: CN=3082010A02820101009F9CB150FD0752F12447DDAEA2A4F5FA9E49172D9142C34B30EF8CFF2A7FF6234AF6AC9DE0C5F98BD9888BC117969BD03780964891D418BE79CE16F1988234CC736AC1C24D966B0CF47C6BB7BDED709D587D423B0A49E881F59E6EF41C35810E018642A4B7A8B01D47C7758D66B0D5CEE85F89C2F69B27F9BC216B340194E13E97012B1E4BC577F56ED1ED498D14C83C8D89CEE78A7F1582EEA182458482B04F30C3853E287102F65235CF7DB25FD83FFC85CADC9FFF8F28AF325E9C27C70702643EE31B29BB9AF49DEA0F0B636C926D80502E5F68218CC4ADBD3B94BD689EE81CAEFDD0F66FCE7963485D499CC72559387D71BEC8018090A23318FA46FC04950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:b1:50:fd:07:52:f1:24:47:dd:ae:a2:a4:
                    f5:fa:9e:49:17:2d:91:42:c3:4b:30:ef:8c:ff:2a:
                    7f:f6:23:4a:f6:ac:9d:e0:c5:f9:8b:d9:88:8b:c1:
                    17:96:9b:d0:37:80:96:48:91:d4:18:be:79:ce:16:
                    f1:98:82:34:cc:73:6a:c1:c2:4d:96:6b:0c:f4:7c:
                    6b:b7:bd:ed:70:9d:58:7d:42:3b:0a:49:e8:81:f5:
                    9e:6e:f4:1c:35:81:0e:01:86:42:a4:b7:a8:b0:1d:
                    47:c7:75:8d:66:b0:d5:ce:e8:5f:89:c2:f6:9b:27:
                    f9:bc:21:6b:34:01:94:e1:3e:97:01:2b:1e:4b:c5:
                    77:f5:6e:d1:ed:49:8d:14:c8:3c:8d:89:ce:e7:8a:
                    7f:15:82:ee:a1:82:45:84:82:b0:4f:30:c3:85:3e:
                    28:71:02:f6:52:35:cf:7d:b2:5f:d8:3f:fc:85:ca:
                    dc:9f:ff:8f:28:af:32:5e:9c:27:c7:07:02:64:3e:
                    e3:1b:29:bb:9a:f4:9d:ea:0f:0b:63:6c:92:6d:80:
                    50:2e:5f:68:21:8c:c4:ad:bd:3b:94:bd:68:9e:e8:
                    1c:ae:fd:d0:f6:6f:ce:79:63:48:5d:49:9c:c7:25:
                    59:38:7d:71:be:c8:01:80:90:a2:33:18:fa:46:fc:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D1:33:77:DD:7C:D0:BA:DE:A0:2D:AA:AD:AB:F5:D1:AD:1C:22:28
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3134392e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:9e:57:d5:fa:81:88:32:b3:2a:c6:14:fa:82:ab:7a:f4:
         6a:1f:1f:c0:07:54:14:1b:ea:58:85:b1:f5:70:49:aa:46:ea:
         0e:34:d2:fb:90:c9:99:08:3c:ba:67:4a:97:82:8e:a4:37:e3:
         5d:24:15:38:87:37:25:d8:0c:7c:bf:f9:ad:3d:2c:67:91:3e:
         80:62:de:a2:3c:b6:53:82:31:22:b3:6d:a5:29:9a:57:b6:c7:
         6f:b2:9f:e1:bb:2c:e5:eb:6f:57:37:aa:b6:6f:eb:28:92:1a:
         dc:07:22:ae:15:e2:df:c3:60:19:22:27:f4:82:ea:96:16:c7:
         a8:54:14:97:48:e3:4d:6d:07:d3:52:24:08:10:a5:4c:57:4c:
         74:70:a0:39:94:c9:3e:00:45:1b:60:1b:e2:6b:86:ae:74:59:
         b5:9b:01:01:36:6e:b7:02:7b:c6:fc:6f:4e:e4:92:0d:eb:30:
         c4:e1:38:a9:65:8e:fb:17:05:c5:52:2a:04:96:81:1f:2f:d2:
         87:a1:d0:70:af:ac:28:4a:2c:5b:dc:c6:08:0f:b5:da:75:90:
         b5:72:08:cf:e6:d2:35:9b:7a:fe:26:dc:90:59:fd:4b:38:08:
         b5:c4:c4:62:2e:d8:37:42:40:e0:e5:c0:74:3f:e3:44:68:06:
         08:3f:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org