Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          HQdLcIQHKDLAxRwqyFU7PegDWsNnQHyvfxWmtncSn3o=
Subject key identifier:   9D:62:CD:EE:2A:83:8F:78:0C:08:58:88:46:81:9F:65:F7:CD:FE:29
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       6D52A3C84BD2E7388E68CCF8CEA064C333F75EB1
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Thu 27 Jan 2022 12:03:45 +0000
ROA not before:           Thu 27 Jan 2022 11:58:45 +0000
ROA not after:            Thu 26 Jan 2023 12:03:45 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:52:a3:c8:4b:d2:e7:38:8e:68:cc:f8:ce:a0:64:c3:33:f7:5e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Jan 27 11:58:45 2022 GMT
            Not After : Jan 26 12:03:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:1d:a4:19:ed:d7:c0:d6:0b:f7:1d:d4:f1:
                    74:cf:86:d6:58:7b:c2:b4:9f:2d:c5:70:e6:23:29:
                    54:92:b6:32:a6:64:6e:8a:14:d2:b0:6d:5e:bb:98:
                    31:0f:42:96:2c:d5:be:52:7f:0d:76:8b:16:0a:85:
                    65:a5:c7:92:f4:d7:c4:3f:6f:9e:5f:6d:a6:e5:ad:
                    d8:64:43:ac:f3:06:95:c1:ee:3b:05:ad:31:6d:71:
                    ee:8b:96:d8:74:3c:08:98:6c:5a:da:a8:fe:51:ce:
                    c0:31:40:dc:ee:fb:e1:34:67:ab:35:d6:d4:46:da:
                    a4:4b:85:30:e3:ec:c0:89:10:3c:1f:2d:dc:b8:18:
                    fe:b8:e5:fd:6b:5f:a4:6d:fc:28:1c:af:c3:f7:12:
                    73:d3:1e:d6:5f:39:38:26:94:15:a6:09:8f:dd:7e:
                    b6:1a:a0:f8:ef:35:f5:c5:8f:2a:9a:f6:c9:8a:53:
                    27:75:b5:25:0e:48:74:58:ac:37:ba:6d:3d:f8:87:
                    9a:36:ea:3e:f7:3a:5b:38:64:bd:e3:93:7e:90:8d:
                    fa:5e:14:db:70:ad:07:23:6b:fd:c4:f6:06:2c:9c:
                    30:27:6f:b3:c0:d1:4d:81:d9:c0:0e:63:03:62:02:
                    34:17:9c:0c:aa:2e:b6:3f:53:9e:08:92:7b:92:2c:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:62:CD:EE:2A:83:8F:78:0C:08:58:88:46:81:9F:65:F7:CD:FE:29
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2c:b3:a2:fa:b2:c6:df:38:21:15:65:d1:1a:73:87:f5:13:
         f3:60:ce:fe:61:f0:9c:a6:a6:6f:f9:a8:6d:56:37:ec:81:2a:
         68:f5:f2:da:50:52:85:9e:47:01:17:aa:5c:24:98:82:b3:2b:
         ce:52:3a:54:b2:97:7d:a5:6f:26:7c:5b:a5:96:68:c7:39:2b:
         3a:18:dd:74:52:2e:41:97:d8:10:d2:17:26:4a:5e:06:2d:a0:
         cb:24:9b:58:75:9c:30:f5:8a:d7:87:53:56:5e:2a:1e:72:45:
         ae:49:2c:a1:11:54:28:c7:ed:77:a3:6a:7f:2a:97:16:7b:f6:
         75:63:5f:21:db:65:02:5b:9b:55:a1:04:d8:7d:15:39:f5:a2:
         f1:4b:b1:be:fc:06:26:71:99:63:dd:ec:fc:53:fd:49:bf:2b:
         37:b0:bf:a8:d9:57:eb:8f:ec:bb:97:3d:45:4c:85:dd:40:32:
         a1:14:42:bd:76:09:e1:e9:1d:72:b5:b9:37:2d:33:d9:d7:0d:
         66:41:ca:2c:2d:ce:ff:e7:98:39:fd:66:d4:74:3f:7f:57:2a:
         db:28:b9:1d:a0:e5:db:9a:f1:aa:c3:77:d8:6d:a2:74:65:d9:
         83:a5:22:8d:e2:99:d5:3a:14:87:ea:69:2e:14:8c:6d:6e:31:
         bb:2b:a8:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org